|
Log-Analyse und Auswertung: Tastauren lautstärkeregler funktoniert nichtWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
13.11.2013, 13:15 | #1 |
| Tastauren lautstärkeregler funktoniert nicht Hallo ich habe eine USB Tastatur, welches einen lautstärke regler hat. Allerdings funktoniert es seit einer Woche nicht. Immer wenn ich erst den Usb Stecker rausnehme und dann wieder einstecke höre ich was. Aber sobald ich den Rechner auschalte bzw. neustarte höre ich garnichts, dann muss ich wieder den stecker rausziehen. Woran könnte es liegen, könnte sich ein Rootkit in die registry eingenistet haben und was verändert haben oder auch ein Trojaner? Könntet ihr mir bitte helfen? Danke im voraus. Geändert von ertanal (13.11.2013 um 13:28 Uhr) |
13.11.2013, 14:36 | #2 |
/// the machine /// TB-Ausbilder | Tastauren lautstärkeregler funktoniert nicht Hi,
__________________schon mal ein anderes Keyboard versucht oder mal dazugehörige Treiber/Software neu installiert?
__________________ |
13.11.2013, 18:15 | #3 |
| Tastauren lautstärkeregler funktoniert nicht @ Schrauber , ja die Treiber sind aktuell glaube ich, im Gerätemanager sieht zumindest alles in Ordnung aus. Aber ich werde mal trotzdem einen Treiber installieren.Könnte es ein Rootkit sein, sollte ich ein scan machen oder die registry ändern?
__________________ |
14.11.2013, 09:55 | #4 |
/// the machine /// TB-Ausbilder | Tastauren lautstärkeregler funktoniert nicht Die Chance das eiN Rootkit den Lautstärkeregler deines Keyboards belangen will ist ungefähr so groß wie en 6er im Lotto, zweimal hinter einander, den man dann mit 20 Top-Models feiert
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.11.2013, 11:53 | #5 |
| Tastauren lautstärkeregler funktoniert nicht @ schrauber, was meinst du damit? |
15.11.2013, 09:56 | #6 |
/// the machine /// TB-Ausbilder | Tastauren lautstärkeregler funktoniert nicht Das es faktisch nahezu unmöglich ist dass Du ein Rootkit hast, nur weil die Lautstärke an dem Keyboard nicht mehr geht. Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ --> Tastauren lautstärkeregler funktoniert nicht |
15.11.2013, 19:29 | #7 |
| Tastauren lautstärkeregler funktoniert nicht Hallo Schrauber ich entschuldige mich für den Doppelpost, und danke für deine Antworten. Gestern habe ich in Lokale Dienste auf "Zugriff auf Eingabegeräte" geschaut der war auf manuell geschaltet, dann habe ich es auf automatisch gestellt siehe da es funktoniert wieder alles. Dennoch würde ich wissen, wie der Dienst sich von selbst auf manuell gestellt hat. Edit: Treiber waren okay, funktonierte einwandfrei. Könnte es sein das es sich mit Updates behindert hat? Frst.txt: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2013 Ran by engin (administrator) on ERGÜN on 15-11-2013 19:21:23 Running from C:\Users\engin\Desktop Windows Vista (TM) Ultimate Service Pack 2 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) c:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\windows\SysWOW64\PnkBstrA.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (Hewlett-Packard) c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\windows\system32\msiexec.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Hewlett-Packard ) C:\Program Files\IDT\WDM\Beats64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (W. Rolke) C:\Program Files\WR-Tools\GpuTemp\GpuTmp64.exe (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Hewlett-Packard) c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [BeatsOSDApp] - C:\Program Files\IDT\WDM\Beats64.exe [37888 2012-09-19] (Hewlett-Packard ) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1702912 2013-03-29] (IDT, Inc.) HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation) HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink) HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.) HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG) HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-13] (AVAST Software) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) Startup: C:\Users\engin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GpuTemp.lnk ShortcutTarget: GpuTemp.lnk -> C:\Users\engin\AppData\Roaming\Microsoft\Installer\{0FFA85AB-D704-48A6-A009-25A0559152C3}\_1168EA9E829EB9D5F56A58.exe () BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.gametop.com/?utm_source=PoliceSupercarsRacing&utm_medium=start HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4 SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKLM - {8218E8BC-E228-4079-8CE7-6EA6CCCEA191} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {140E4DF8-9E14-4A34-9577-C77561ED7883} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_client_4.5.13.0.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\..\Interfaces\{87D4CFE8-D2D2-4ADF-86B4-1B860BF003F6}: [NameServer]62.109.121.2 62.109.121.1 FireFox: ======== FF ProfilePath: C:\Users\engin\AppData\Roaming\Mozilla\Firefox\Profiles\67mcx6lq.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll () FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw_1202122.dll No File FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\windows\system32\C2MP\npdivx32.dll No File FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.10.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\engin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: WOT - C:\Users\engin\AppData\Roaming\Mozilla\Firefox\Profiles\67mcx6lq.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} FF Extension: Adblock Plus - C:\Users\engin\AppData\Roaming\Mozilla\Firefox\Profiles\67mcx6lq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF ==================== Services (Whitelisted) ================= R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation) R2 PnkBstrA; C:\windows\SysWow64\PnkBstrA.exe [76888 2013-06-16] () S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP1\RpcAgentSrv.exe [68760 2008-12-27] (SiSoftware) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation) S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP1\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-01-07] (Duplex Secure Ltd.) R5 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [38984 2013-11-13] (AVAST Software) R5 aswMonFlt; C:\Windows\System32\Drivers\aswMonFlt.sys [84328 2013-11-13] (AVAST Software) R5 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-18] () R5 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1032416 2013-11-13] (AVAST Software) R5 aswSP; C:\Windows\System32\Drivers\aswSP.sys [409832 2013-11-13] (AVAST Software) R5 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-18] () S3 CtClsFlt; \SystemRoot\system32\DRIVERS\CtClsFlt.sys [x] S3 X6va012; \??\C:\windows\SysWOW64\Drivers\X6va012 [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-15 19:21 - 2013-11-15 19:21 - 00014668 _____ C:\Users\engin\Desktop\FRST.txt 2013-11-15 19:21 - 2013-11-15 19:21 - 00000000 ____D C:\FRST 2013-11-15 19:18 - 2013-11-15 19:18 - 01957794 _____ (Farbar) C:\Users\engin\Desktop\FRST64.exe 2013-11-14 12:22 - 2013-11-14 13:19 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-11-14 12:21 - 2013-11-14 13:21 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys 2013-11-14 12:21 - 2013-11-14 12:21 - 12576792 _____ (Malwarebytes Corp.) C:\Users\engin\Downloads\mbar-1.07.0.1007.exe 2013-11-14 12:13 - 2013-11-14 12:13 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-14 12:13 - 2013-11-14 12:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-14 12:13 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2013-11-14 12:05 - 2013-11-14 12:05 - 00001270 _____ C:\Users\engin\Desktop\Revo Uninstaller.lnk 2013-11-14 12:05 - 2013-11-14 12:05 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2013-11-13 12:49 - 2013-11-13 12:49 - 00000000 ____D C:\Users\engin\AppData\Local\NVIDIA Corporation 2013-11-13 12:44 - 2013-11-13 12:44 - 00297352 _____ C:\windows\system32\FNTCACHE.DAT 2013-11-13 12:42 - 2013-10-09 02:33 - 00059416 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe 2013-11-13 12:42 - 2013-10-08 23:30 - 00628736 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll 2013-11-13 12:42 - 2013-10-08 23:30 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll 2013-11-13 12:42 - 2013-10-08 23:30 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll 2013-11-13 12:42 - 2013-10-08 23:30 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe 2013-11-13 12:42 - 2013-10-08 23:28 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe 2013-11-13 12:42 - 2013-10-08 23:27 - 03279872 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll 2013-11-13 12:42 - 2013-10-08 23:27 - 01622016 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll 2013-11-13 12:42 - 2013-10-08 23:27 - 00773120 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll 2013-11-13 12:42 - 2013-10-08 23:27 - 00252928 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll 2013-11-13 12:42 - 2013-10-08 23:27 - 00175104 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll 2013-11-13 12:42 - 2013-10-08 23:27 - 00142848 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll 2013-11-13 12:42 - 2013-10-08 23:27 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll 2013-11-13 12:42 - 2013-10-05 07:10 - 00285016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys 2013-11-13 12:42 - 2013-10-03 23:09 - 00385528 _____ C:\windows\system32\ApnDatabase.xml 2013-11-13 12:42 - 2013-10-02 03:50 - 00447320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS 2013-11-13 12:42 - 2013-09-28 06:48 - 00778752 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll 2013-11-13 12:42 - 2013-09-28 04:58 - 00551424 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll 2013-11-13 12:42 - 2013-09-24 23:18 - 00288768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys 2013-11-13 12:42 - 2013-09-19 08:32 - 01455448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys 2013-11-13 12:42 - 2013-08-30 06:19 - 00626688 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll 2013-11-13 12:42 - 2013-08-30 06:18 - 00374784 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll 2013-11-13 12:42 - 2013-08-30 00:48 - 00488960 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll 2013-11-13 12:42 - 2013-08-30 00:47 - 00302080 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll 2013-11-13 12:32 - 2013-09-13 23:36 - 00247296 _____ (Microsoft Corporation) C:\windows\SysWOW64\ubpm.dll 2013-11-13 12:32 - 2013-09-13 23:33 - 00328192 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll 2013-11-13 12:32 - 2013-08-30 06:43 - 00061784 _____ (Microsoft Corporation) C:\windows\system32\Drivers\crashdmp.sys 2013-11-13 12:32 - 2013-08-30 06:20 - 01173504 _____ (Microsoft Corporation) C:\windows\system32\UIAutomationCore.dll 2013-11-13 12:32 - 2013-08-30 00:48 - 00914432 _____ (Microsoft Corporation) C:\windows\SysWOW64\UIAutomationCore.dll 2013-11-13 12:32 - 2013-08-21 07:39 - 00465240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys 2013-11-13 12:32 - 2013-08-10 07:30 - 00151896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tpm.sys 2013-11-13 12:32 - 2013-08-10 06:21 - 00817152 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll 2013-11-13 12:32 - 2013-08-10 04:58 - 00656896 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll 2013-11-13 12:32 - 2013-07-25 00:10 - 10799104 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll 2013-11-13 12:32 - 2013-07-25 00:07 - 13661696 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll 2013-11-13 12:32 - 2013-07-12 02:38 - 00599040 _____ (Microsoft Corporation) C:\windows\system32\WSDApi.dll 2013-11-13 12:32 - 2013-07-12 02:30 - 00485376 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSDApi.dll 2013-11-13 12:31 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2013-11-13 12:31 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2013-11-13 12:31 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2013-11-13 12:31 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-11-13 12:31 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-11-13 12:31 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-11-13 12:31 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2013-11-13 12:31 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2013-11-13 12:31 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2013-11-13 12:31 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2013-11-13 12:31 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2013-11-13 12:31 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2013-11-13 12:31 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2013-11-13 12:31 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2013-11-13 12:31 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2013-11-13 12:31 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2013-11-13 12:31 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2013-11-13 12:31 - 2013-10-10 12:53 - 00096600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wfplwfs.sys 2013-11-13 12:31 - 2013-10-10 10:21 - 01160192 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL 2013-11-13 12:31 - 2013-10-10 10:20 - 00723968 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL 2013-11-13 12:31 - 2013-10-03 00:25 - 01300992 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll 2013-11-13 12:31 - 2013-10-02 00:37 - 02035712 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll 2013-11-13 12:31 - 2013-10-02 00:37 - 01569280 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll 2013-11-13 12:31 - 2013-10-02 00:26 - 02304512 _____ (Microsoft Corporation) C:\windows\system32\authui.dll 2013-11-13 12:31 - 2013-10-02 00:26 - 01890816 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll 2013-11-13 12:31 - 2013-10-01 23:22 - 01022976 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll 2013-11-13 12:31 - 2013-09-23 23:30 - 00419328 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll 2013-11-13 12:31 - 2013-09-23 23:30 - 00323072 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll 2013-11-13 12:31 - 2013-09-04 04:11 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys 2013-11-13 12:31 - 2013-08-23 08:22 - 02062848 _____ (Microsoft Corporation) C:\windows\system32\d3d11.dll 2013-11-13 12:31 - 2013-08-23 02:44 - 01711616 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d11.dll 2013-11-12 12:41 - 2013-11-13 18:19 - 00000000 ____D C:\windows\system32\SRSLabs 2013-11-11 12:22 - 2013-11-11 12:22 - 00000000 ____D C:\Users\engin\AppData\Local\{47F5857C-DC0F-42BF-9966-BA1E1236E5FE} 2013-11-03 23:02 - 2013-11-03 23:03 - 00000000 ____D C:\Users\engin\Documents\Rayman Legends (Demo) 2013-11-03 22:52 - 2013-11-05 12:40 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-11-01 21:59 - 2013-11-01 22:00 - 00000000 ____D C:\Users\engin\AppData\Local\PAYDAY 2 (Demo) 2013-11-01 21:59 - 2013-11-01 21:59 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-11-01 21:27 - 2013-11-01 21:27 - 00000222 _____ C:\Users\engin\Desktop\PAYDAY 2 Demo.url 2013-10-30 12:10 - 2013-10-30 12:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-28 23:19 - 2013-10-23 11:30 - 30344480 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 25257248 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 22933792 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 18199872 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 17560352 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 15855568 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 12572960 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2013-10-28 23:19 - 2013-10-23 11:30 - 11426568 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 11374520 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 09524088 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 09480328 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 03131680 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 03124512 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 02946848 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 02747168 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvenc.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 01884448 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433165.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 01511712 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433165.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 01241376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvumdshim.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 00696096 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 00655136 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 00599840 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 00560416 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 00317472 _____ (NVIDIA Corporation) C:\windows\system32\nvoglshim64.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 00266984 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglshim32.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 00168616 _____ (NVIDIA Corporation) C:\windows\system32\nvinitx.dll 2013-10-28 23:19 - 2013-10-23 11:30 - 00141336 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvinit.dll 2013-10-28 23:19 - 2013-01-29 09:35 - 01510176 _____ (NVIDIA Corporation) C:\windows\system32\nvhdagenco64.dll 2013-10-28 23:11 - 2013-11-08 21:47 - 01064224 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll 2013-10-28 23:11 - 2013-11-08 21:47 - 00955168 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll 2013-10-28 23:10 - 2013-09-28 00:01 - 00039200 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys 2013-10-28 23:10 - 2013-09-28 00:01 - 00028960 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll 2013-10-24 22:29 - 2013-10-24 22:29 - 00000000 ____D C:\ProgramData\Codemasters 2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe 2013-10-21 21:51 - 2013-11-02 19:49 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-10-21 21:51 - 2013-10-21 21:52 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2013-10-21 21:51 - 2013-10-21 21:51 - 00001385 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2013-10-21 21:51 - 2013-10-21 21:51 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking 2013-10-21 21:51 - 2013-09-20 09:49 - 00021040 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe 2013-10-21 20:19 - 2013-10-21 20:19 - 00000000 ____D C:\Users\engin\AppData\Local\NVIDIA 2013-10-21 20:09 - 2013-10-21 20:09 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten 2013-10-21 20:09 - 2013-08-15 18:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-21 20:09 - 2013-06-12 22:03 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-21 20:09 - 2012-11-26 18:03 - 00000000 ___HD C:\Users\UpdatusUser\Documents\hp.system.package.metadata 2013-10-21 20:09 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-21 20:09 - 2012-07-26 09:13 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-10-21 20:07 - 2013-10-23 11:30 - 15212336 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll 2013-10-21 20:07 - 2013-10-23 11:30 - 02695200 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll 2013-10-21 20:07 - 2013-10-16 01:48 - 01884448 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433158.dll 2013-10-21 20:07 - 2013-10-16 01:48 - 01511712 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433158.dll 2013-10-21 20:07 - 2013-09-28 00:01 - 00029984 _____ (NVIDIA Corporation) C:\windows\system32\nvaudcap64v.dll 2013-10-21 20:07 - 2013-06-16 13:38 - 00196384 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvhda64v.sys 2013-10-21 20:07 - 2013-06-16 13:38 - 00031520 _____ (NVIDIA Corporation) C:\windows\system32\nvhdap64.dll 2013-10-21 20:06 - 2013-10-21 20:06 - 00000000 ____D C:\NVIDIA 2013-10-19 12:44 - 2013-11-15 13:21 - 00000000 ____D C:\Users\engin\AppData\Roaming\DarknessII 2013-10-19 12:39 - 2013-10-19 12:39 - 00000221 _____ C:\Users\engin\Desktop\The Darkness II.url 2013-10-18 12:36 - 2013-10-18 12:36 - 00000000 ____D C:\Users\engin\AppData\Roaming\AVAST Software ==================== One Month Modified Files and Folders ======= 2013-11-15 19:21 - 2013-11-15 19:21 - 00014668 _____ C:\Users\engin\Desktop\FRST.txt 2013-11-15 19:21 - 2013-11-15 19:21 - 00000000 ____D C:\FRST 2013-11-15 19:18 - 2013-11-15 19:18 - 01957794 _____ (Farbar) C:\Users\engin\Desktop\FRST64.exe 2013-11-15 19:16 - 2012-12-15 12:29 - 01195570 _____ C:\windows\WindowsUpdate.log 2013-11-15 19:15 - 2013-06-10 12:14 - 00000000 ____D C:\Program Files (x86)\Steam 2013-11-15 19:14 - 2012-07-26 09:12 - 00000000 ____D C:\windows\system32\sru 2013-11-15 13:21 - 2013-10-19 12:44 - 00000000 ____D C:\Users\engin\AppData\Roaming\DarknessII 2013-11-15 13:01 - 2013-01-12 16:58 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job 2013-11-15 12:21 - 2013-02-13 19:49 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update 2013-11-14 21:53 - 2012-11-27 02:54 - 00745562 _____ C:\windows\system32\perfh007.dat 2013-11-14 21:53 - 2012-11-27 02:54 - 00169488 _____ C:\windows\system32\perfc007.dat 2013-11-14 21:53 - 2012-07-26 08:28 - 01752656 _____ C:\windows\system32\PerfStringBackup.INI 2013-11-14 21:45 - 2012-11-26 18:01 - 00000000 ____D C:\ProgramData\NVIDIA 2013-11-14 21:45 - 2012-07-26 08:22 - 00000006 ____H C:\windows\Tasks\SA.DAT 2013-11-14 21:18 - 2012-12-15 12:31 - 00000000 ___RD C:\Users\engin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-14 20:46 - 2012-12-20 10:46 - 00003918 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{80642D7E-65FC-4001-BC8A-3370BC88E6DF} 2013-11-14 13:21 - 2013-11-14 12:21 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys 2013-11-14 13:19 - 2013-11-14 12:22 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-11-14 13:04 - 2012-07-26 09:12 - 00000000 ____D C:\windows\rescache 2013-11-14 12:21 - 2013-11-14 12:21 - 12576792 _____ (Malwarebytes Corp.) C:\Users\engin\Downloads\mbar-1.07.0.1007.exe 2013-11-14 12:13 - 2013-11-14 12:13 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-14 12:13 - 2013-11-14 12:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-14 12:05 - 2013-11-14 12:05 - 00001270 _____ C:\Users\engin\Desktop\Revo Uninstaller.lnk 2013-11-14 12:05 - 2013-11-14 12:05 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2013-11-13 19:10 - 2013-01-13 11:40 - 00000344 _____ C:\windows\Tasks\HPCeeScheduleForengin.job 2013-11-13 18:46 - 2013-01-13 11:40 - 00003158 _____ C:\windows\System32\Tasks\HPCeeScheduleForengin 2013-11-13 18:46 - 2012-12-15 12:29 - 00000000 ____D C:\Users\engin 2013-11-13 18:19 - 2013-11-12 12:41 - 00000000 ____D C:\windows\system32\SRSLabs 2013-11-13 18:19 - 2012-11-26 18:04 - 00000000 ____D C:\Program Files\IDT 2013-11-13 18:19 - 2012-11-26 17:59 - 00000000 ____D C:\ProgramData\SoundResearch 2013-11-13 18:19 - 2012-07-26 08:21 - 00029788 _____ C:\windows\setupact.log 2013-11-13 18:09 - 2013-07-24 19:14 - 00000000 ____D C:\Users\engin\AppData\Local\Adobe 2013-11-13 18:09 - 2013-01-12 16:58 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater 2013-11-13 13:23 - 2012-12-15 12:37 - 00003600 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2358368056-3233348350-3724359345-1001 2013-11-13 12:49 - 2013-11-13 12:49 - 00000000 ____D C:\Users\engin\AppData\Local\NVIDIA Corporation 2013-11-13 12:44 - 2013-11-13 12:44 - 00297352 _____ C:\windows\system32\FNTCACHE.DAT 2013-11-13 12:35 - 2012-07-26 09:12 - 00000000 ___RD C:\windows\ToastData 2013-11-13 12:35 - 2012-07-26 09:12 - 00000000 ____D C:\windows\WinStore 2013-11-13 12:33 - 2013-07-09 21:46 - 00000000 ____D C:\windows\system32\MRT 2013-11-13 12:32 - 2012-12-15 18:00 - 82896128 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-11-13 12:22 - 2013-02-13 19:49 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-11-13 12:21 - 2013-02-13 19:49 - 01032416 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys 2013-11-13 12:21 - 2013-02-13 19:49 - 00409832 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys 2013-11-13 12:21 - 2013-02-13 19:49 - 00334648 _____ (AVAST Software) C:\windows\system32\aswBoot.exe 2013-11-13 12:21 - 2013-02-13 19:49 - 00084328 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys 2013-11-13 12:21 - 2013-02-13 19:49 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr 2013-11-13 12:21 - 2013-02-13 19:49 - 00038984 _____ (AVAST Software) C:\windows\system32\Drivers\aswFsBlk.sys 2013-11-13 12:18 - 2012-07-26 09:12 - 00000000 ____D C:\windows\AUInstallAgent 2013-11-12 19:13 - 2012-07-26 09:12 - 00000000 ____D C:\windows\system32\NDF 2013-11-12 14:04 - 2012-07-26 06:26 - 00262144 ___SH C:\windows\system32\config\BBI 2013-11-12 13:47 - 2013-05-15 23:03 - 00000000 ____D C:\Users\engin\Desktop\winkawaks162 2013-11-12 13:47 - 2012-07-26 09:12 - 00000000 ____D C:\windows\security 2013-11-12 13:43 - 2012-07-26 09:12 - 00000000 ____D C:\windows\registration 2013-11-11 12:22 - 2013-11-11 12:22 - 00000000 ____D C:\Users\engin\AppData\Local\{47F5857C-DC0F-42BF-9966-BA1E1236E5FE} 2013-11-11 00:54 - 2012-08-01 18:02 - 00208372 _____ C:\windows\PFRO.log 2013-11-10 11:58 - 2012-12-17 17:34 - 00000052 _____ C:\windows\SysWOW64\DOErrors.log 2013-11-08 21:47 - 2013-10-28 23:11 - 01064224 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll 2013-11-08 21:47 - 2013-10-28 23:11 - 00955168 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll 2013-11-05 23:58 - 2012-07-26 09:14 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2013-11-05 23:58 - 2012-07-26 09:14 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-05 12:40 - 2013-11-03 22:52 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-11-05 12:40 - 2012-12-25 19:33 - 00000000 ____D C:\Users\engin\AppData\Local\Ubisoft Game Launcher 2013-11-03 23:03 - 2013-11-03 23:02 - 00000000 ____D C:\Users\engin\Documents\Rayman Legends (Demo) 2013-11-03 14:09 - 2012-11-26 18:15 - 00344575 _____ C:\windows\DirectX.log 2013-11-03 12:36 - 2012-12-23 13:03 - 00000000 _____ C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 2013-11-02 19:49 - 2013-10-21 21:51 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-11-02 19:32 - 2012-12-15 13:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-01 22:00 - 2013-11-01 21:59 - 00000000 ____D C:\Users\engin\AppData\Local\PAYDAY 2 (Demo) 2013-11-01 21:59 - 2013-11-01 21:59 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-11-01 21:59 - 2012-11-26 17:59 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-11-01 21:27 - 2013-11-01 21:27 - 00000222 _____ C:\Users\engin\Desktop\PAYDAY 2 Demo.url 2013-10-30 12:10 - 2013-10-30 12:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-28 23:11 - 2012-11-26 17:59 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-10-28 23:11 - 2012-11-26 17:59 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-10-26 12:27 - 2013-10-07 21:00 - 00000000 ____D C:\Users\engin\Desktop\itunes ordner 2013-10-24 22:29 - 2013-10-24 22:29 - 00000000 ____D C:\ProgramData\Codemasters 2013-10-24 22:29 - 2012-12-29 13:01 - 00000000 ____D C:\Users\engin\Documents\My Games 2013-10-23 11:30 - 2013-10-28 23:19 - 30344480 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 25257248 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 22933792 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 18199872 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 17560352 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 15855568 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 12572960 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2013-10-23 11:30 - 2013-10-28 23:19 - 11426568 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 11374520 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 09524088 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 09480328 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 03131680 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 03124512 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 02946848 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 02747168 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvenc.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 01884448 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433165.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 01511712 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433165.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 01241376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvumdshim.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 00696096 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 00655136 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 00599840 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 00560416 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 00317472 _____ (NVIDIA Corporation) C:\windows\system32\nvoglshim64.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 00266984 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglshim32.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 00168616 _____ (NVIDIA Corporation) C:\windows\system32\nvinitx.dll 2013-10-23 11:30 - 2013-10-28 23:19 - 00141336 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvinit.dll 2013-10-23 11:30 - 2013-10-21 20:07 - 15212336 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll 2013-10-23 11:30 - 2013-10-21 20:07 - 02695200 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll 2013-10-23 11:30 - 2012-11-26 17:59 - 00061216 _____ (Khronos Group) C:\windows\system32\OpenCL.dll 2013-10-23 11:30 - 2012-11-26 17:59 - 00053024 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll 2013-10-23 11:30 - 2012-07-26 22:52 - 18286416 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll 2013-10-23 11:30 - 2012-07-26 22:52 - 03067560 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll 2013-10-23 11:30 - 2012-07-26 22:52 - 01435504 _____ (NVIDIA Corporation) C:\windows\system32\nvumdshimx.dll 2013-10-23 11:30 - 2012-07-26 22:52 - 00023287 _____ C:\windows\system32\nvinfo.pb 2013-10-23 09:20 - 2012-11-26 17:59 - 06669600 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll 2013-10-23 09:20 - 2012-11-26 17:59 - 03489568 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll 2013-10-23 09:20 - 2012-11-26 17:59 - 03426956 _____ C:\windows\system32\nvcoproc.bin 2013-10-23 09:20 - 2012-11-26 17:59 - 02559776 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll 2013-10-23 09:20 - 2012-11-26 17:59 - 00922912 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe 2013-10-23 09:20 - 2012-11-26 17:59 - 00219424 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll 2013-10-23 09:20 - 2012-11-26 17:59 - 00063776 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll 2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe 2013-10-21 21:52 - 2013-10-21 21:51 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2013-10-21 21:51 - 2013-10-21 21:51 - 00001385 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2013-10-21 21:51 - 2013-10-21 21:51 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking 2013-10-21 20:19 - 2013-10-21 20:19 - 00000000 ____D C:\Users\engin\AppData\Local\NVIDIA 2013-10-21 20:09 - 2013-10-21 20:09 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten 2013-10-21 20:06 - 2013-10-21 20:06 - 00000000 ____D C:\NVIDIA 2013-10-19 12:39 - 2013-10-19 12:39 - 00000221 _____ C:\Users\engin\Desktop\The Darkness II.url 2013-10-18 12:36 - 2013-10-18 12:36 - 00000000 ____D C:\Users\engin\AppData\Roaming\AVAST Software 2013-10-18 12:33 - 2013-03-03 21:49 - 00205320 _____ C:\windows\system32\Drivers\aswVmm.sys 2013-10-18 12:33 - 2013-03-03 21:49 - 00065776 _____ C:\windows\system32\Drivers\aswRvrt.sys 2013-10-18 12:33 - 2013-02-13 19:49 - 00092544 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys 2013-10-18 12:32 - 2013-02-13 19:49 - 00000000 ____D C:\ProgramData\AVAST Software 2013-10-18 12:31 - 2013-02-13 19:49 - 00000000 _____ C:\windows\SysWOW64\config.nt 2013-10-18 12:08 - 2013-05-06 18:40 - 00000000 ____D C:\Program Files (x86)\Project64 1.6 2013-10-16 01:48 - 2013-10-21 20:07 - 01884448 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433158.dll 2013-10-16 01:48 - 2013-10-21 20:07 - 01511712 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433158.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe IS MISSING <==== ATTENTION!. C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-08 13:07 ==================== End Of Log ============================ --- --- --- Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-11-2013 Ran by engin at 2013-11-15 19:24:53 Running from C:\Users\engin\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152) Adrenaline Action Benchmark Tool 1.0 (Build 1.0.2.1) (x32) Apple Application Support (x32 Version: 2.3.6) Apple Mobile Device Support (Version: 7.0.0.117) Apple Software Update (x32 Version: 2.1.3.127) avast! Free Antivirus (x32 Version: 9.0.2008) Bonjour (Version: 3.0.0.10) Connected Music powered by Universal Music Group version 1.0 (x32 Version: 1.0) CyberLink LabelPrint (x32 Version: 2.5.1.5510) CyberLink Media Suite 10 (x32 Version: 10.0.1.1916) CyberLink PhotoDirector (x32 Version: 2.0.1.3109) CyberLink Power2Go 8 (x32 Version: 8.0.1.1902) CyberLink PowerDirector 10 (x32 Version: 10.0.1.1925) CyberLink PowerDVD (x32 Version: 10.0.1.4319) D3DX10 (x32 Version: 15.4.2368.0902) Dual-Core Optimizer (x32 Version: 1.1.4.0169) Free YouTube Download version 3.2.2.430 (x32 Version: 3.2.2.430) GeForce Experience NvStream Client Components (Version: 1.6.28) GOM Player (x32 Version: 2.1.50.5145) GpuTemp (Version: 2.1) Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000) HP Connected Music (Meridian - installer) (x32 Version: v1.0) HP Connected Remote (x32 Version: 1.0.1206) HP Customer Experience Enhancements (x32 Version: 6.0.1.7) HP Postscript Converter (Version: 3.1.3591) HP Registration Service (Version: 1.0.5976.4186) HP Support Assistant (x32 Version: 7.0.33.6) HP Support Information (x32 Version: 12.00.0000) IDT Audio (x32 Version: 1.0.6418.0) Intel(R) Management Engine Components (x32 Version: 8.1.0.1252) Intel® Trusted Connect Service Client (Version: 1.24.388.1) iTunes (Version: 11.1.1.11) K-Lite Codec Pack 9.7.0 (Full) (x32 Version: 9.7.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Games for Windows - LIVE (x32 Version: 3.3.24.0) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.2.3.0) Microsoft Office (x32 Version: 14.0.6120.5004) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (x32 Version: 11.0.51106.1) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106) Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0) Mozilla Firefox 25.0 (x86 de) (x32 Version: 25.0) Mozilla Maintenance Service (x32 Version: 25.0) MSVCRT (x32 Version: 15.4.2862.0708) NVIDIA 3D Vision Controller-Treiber 331.65 (Version: 331.65) NVIDIA 3D Vision Treiber 331.65 (Version: 331.65) NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1) NVIDIA Grafiktreiber 331.65 (Version: 331.65) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4) NVIDIA Install Application (Version: 2.1002.140.952) NVIDIA LED Visualizer 1.0 (Version: 1.0) NVIDIA PhysX (x32 Version: 9.12.1031) NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165) NVIDIA Systemsteuerung 331.65 (Version: 331.65) NVIDIA Update 9.3.21 (Version: 9.3.21) NVIDIA Update Components (Version: 9.3.21) NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9) OpenAL (x32) PAYDAY 2 Demo (x32) PunkBuster Services (x32 Version: 0.993) Recovery Manager (x32 Version: 5.5.0.5530) Revo Uninstaller 1.95 (x32 Version: 1.95) SHIELD Streaming (Version: 1.6.53) SiSoftware Sandra Lite 2013.SP1 (Version: 19.23.2013.1) Skype™ 6.5 (x32 Version: 6.5.158) SpeedFan (remove only) (x32) Spybot - Search & Destroy (x32 Version: 2.2.25) Steam (x32 Version: 1.0.0.0) The Darkness II (x32) Unity Web Player (HKCU Version: ) VirtualCloneDrive (x32) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) ==================== Restore Points ========================= 01-11-2013 20:32:08 Geplanter Prüfpunkt 03-11-2013 13:08:11 DirectX wurde installiert 12-11-2013 11:41:15 Windows Update 12-11-2013 12:40:05 Wiederherstellungsvorgang 14-11-2013 11:06:27 Revo Uninstaller's restore point - Metro 2033 Demo ==================== Hosts content: ========================== 2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0F5EFBA4-AD0F-4BB9-82D5-06C51C5B4ADB} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\System32\NotificationUI.exe [2013-08-16] (Microsoft Corporation) Task: {2382EE8E-C146-4F60-A348-F4D00982A255} - System32\Tasks\{D5C7FFF6-53E6-46E9-9355-42876BEDC863} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=6.6.0.106&LastError=2 Task: {2FA62CF0-01E3-4F2A-87BE-36E115EB09C1} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\SymErr.exe Task: {43A5B8D6-AC9E-498D-8202-DBE1FFD70160} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {5475519D-DDDE-400F-92ED-B6F9E4E6F202} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\WSCStub.exe Task: {6A99E002-2095-4572-8F7D-0E9D1C8581A8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company) Task: {7C2AA14E-9C74-44D6-B74D-EF5247EAF8F9} - System32\Tasks\HPCeeScheduleForengin => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard) Task: {8DD0457F-F020-4842-9E8E-205573FE18D0} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\SymErr.exe Task: {9468626E-E8A2-47AF-B682-E2374DE78789} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company) Task: {A386581F-DF40-4493-8982-456A3901A18D} - System32\Tasks\{1E8B4184-850A-4D05-9A1F-A9AD93AFBE27} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=6.6.0.106&LastError=2 Task: {A6D77E39-AEA6-471F-AB1F-C7A9C6F2A07B} - System32\Tasks\{644FD59D-57FC-4EC8-B72A-D8895A100DFD} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=6.6.0.106&LastError=2 Task: {AB4E8A8A-825E-4D6E-B691-AC3DEB1A280E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-13] (Adobe Systems Incorporated) Task: {B962EC77-74E2-4E0F-B1EC-9C39B347A221} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {C139C551-D40D-4D89-927F-BA75AB6B25E4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-08-07] (Hewlett-Packard Company) Task: {CCCBF45A-DE68-49CD-933B-696D47C8C37E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {F25ADEA6-DF3E-48CA-A826-BA9EA4B5D8B7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {FD20335A-2B29-4B27-9CCE-D30D44F21D7C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Critical Actions Pending => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company) Task: {FEABCDAE-7C67-4551-84B7-B9407328A710} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-13] (AVAST Software) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\HPCeeScheduleForengin.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Loaded Modules (whitelisted) ============= 2012-08-29 11:02 - 2012-08-29 11:02 - 00120224 _____ () c:\program files (x86)\hewlett-packard\hp connected remote\HPItunesModule.dll 2012-12-15 12:31 - 2012-12-15 12:31 - 00120224 _____ () C:\Users\engin\AppData\Local\assembly\dl3\3443HKZP.VRV\9KXET9KP.AY0\3e16f603\0017145d_cd85cd01\HPItunesModule.DLL 2012-08-29 11:02 - 2012-08-29 11:02 - 00048544 _____ () c:\program files (x86)\hewlett-packard\hp connected remote\HPItunesProxy.dll 2012-08-29 11:02 - 2012-08-29 11:02 - 00180224 _____ () c:\program files (x86)\hewlett-packard\hp connected remote\zxing.dll 2013-11-14 11:50 - 2013-11-14 11:22 - 02141184 _____ () C:\Program Files\AVAST Software\Avast\defs\13111400\algo.dll 2013-09-13 18:51 - 2013-09-13 18:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2013-09-13 18:51 - 2013-09-13 18:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-10-21 21:51 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-10-21 21:51 - 2013-05-16 09:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-10-21 21:51 - 2013-05-16 09:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-10-21 21:51 - 2013-05-16 09:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-10-21 21:51 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2012-11-26 18:05 - 2012-07-18 09:50 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2012-11-26 18:10 - 2012-06-08 04:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll 2012-06-08 12:34 - 2012-06-08 12:34 - 00016400 _____ () c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll 2013-10-18 12:33 - 2013-10-18 12:33 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2013-10-30 12:10 - 2013-10-30 12:10 - 03368048 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/14/2013 09:46:00 PM) (Source: Windows Search Service) (User: ) Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet. 0x0. Error: (11/14/2013 09:46:00 PM) (Source: Windows Search Service) (User: ) Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut. Kontext: Anwendung, SystemIndex Katalog Error: (11/14/2013 09:46:00 PM) (Source: Windows Search Service) (User: ) Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut. Error: (11/14/2013 09:44:13 PM) (Source: Windows Search Service) (User: ) Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet. 0x0. Error: (11/14/2013 09:44:10 PM) (Source: Windows Search Service) (User: ) Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut. Kontext: Anwendung, SystemIndex Katalog Error: (11/14/2013 09:44:09 PM) (Source: Windows Search Service) (User: ) Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut. Error: (11/14/2013 09:40:24 PM) (Source: Windows Search Service) (User: ) Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet. 0x0. Error: (11/14/2013 09:40:23 PM) (Source: Windows Search Service) (User: ) Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut. Kontext: Anwendung, SystemIndex Katalog Error: (11/14/2013 09:40:23 PM) (Source: Windows Search Service) (User: ) Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut. Error: (11/14/2013 09:38:52 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: WinKawaks.exe, Version: 1.0.0.1, Zeitstempel: 0x4bf17350 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00443a8c ID des fehlerhaften Prozesses: 0x34 Startzeit der fehlerhaften Anwendung: 0xWinKawaks.exe0 Pfad der fehlerhaften Anwendung: WinKawaks.exe1 Pfad des fehlerhaften Moduls: WinKawaks.exe2 Berichtskennung: WinKawaks.exe3 Vollständiger Name des fehlerhaften Pakets: WinKawaks.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WinKawaks.exe5 System errors: ============= Error: (11/15/2013 07:14:28 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Anmeldeinformationen Server für SSL. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001. Error: (11/15/2013 00:21:34 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Anmeldeinformationen Server für SSL. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001. Error: (11/14/2013 10:05:50 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Anmeldeinformationen Server für SSL. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001. Error: (11/14/2013 09:48:39 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Anmeldeinformationen Server für SSL. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001. Error: (11/14/2013 09:48:00 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Anmeldeinformationen Server für SSL. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001. Error: (11/14/2013 09:45:15 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT) Description: 0xc000014d0 Error: (11/14/2013 09:43:10 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT) Description: 0xc000014d0 Error: (11/14/2013 09:42:30 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Anmeldeinformationen Server für SSL. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001. Error: (11/14/2013 09:42:28 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Anmeldeinformationen Server für SSL. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001. Error: (11/14/2013 09:39:33 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT) Description: 0xc000014d0 Microsoft Office Sessions: ========================= Error: (11/14/2013 09:46:00 PM) (Source: Windows Search Service)(User: ) Description: WSearchIdxPiDer Vorgang wurde erfolgreich beendet. 0x0 Error: (11/14/2013 09:46:00 PM) (Source: Windows Search Service)(User: ) Description: Kontext: Anwendung, SystemIndex Katalog Error: (11/14/2013 09:46:00 PM) (Source: Windows Search Service)(User: ) Description: Error: (11/14/2013 09:44:13 PM) (Source: Windows Search Service)(User: ) Description: WSearchIdxPiDer Vorgang wurde erfolgreich beendet. 0x0 Error: (11/14/2013 09:44:10 PM) (Source: Windows Search Service)(User: ) Description: Kontext: Anwendung, SystemIndex Katalog Error: (11/14/2013 09:44:09 PM) (Source: Windows Search Service)(User: ) Description: Error: (11/14/2013 09:40:24 PM) (Source: Windows Search Service)(User: ) Description: WSearchIdxPiDer Vorgang wurde erfolgreich beendet. 0x0 Error: (11/14/2013 09:40:23 PM) (Source: Windows Search Service)(User: ) Description: Kontext: Anwendung, SystemIndex Katalog Error: (11/14/2013 09:40:23 PM) (Source: Windows Search Service)(User: ) Description: Error: (11/14/2013 09:38:52 PM) (Source: Application Error)(User: ) Description: WinKawaks.exe1.0.0.14bf17350unknown0.0.0.000000000c000000500443a8c3401cee1795b4c39c7C:\Users\engin\Desktop\winkawaks162\WinKawaks.exeunknownc532e1f0-4d6c-11e3-bebd-b4b52fc7a0fe CodeIntegrity Errors: =================================== Date: 2013-09-09 18:12:26.959 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\CTAFX64.dll because the set of per-page image hashes could not be found on the system. Date: 2013-09-09 18:06:56.360 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\CTAFX64.dll because the set of per-page image hashes could not be found on the system. Date: 2013-09-09 18:02:32.732 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\CTAFX64.dll because the set of per-page image hashes could not be found on the system. Date: 2013-09-09 17:56:18.106 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\CTAFX64.dll because the set of per-page image hashes could not be found on the system. Date: 2012-12-20 11:02:33.021 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\engin\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2012-12-20 11:02:32.829 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2012-12-18 18:07:44.478 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\engin\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2012-12-18 18:07:44.083 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Percentage of memory in use: 21% Total physical RAM: 8147.35 MB Available physical RAM: 6365.09 MB Total Pagefile: 9363.35 MB Available Pagefile: 7410.09 MB Total Virtual: 8192 MB Available Virtual: 8191.73 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:1850.33 GB) (Free:1775.44 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (Recovery Image) (Fixed) (Total:11.21 GB) (Free:1.33 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 1863 GB) (Disk ID: 59A27AD7) Partition: GPT Partition Type ==================== End Of Log ============================ |
16.11.2013, 15:27 | #8 |
/// the machine /// TB-Ausbilder | Tastauren lautstärkeregler funktoniert nicht Möglich. logs sind sauber
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
17.11.2013, 12:13 | #9 |
| Tastauren lautstärkeregler funktoniert nicht Soll ich noch mit anderen Programmen den Rechner scannen? |
17.11.2013, 18:24 | #10 |
/// the machine /// TB-Ausbilder | Tastauren lautstärkeregler funktoniert nicht Nicht nötig
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
17.11.2013, 20:10 | #11 |
| Tastauren lautstärkeregler funktoniert nicht ok, danke nochmals für deine Hilfe |
18.11.2013, 10:18 | #12 |
/// the machine /// TB-Ausbilder | Tastauren lautstärkeregler funktoniert nicht Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Tastauren lautstärkeregler funktoniert nicht |
garnichts, könntet, lautstärke, rechner, registry, rootkit, sobald, stecker, stärke, tastatur, troja, trojaner, trojaner?, usb, verändert, woche, woran |