|
Plagegeister aller Art und deren Bekämpfung: Google Chrome öffnet "Sponsorship"-TabsWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
16.11.2013, 01:03 | #1 |
| Google Chrome öffnet "Sponsorship"-Tabs Hallo, seit einiger Zeit öffnen sich in Google Chrome "Sponsorship"- Tabs, das geschieht meist in unregelmäßigen Abständen und in 95% wird nur eine Weiße Seite angezeigt. Die Angabe in der Adresszeile Variiert aber des öfteren. Habe schon versucht ob ich etwas mit Malwarebytes bewirken kann aber das war aber nicht erfolgreich. Hier habe ich jetzt noch mal eines Scan durchgeführt und folgende Logfiles herausbekommen: Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.11.15.11 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16721 xxxxx :: xxxxx [limitiert] 16.11.2013 00:41:52 MBAM-log-2013-11-16 (00-46-08).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 238793 Laufzeit: 2 Minute(n), 55 Sekunde(n) Infizierte Speicherprozesse: 1 C:\Users\xxxxx\Downloads\SoftonicDownloader_fuer_arcsoft-totalmedia-theatre.exe (PUP.Optional.Softonic.A) -> 13128 -> Keine Aktion durchgeführt. Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 1 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DSite (PUP.Optional.DigitalSites.A) -> Keine Aktion durchgeführt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 2 C:\Users\xxxxx\Downloads\SoftonicDownloader_fuer_arcsoft-totalmedia-theatre.exe (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt. C:\Users\xxxxx\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe (PUP.Optional.DigitalSites.A) -> Keine Aktion durchgeführt. (Ende) Ich hoffe Ihr könnt mir helfen grüße |
16.11.2013, 11:22 | #2 |
/// the machine /// TB-Ausbilder | Google Chrome öffnet "Sponsorship"-Tabs hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
16.11.2013, 12:09 | #3 |
| Google Chrome öffnet "Sponsorship"-Tabs FRST Logfile:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2013 Ran by xxxxx (administrator) on xxxxx-PC on 16-11-2013 11:41:55 Running from C:\Users\xxxxx\Downloads Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2014\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe () C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe (LucidLogix) C:\Program Files\Lucidlogix Technologies\VIRTU MVP 2.0\LucidSrv.exe (Malwarebytes Corporation) C:\Program Files\Ap\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\Ap\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Program Files\Ap\MSI\CommandCenter\MSIControlService.exe (MSI) C:\Program Files\Ap\MSI\Fast Boot\FastBootService.exe (MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe (MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe () C:\MSI\Super RAID\SuperRAIDSvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe () C:\Program Files\Ap\MSI\CommandCenter\CPU\MSICPUService.exe () C:\Program Files\Ap\MSI\CommandCenter\SuperIO\MSISuperIOService.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (MSI CO.,LTD.) C:\Program Files\Ap\MSI\CommandCenter\CPU\CPU_Ratio\CPU_Ratio.exe (Microsoft Corporation) C:\Windows\sysWOW64\wbem\wmiprvse.exe (MSI) C:\Program Files (x86)\MSI\MSITrigger\Direct OC\Direct OC_Gui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Malwarebytes Corporation) C:\Program Files\Ap\Malwarebytes' Anti-Malware\mbamgui.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel Corporation) C:\Program Files\Ap\Intel\Bluetooth\BleServicesCtrl.exe () C:\Program Files\Lucidlogix Technologies\VIRTU MVP 2.0\MVPControlPanel20.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe () C:\Program Files\Ap\RocketDock\RocketDock.exe (Electronic Arts) E:\Program Files\Origin\Origin.exe (Motorola Solutions, Inc.) C:\Program Files\Ap\Intel\Bluetooth\devmonsrv.exe (Valve Corporation) E:\Program Files\Steam\Steam.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Motorola Solutions, Inc.) C:\Program Files\Ap\Intel\Bluetooth\obexsrv.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe () C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe (MSI) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe (CyberLink Corporation.) C:\Program Files (x86)\CyberLink\InstantBurn\Win2K\IBurn.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (Nullsoft, Inc.) C:\Program Files\Ap\Winamp\winampa.exe (Motorola Solutions, Inc.) C:\Program Files\Ap\Intel\Bluetooth\mediasrv.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Software Security System) C:\Program Files\Lucidlogix Technologies\VIRTU MVP 2.0\EKAG20NT.EXE (Micro-Star INT'L CO.,LTD.) C:\Program Files\Ap\MSI\Fast Boot\FastBoot.exe (Creative Technology Ltd) C:\Program Files\Ap\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe (Motorola Solutions, Inc.) C:\Program Files\Ap\Intel\Bluetooth\BTPlayerCtrl.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDWebCam.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPop3.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMovieViewer.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe (LucidLogix) C:\Program Files\Lucidlogix Technologies\VIRTU MVP 2.0\lucidservices.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe (Corsair Components, Inc.) C:\Program Files (x86)\Corsair\CorsairLINK2\CorsairLINK_HardwareMonitor.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\hsscp.exe (Pokki) C:\Users\xxxxx\AppData\Local\Pokki\Engine\pokki.exe (Pokki) C:\Users\xxxxx\AppData\Local\Pokki\Engine\pokki.exe (Micro-Star International) C:\Program Files\Ap\MSI\Live Update 5\LU5.exe () C:\Program Files\NVIDIA Corporation\Display\nvSmartMaxApp64.exe () C:\Program Files\NVIDIA Corporation\Display\nvSmartMaxApp.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IntelPROSet] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4791024 2013-02-08] (Intel(R) Corporation) HKLM\...\Run: [BLEServicesCtrl] - C:\Program Files\Ap\Intel\Bluetooth\BleServicesCtrl.exe [184112 2012-09-17] (Intel Corporation) HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files\Ap\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [VIRTU MVP 2.0] - C:\Program Files\Lucidlogix Technologies\VIRTU MVP 2.0\MVPControlPanel20.exe [1223552 2012-12-30] () HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7477016 2013-04-24] (Logitech Inc.) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188552 2013-05-27] (Realtek Semiconductor) HKLM\...\Run: [HotKeysCmds] - "C:\Windows\system32\hkcmd.exe" HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [MBCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64 Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [RocketDock] - C:\Program Files\Ap\RocketDock\RocketDock.exe [495616 2007-09-02] () HKCU\...\Run: [Power2GoExpress] - [x] HKCU\...\Run: [EADM] - E:\Program Files\Origin\Origin.exe [3561816 2013-11-10] (Electronic Arts) HKCU\...\Run: [Steam] - E:\Program Files\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.) HKCU\...\Run: [Pokki] - C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform HKCU\...\Run: [GoogleChromeAutoLaunch_68331B59891BE5E2B96D6F88B9311BA2] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863184 2013-11-14] (Google Inc.) HKCU\...\RunOnce: [Application Restart #1] - C:\Users\xxxxx\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\MC133\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --flag-switches-begin --flag-switches-end --restore-last-session [8252744 2013-11-01] (Pokki) HKCU\...\Policies\system: [DisableLockWorkstation] 0 HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation) HKLM-x32\...\Run: [RUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe [115048 2011-09-20] (Renesas Electronics Corporation) HKLM-x32\...\Run: [Super-Charger] - C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [506864 2013-03-08] (MSI) HKLM-x32\...\Run: [InstantBurn] - C:\Program Files (x86)\CyberLink\InstantBurn\Win2K\IBurn.exe [697640 2010-11-12] (CyberLink Corporation.) HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-20] (CyberLink) HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-30] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\CyberLink\Shared files\brs.exe [75048 2011-09-28] (cyberlink) HKLM-x32\...\Run: [WinampAgent] - C:\Program Files\Ap\Winamp\winampa.exe [74752 2012-06-20] (Nullsoft, Inc.) HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4908592 2013-10-07] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] () HKLM-x32\...\Run: [Fast Boot] - C:\Program Files\Ap\MSI\Fast Boot\StartFastBoot.exe [764472 2012-09-19] () HKLM-x32\...\Run: [PowerDVD13Agent] - "C:\Program Files (x86)\Ap\CyberLink\PowerDVD13\PowerDVD13\PowerDVD13Agent.exe" HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Live Update 5] - C:\Program Files\Ap\MSI\Live Update 5\BootStartLiveupdate.exe [315392 2012-01-30] () HKLM-x32\...\Run: [CommandCenter] - C:\Program Files\Ap\MSI\CommandCenter\StartCommandCenter.exe [809968 2013-10-15] () HKLM-x32\...\Run: [Sound Blaster Cinema] - C:\Program Files\Ap\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2013-08-16] (Creative Technology Ltd) AppInit_DLLs: C:\Windows\system32\appinit_dll.dll [462720 2012-12-30] (Lucidlogix Inc.) AppInit_DLLs-x32: c:\windows\syswow64\appinit_dll.dll [425344 2012-12-30] (Lucidlogix Inc.) Startup: C:\Users\MC133\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech blank Produktregistrierung.lnk ShortcutTarget: Logitech blank Produktregistrierung.lnk -> C:\Program Files\Ap\Logitech\G930\eReg.exe (No File) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?babsrc=HP_ss_din2g&mntrId=FAF7606C6680DD84&affID=120695&tt=070713_91114&tsp=4936 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=FAF7606C6680DD84&affID=120695&tt=070713_91114&tsp=4936 BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.) BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll (AnchorFree Inc.) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) BHO-x32: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll (AnchorFree Inc.) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.) Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.) Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.) Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.) Winsock: Catalog9 16 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 01 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 02 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 03 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 04 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 16 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\jnjzyg7j.default FF user.js: detected! => C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\jnjzyg7j.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Ap\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: @videolan.org/vlc,version=2.1.0-git-20130309-0405 - C:\Program Files\Ap\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Ap\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Ap\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF SearchPlugin: C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\jnjzyg7j.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\jnjzyg7j.default\searchplugins\delta.xml FF Extension: Bazaar Friend - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\jnjzyg7j.default\Extensions\addon@bazaarfriend.com FF Extension: Real Summer Sale - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\jnjzyg7j.default\Extensions\realsummersale1@realsummersale.com FF Extension: No Name - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\jnjzyg7j.default\Extensions\staged FF Extension: Fast Discountz - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\jnjzyg7j.default\Extensions\{2a4808f0-e451-4d0b-982a-bb0f44d3354d} FF Extension: WebToSave - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\jnjzyg7j.default\Extensions\{f80bc79c-ab5e-418a-a0be-3d9e66b4e976} FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Ap\Mozilla Firefox\firefox.exe Chrome: ======= CHR HomePage: hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=FAF7606C6680DD84&affID=120695&tt=070713_91114&tsp=4936 CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\gcswf32.dll No File CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File CHR Plugin: ( "name": "",) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: ( "name": "",) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Extension: (New Tab) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\bakijjialdiiboeaknfpmflphhmljfkd\9.4_0 CHR Extension: (YouTube) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1 CHR Extension: (Battlefield Heroes) - C:\Users\MC133\AppData\Local\Google\Chrome\User Data\Default\Extensions\cehdakiococlfmjcbebbkjkfjhbieknh\5.0.203.0_0 CHR Extension: (Adblock Plus) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0 CHR Extension: (Google Search) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1 CHR Extension: (Black Black Chrome Theme Blue Highlight) - C:\Users\MC133\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpkblfdnephakmjpldlhjpcblifmojn\3.4_0 CHR Extension: (DVDVideoSoft) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.2.3.3_0 CHR Extension: (Google Wallet) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Battlefield Play4Free) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0 CHR Extension: (Gmail) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - C:\Users\MC133\AppData\Local\newhb2.crx CHR HKLM-x32\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - C:\Users\MC133\AppData\Local\newhb2.crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx ==================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3538480 2013-10-03] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-25] (AVG Technologies CZ, s.r.o.) R2 Bluetooth Device Monitor; C:\Program Files\Ap\Intel\Bluetooth\devmonsrv.exe [1120784 2012-12-13] (Motorola Solutions, Inc.) R2 Bluetooth Media Service; C:\Program Files\Ap\Intel\Bluetooth\mediasrv.exe [1361856 2012-12-03] (Motorola Solutions, Inc.) R2 Bluetooth OBEX Service; C:\Program Files\Ap\Intel\Bluetooth\obexsrv.exe [1148864 2012-12-03] (Motorola Solutions, Inc.) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink) R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [853800 2013-07-25] (AnchorFree Inc.) S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [78512 2013-07-24] () R2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [548136 2013-07-25] () S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [180200 2013-02-13] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-17] (Intel Corporation) R2 LucidSrv; C:\Program Files\Lucidlogix Technologies\VIRTU MVP 2.0\LucidSrv.exe [15744 2012-12-30] (LucidLogix) R2 MBAMScheduler; C:\Program Files\Ap\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\Ap\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 MSIBIOSData_CC; C:\Program Files\Ap\MSI\CommandCenter\BIOSData\MSIBIOSDataService.exe [2100736 2013-09-11] (MSI) S3 MSIClock_CC; C:\Program Files\Ap\MSI\CommandCenter\ClockGen\MSIClockService.exe [307200 2013-10-01] () S3 MSICOMM_CC; C:\Program Files\Ap\MSI\CommandCenter\MSICommService.exe [2114560 2013-09-12] () R3 MSICPU_CC; C:\Program Files\Ap\MSI\CommandCenter\CPU\MSICPUService.exe [4110336 2013-09-12] () R2 MSICTL_CC; C:\Program Files\Ap\MSI\CommandCenter\MSIControlService.exe [1985536 2013-10-09] () S3 MSIDDR_CC; C:\Program Files\Ap\MSI\CommandCenter\DDR\MSIDDRService.exe [2224640 2013-09-11] () S3 MSISaveLoad_CC; C:\Program Files\Ap\MSI\CommandCenter\MSISaveLoadService.exe [3957248 2013-07-18] () S3 MSISMB_CC; C:\Program Files\Ap\MSI\CommandCenter\SMBus\MSISMBService.exe [177152 2013-09-11] () R3 MSISuperIO_CC; C:\Program Files\Ap\MSI\CommandCenter\SuperIO\MSISuperIOService.exe [503808 2013-09-12] () S3 MSIWMI_CC; C:\Program Files\Ap\MSI\CommandCenter\MSIWMIService.exe [182272 2013-08-23] () R2 MSI_FastBoot; C:\Program Files\Ap\MSI\Fast Boot\FastBootService.exe [103992 2012-10-26] (MSI) R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161264 2013-02-20] (MSI) R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [29728 2013-05-28] (MICRO-STAR INTERNATIONAL CO., LTD.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-02-08] () R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation) S3 OnlineStorageService; C:\Program Files\Trend Micro SafeSync\hrfscore.exe [7908664 2012-07-12] (Trend Micro Inc.) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-12] () R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [490496 2013-04-11] () R2 SuperRAIDSvc; C:\MSI\Super RAID\SuperRAIDSvc.exe [15872 2013-04-03] () R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [15888 2013-04-01] (Intel(R) Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3386608 2013-02-08] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== R3 AcpiCtlDrv; C:\Windows\System32\DRIVERS\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49048 2012-07-18] (Asmedia Technology) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [148792 2013-09-25] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-09-02] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-08] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.) R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [66928 2013-04-11] (Qualcomm Atheros, Inc.) R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [131968 2012-10-30] (Motorola Solutions, Inc.) R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1342848 2012-12-03] (Motorola Solutions, Inc.) R1 CLBStor; C:\Windows\System32\DRIVERS\CLBStor.sys [24560 2010-07-15] (Cyberlink Co.,Ltd.) R2 CLBUDF; C:\Windows\System32\Drivers\CLBUDF.sys [377840 2010-07-15] (CyberLink Corporation.) R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [46792 2013-07-24] (AnchorFree Inc.) R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21048 2013-02-13] () R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21048 2013-02-13] () R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [25448 2013-01-07] (Intel Corporation) R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-02-13] () R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [165824 2013-04-11] (Qualcomm Atheros, Inc.) S3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech) S3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech) R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.) R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66800 2013-01-17] (Logitech Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-17] (Intel Corporation) R3 NTIOLib_1_0_1; C:\MSI\Super RAID\NTIOLib_X64.sys [14136 2012-06-11] (MSI) R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI) R3 NTIOLib_1_0_4; C:\Program Files\Ap\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI) S3 NTIOLib_1_0_6; C:\Program Files (x86)\Setup Files\Ms7815v150\NTIOLib_X64.sys [11888 2011-01-06] (MSI) S3 NTIOLib_DirectOC; C:\Program Files (x86)\MSI\MSITrigger\Direct OC\NTIOLib_X64.sys [13808 2013-03-19] (MSI) R3 NTIOLib_FastBoot; C:\Program Files\Ap\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MSI) S3 NTIOLib_MSIClock_CC; C:\Program Files\Ap\MSI\CommandCenter\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI) S3 NTIOLib_MSICOMM_CC; C:\Program Files\Ap\MSI\CommandCenter\NTIOLib_X64.sys [13368 2012-11-19] (MSI) R3 NTIOLib_MSICPU_CC; C:\Program Files\Ap\MSI\CommandCenter\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI) S3 NTIOLib_MSIDDR_CC; C:\Program Files\Ap\MSI\CommandCenter\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI) S3 NTIOLib_MSIFrequency_CC; C:\Program Files\Ap\MSI\CommandCenter\ClockGen\CPU_Frequency\NTIOLib_X64.sys [13368 2012-11-20] (MSI) R3 NTIOLib_MSIRatio_CC; C:\Program Files\Ap\MSI\CommandCenter\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI) S3 NTIOLib_MSISMB_CC; C:\Program Files\Ap\MSI\CommandCenter\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI) R3 NTIOLib_MSISuperIO_CC; C:\Program Files\Ap\MSI\CommandCenter\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation) R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [114568 2012-08-27] (Renesas Electronics Corporation) R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation) R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-04-24] (Anchorfree Inc.) R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2013-11-16] () S3 MSICDSetup; \??\D:\CDriver64.sys [x] S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [x] U5 UnlockerDriver5; C:\Program Files\Ap\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S3 VGPU; System32\drivers\rdvgkmd.sys [x] R3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Corsair\CorsairLINK2\CorsairLINK_HardwareMonitor.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-16 11:41 - 2013-11-16 11:42 - 00034631 _____ C:\Users\xxxxx\Downloads\FRST.txt 2013-11-16 11:41 - 2013-11-16 11:41 - 00000000 ____D C:\FRST 2013-11-16 11:37 - 2013-11-16 11:38 - 01957794 _____ (Farbar) C:\Users\MC133\Downloads\FRST64.exe 2013-11-16 11:30 - 2013-11-16 11:33 - 00002054 _____ C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk 2013-11-16 11:29 - 2013-11-16 11:29 - 00305832 _____ C:\Windows\Minidump\111613-18439-01.dmp 2013-11-16 11:29 - 2013-11-16 11:29 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2013-11-16 03:00 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-16 03:00 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-16 03:00 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-16 03:00 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-16 03:00 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-16 03:00 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-16 03:00 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-16 03:00 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-16 03:00 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-16 03:00 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-16 03:00 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-16 03:00 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-16 03:00 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-16 03:00 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-16 03:00 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-16 03:00 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-16 03:00 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-16 03:00 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-16 03:00 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-16 03:00 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-16 03:00 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-16 03:00 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-16 03:00 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-16 03:00 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-16 03:00 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-16 03:00 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-16 03:00 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-16 03:00 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-16 03:00 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-16 03:00 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-16 03:00 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-16 00:49 - 2013-11-16 02:13 - 104071200 _____ (ArcSoft ) C:\Users\xxxxx\Desktop\totalmediatheatre6_retail_tbyb_all.exe 2013-11-15 23:38 - 2013-11-15 23:38 - 00401784 _____ (Softonic ) C:\Users\xxxxx\Downloads\SoftonicDownloader_fuer_arcsoft-totalmedia-theatre.exe 2013-11-15 22:54 - 2013-11-15 22:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2013-11-15 22:27 - 2013-09-17 03:20 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll 2013-11-15 22:27 - 2013-09-17 03:20 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2013-11-15 21:38 - 2013-11-16 11:30 - 00000000 ___HD C:\MSIServiceCfg_CC 2013-11-15 21:38 - 2013-11-15 21:38 - 00001050 _____ C:\Users\Public\Desktop\CommandCenter.lnk 2013-11-15 21:38 - 2013-02-08 11:04 - 00000000 _____ C:\RAMDiskImage.img 2013-11-13 23:57 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-13 23:57 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-13 23:13 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-13 23:13 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-13 23:13 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-13 23:13 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-13 23:13 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-13 23:13 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-13 23:13 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-13 23:13 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-13 23:13 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-13 23:13 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-13 23:13 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-13 23:13 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-13 23:13 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-13 23:13 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-13 22:53 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-13 22:48 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-13 22:48 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-13 22:48 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-13 22:48 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-13 22:48 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-13 22:48 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-13 22:48 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-12 23:01 - 2013-11-12 23:01 - 00000000 ____D C:\Users\xxxxx\Downloads\WidescreenFixer-r675 2013-11-12 22:51 - 2013-11-12 22:52 - 01065561 _____ C:\Users\xxxxx\Downloads\WidescreenFixer-r675.7z 2013-11-12 21:26 - 2013-11-12 21:26 - 00000000 ____D C:\Users\xxxxx\AppData\Local\NVIDIA Corporation 2013-11-11 21:11 - 2013-11-11 21:40 - 29672376 _____ (International GeoGebra Institute) C:\Users\xxxxx\Downloads\GeoGebra-Windows-Installer-4-2-60-0.exe 2013-11-11 14:38 - 2013-11-11 14:39 - 00000000 ____D C:\Users\xxxxx\Documents\Battlefield 3 2013-11-11 14:38 - 2013-11-11 14:38 - 00000000 ____D C:\Users\xxxxx\AppData\Local\ESN 2013-11-11 14:38 - 2013-11-11 14:38 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins 2013-11-11 14:35 - 2013-11-11 14:37 - 03820328 _____ C:\Users\xxxxx\Downloads\battlelog-web-plugins_2.3.0_119.exe 2013-11-11 14:13 - 2013-11-11 14:13 - 00000974 _____ C:\Users\xxxxx\Desktop\MSI Afterburner.lnk 2013-11-11 14:13 - 2013-11-11 14:13 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-11-11 14:13 - 2013-11-11 14:13 - 00000000 ____D C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner 2013-11-10 11:17 - 2013-11-10 11:17 - 00000000 ____D C:\Users\xxxxx\Downloads\WidescreenFixer-r674 2013-11-10 11:14 - 2013-11-10 11:15 - 01065523 _____ C:\Users\xxxxx\Downloads\WidescreenFixer-r674.7z 2013-11-10 11:09 - 2013-11-10 11:09 - 00000000 ____D C:\ProgramData\EA Core 2013-11-10 11:01 - 2013-11-10 11:01 - 00000865 _____ C:\Users\Public\Desktop\Battlefield 3.lnk 2013-11-10 10:59 - 2013-11-10 10:59 - 00000887 _____ C:\Users\Public\Desktop\Dead Space 3.lnk 2013-11-10 00:43 - 2013-10-23 11:30 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 22933792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 15855568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 12572960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-11-10 00:43 - 2013-10-23 11:30 - 11426568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 11374520 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 09524088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 09480328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 03131680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 03124512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 02946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 02747168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 01241376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 00655136 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 00560416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-11-10 00:43 - 2013-10-23 11:30 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-11-10 00:43 - 2013-01-29 09:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll 2013-11-10 00:14 - 2013-11-10 00:14 - 00000216 _____ C:\Users\xxxxx\Desktop\Company of Heroes 2.url 2013-11-09 23:19 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2013-11-09 23:19 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2013-11-09 23:19 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2013-11-09 23:19 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2013-11-09 23:19 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2013-11-09 23:19 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2013-11-09 23:19 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2013-11-09 23:19 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2013-11-09 23:19 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2013-11-09 23:19 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2013-11-09 23:19 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2013-11-09 23:19 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2013-11-09 23:19 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2013-11-09 23:19 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2013-11-09 23:19 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2013-11-09 23:19 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2013-11-09 23:19 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2013-11-09 23:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2013-11-09 23:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2013-11-09 23:19 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2013-11-09 23:19 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2013-11-09 23:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2013-11-09 23:19 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2013-11-09 23:19 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2013-11-09 23:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2013-11-09 23:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2013-11-09 23:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2013-11-09 23:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2013-11-09 23:19 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2013-11-09 23:19 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2013-11-09 23:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2013-11-09 23:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2013-11-09 23:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2013-11-09 23:19 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2013-11-09 23:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2013-11-09 23:19 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2013-11-09 23:19 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2013-11-09 23:19 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2013-11-09 23:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2013-11-09 23:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2013-11-09 23:19 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2013-11-09 23:19 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2013-11-09 23:19 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2013-11-09 23:19 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2013-11-09 23:19 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2013-11-09 23:19 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2013-11-09 23:19 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2013-11-09 23:19 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2013-11-09 23:19 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2013-11-09 23:19 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2013-11-09 23:19 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2013-11-09 23:19 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2013-11-09 23:19 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2013-11-09 23:19 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2013-11-09 23:19 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2013-11-09 23:19 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2013-11-09 23:19 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2013-11-09 23:19 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2013-11-09 23:19 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2013-11-09 23:19 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2013-11-09 23:19 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2013-11-09 23:19 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2013-11-09 23:19 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2013-11-09 23:19 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2013-11-09 23:19 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2013-11-09 23:19 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2013-11-09 23:19 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2013-11-09 23:19 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2013-11-09 23:19 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2013-11-09 23:19 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2013-11-09 23:19 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2013-11-09 23:19 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2013-11-09 23:19 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2013-11-09 23:19 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2013-11-09 23:19 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2013-11-09 23:19 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2013-11-09 23:19 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2013-11-09 23:19 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2013-11-09 23:19 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2013-11-09 23:19 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2013-11-09 23:19 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2013-11-09 23:19 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2013-11-09 23:19 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2013-11-09 23:19 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2013-11-09 23:19 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2013-11-09 23:19 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2013-11-09 23:19 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2013-11-09 23:19 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2013-11-09 23:19 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2013-11-09 23:19 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2013-11-09 23:19 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2013-11-09 23:19 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2013-11-09 23:19 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2013-11-09 23:19 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2013-11-09 23:19 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2013-11-09 23:18 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2013-11-09 23:18 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2013-11-09 23:18 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2013-11-09 23:18 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2013-11-09 23:18 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2013-11-09 23:18 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2013-11-09 23:18 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2013-11-09 23:18 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2013-11-09 23:18 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2013-11-09 23:18 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2013-11-09 23:18 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2013-11-09 23:18 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2013-11-09 23:18 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2013-11-09 23:18 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2013-11-09 23:18 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2013-11-09 23:18 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2013-11-09 23:18 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2013-11-09 23:18 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2013-11-09 23:18 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2013-11-09 23:18 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2013-11-09 23:18 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2013-11-09 23:18 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2013-11-09 23:18 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2013-11-09 23:18 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2013-11-09 23:18 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2013-11-09 23:18 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2013-11-09 23:18 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2013-11-09 23:18 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2013-11-09 23:18 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2013-11-09 23:18 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2013-11-09 23:18 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2013-11-09 23:18 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2013-11-09 23:18 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2013-11-09 23:18 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2013-11-09 23:18 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2013-11-09 23:18 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2013-11-09 23:18 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2013-11-09 23:18 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2013-11-09 23:18 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2013-11-09 23:18 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2013-11-09 23:18 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2013-11-09 23:18 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2013-11-09 23:18 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2013-11-09 23:18 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2013-11-09 23:18 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2013-11-09 23:18 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2013-11-09 23:18 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2013-11-09 23:18 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2013-11-09 23:18 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2013-11-09 23:18 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2013-11-09 23:18 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2013-11-09 23:18 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2013-11-09 23:18 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2013-11-09 23:18 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2013-11-09 23:18 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2013-11-09 23:18 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2013-11-09 23:18 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2013-11-09 23:18 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2013-11-09 23:18 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2013-11-09 23:18 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2013-11-09 23:18 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2013-11-09 23:18 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2013-11-09 23:18 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2013-11-09 23:18 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2013-11-09 23:18 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2013-11-09 23:18 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2013-11-09 23:18 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2013-11-09 23:18 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2013-11-09 23:18 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2013-11-09 23:18 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2013-11-09 23:18 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2013-11-09 23:18 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2013-11-09 23:18 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2013-11-09 23:18 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2013-11-09 23:18 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2013-11-09 23:18 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2013-11-09 23:18 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2013-11-09 23:18 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2013-11-09 23:18 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2013-11-09 23:18 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2013-11-09 23:18 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2013-11-09 23:18 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2013-11-09 23:18 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2013-11-09 20:55 - 2013-11-08 21:47 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-11-09 20:55 - 2013-11-08 21:47 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-11-09 20:54 - 2013-09-28 00:01 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-11-09 20:54 - 2013-09-28 00:01 - 00028960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-11-09 19:10 - 2013-10-08 16:48 - 163606685 _____ C:\Users\xxxxx\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe 2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe ==================== One Month Modified Files and Folders ======= 2013-11-16 11:42 - 2013-11-16 11:41 - 00034631 _____ C:\Users\xxxxx\Downloads\FRST.txt 2013-11-16 11:42 - 2013-06-09 22:01 - 00000021 _____ C:\Users\xxxxx\AppData\Roaming\config_data.dat 2013-11-16 11:41 - 2013-11-16 11:41 - 00000000 ____D C:\FRST 2013-11-16 11:38 - 2013-11-16 11:37 - 01957794 _____ (Farbar) C:\Users\xxxxx\Downloads\FRST64.exe 2013-11-16 11:36 - 2009-07-14 05:45 - 00026496 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-16 11:36 - 2009-07-14 05:45 - 00026496 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-16 11:35 - 2013-06-09 21:05 - 00707762 _____ C:\Windows\system32\perfh007.dat 2013-11-16 11:35 - 2013-06-09 21:05 - 00153248 _____ C:\Windows\system32\perfc007.dat 2013-11-16 11:35 - 2013-06-09 17:09 - 00000000 ____D C:\ProgramData\MFAData 2013-11-16 11:35 - 2009-07-14 06:13 - 01643782 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-16 11:34 - 2013-06-09 11:14 - 01313483 _____ C:\Windows\WindowsUpdate.log 2013-11-16 11:33 - 2013-11-16 11:30 - 00002054 _____ C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk 2013-11-16 11:30 - 2013-11-15 21:38 - 00000000 ___HD C:\MSIServiceCfg_CC 2013-11-16 11:30 - 2013-06-16 19:50 - 00000000 ____D C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki 2013-11-16 11:30 - 2013-06-16 19:50 - 00000000 ____D C:\Users\xxxxx\AppData\Local\Pokki 2013-11-16 11:30 - 2013-06-10 16:49 - 00000000 ____D C:\Users\xxxxx\AppData\Roaming\Skype 2013-11-16 11:30 - 2013-06-09 12:31 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-16 11:30 - 2013-06-09 12:30 - 00000000 ____D C:\ProgramData\Bigfoot Networks 2013-11-16 11:30 - 2009-07-14 05:51 - 00204682 _____ C:\Windows\setupact.log 2013-11-16 11:29 - 2013-11-16 11:29 - 00305832 _____ C:\Windows\Minidump\111613-18439-01.dmp 2013-11-16 11:29 - 2013-11-16 11:29 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2013-11-16 11:29 - 2013-08-21 19:20 - 00000000 ____D C:\ProgramData\NVIDIA 2013-11-16 11:29 - 2013-06-12 15:22 - 1250579632 _____ C:\Windows\MEMORY.DMP 2013-11-16 11:29 - 2013-06-12 15:22 - 00000000 ____D C:\Windows\Minidump 2013-11-16 11:29 - 2013-06-09 12:43 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys 2013-11-16 11:29 - 2010-11-21 04:47 - 00127794 _____ C:\Windows\PFRO.log 2013-11-16 11:29 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-16 08:00 - 2013-06-11 21:06 - 00000286 _____ C:\Windows\Tasks\DSite.job 2013-11-16 07:45 - 2013-06-09 12:31 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-16 07:13 - 2013-06-16 19:58 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-16 02:13 - 2013-11-16 00:49 - 104071200 _____ (ArcSoft ) C:\Users\xxxxx\Desktop\totalmediatheatre6_retail_tbyb_all.exe 2013-11-16 02:13 - 2013-06-09 20:37 - 00000000 ____D C:\Users\xxxxx\AppData\Local\Downloaded Installations 2013-11-16 02:05 - 2013-06-09 12:31 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-11-16 00:06 - 2013-06-09 16:14 - 00000159 ___RH C:\Windows\ctfile.rfc 2013-11-16 00:06 - 2013-06-09 16:14 - 00000000 ____D C:\ProgramData\Creative 2013-11-16 00:00 - 2013-07-26 23:01 - 00000110 _____ C:\Users\xxxxx\AppData\Roaming\WB.CFG 2013-11-16 00:00 - 2013-06-16 23:00 - 00000006 _____ C:\Users\xxxxx\AppData\Roaming\WBPU-TTL.DAT 2013-11-15 23:38 - 2013-11-15 23:38 - 00401784 _____ (Softonic ) C:\Users\xxxxx\Downloads\SoftonicDownloader_fuer_arcsoft-totalmedia-theatre.exe 2013-11-15 23:01 - 2013-06-09 15:35 - 00000000 ____D C:\Users\xxxxx\AppData\Roaming\Winamp 2013-11-15 22:54 - 2013-11-15 22:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2013-11-15 21:38 - 2013-11-15 21:38 - 00001050 _____ C:\Users\Public\Desktop\CommandCenter.lnk 2013-11-15 16:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-15 15:40 - 2013-06-13 00:30 - 00003172 _____ C:\Windows\System32\Tasks\FRAPS 2013-11-14 19:32 - 2013-08-15 22:18 - 00000000 ____D C:\Windows\system32\MRT 2013-11-14 19:31 - 2013-06-09 21:23 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-13 01:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-11-13 01:06 - 2013-08-22 00:20 - 00000000 ____D C:\Users\xxxxx\AppData\Local\David_Rudie 2013-11-13 01:05 - 2013-07-03 13:37 - 00000000 ____D C:\Program Files (x86)\Setup Files 2013-11-12 23:32 - 2013-06-12 15:47 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2013-11-12 23:32 - 2013-06-10 07:36 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2013-11-12 23:32 - 2013-06-10 07:36 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2013-11-12 23:26 - 2013-06-10 07:36 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe 2013-11-12 23:01 - 2013-11-12 23:01 - 00000000 ____D C:\Users\xxxxx\Downloads\WidescreenFixer-r675 2013-11-12 23:01 - 2013-09-15 15:58 - 00001734 _____ C:\Users\xxxxx\Desktop\Widescreen Fixer - Verknüpfung.lnk 2013-11-12 22:52 - 2013-11-12 22:51 - 01065561 _____ C:\Users\xxxxx\Downloads\WidescreenFixer-r675.7z 2013-11-12 21:26 - 2013-11-12 21:26 - 00000000 ____D C:\Users\xxxxx\AppData\Local\NVIDIA Corporation 2013-11-12 14:39 - 2013-06-15 02:42 - 00000000 ____D C:\Users\xxxxx\Documents\My Games 2013-11-11 21:40 - 2013-11-11 21:11 - 29672376 _____ (International GeoGebra Institute) C:\Users\xxxxx\Downloads\GeoGebra-Windows-Installer-4-2-60-0.exe 2013-11-11 14:39 - 2013-11-11 14:38 - 00000000 ____D C:\Users\xxxxx\Documents\Battlefield 3 2013-11-11 14:38 - 2013-11-11 14:38 - 00000000 ____D C:\Users\xxxxx\AppData\Local\ESN 2013-11-11 14:38 - 2013-11-11 14:38 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins 2013-11-11 14:38 - 2013-06-12 15:46 - 00000000 ____D C:\Users\xxxxx\AppData\Local\PunkBuster 2013-11-11 14:37 - 2013-11-11 14:35 - 03820328 _____ C:\Users\xxxxx\Downloads\battlelog-web-plugins_2.3.0_119.exe 2013-11-11 14:23 - 2013-06-09 22:31 - 00000000 ____D C:\Users\xxxxx\AppData\Local\CrashDumps 2013-11-11 14:13 - 2013-11-11 14:13 - 00000974 _____ C:\Users\xxxxx\Desktop\MSI Afterburner.lnk 2013-11-11 14:13 - 2013-11-11 14:13 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-11-11 14:13 - 2013-11-11 14:13 - 00000000 ____D C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner 2013-11-11 14:13 - 2013-06-09 11:27 - 00000000 ____D C:\Program Files\Ap 2013-11-10 11:17 - 2013-11-10 11:17 - 00000000 ____D C:\Users\xxxxx\Downloads\WidescreenFixer-r674 2013-11-10 11:15 - 2013-11-10 11:14 - 01065523 _____ C:\Users\xxxxx\Downloads\WidescreenFixer-r674.7z 2013-11-10 11:09 - 2013-11-10 11:09 - 00000000 ____D C:\ProgramData\EA Core 2013-11-10 11:01 - 2013-11-10 11:01 - 00000865 _____ C:\Users\Public\Desktop\Battlefield 3.lnk 2013-11-10 11:01 - 2013-06-09 16:33 - 00670204 _____ C:\Windows\DirectX.log 2013-11-10 10:59 - 2013-11-10 10:59 - 00000887 _____ C:\Users\Public\Desktop\Dead Space 3.lnk 2013-11-10 01:27 - 2013-10-09 18:53 - 00000000 ____D C:\Users\xxxxx\AppData\Local\PMB Files 2013-11-10 00:44 - 2013-08-29 20:53 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-11-10 00:44 - 2013-08-29 20:53 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-11-10 00:20 - 2013-07-03 12:51 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-11-10 00:14 - 2013-11-10 00:14 - 00000216 _____ C:\Users\xxxxx\Desktop\Company of Heroes 2.url 2013-11-09 20:55 - 2013-08-21 19:19 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-11-09 20:04 - 2013-08-22 15:10 - 00000000 ____D C:\Users\xxxxx\AppData\Local\NVIDIA 2013-11-08 21:47 - 2013-11-09 20:55 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-11-08 21:47 - 2013-11-09 20:55 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 22933792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 15855568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 12572960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-10-23 11:30 - 2013-11-10 00:43 - 11426568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 11374520 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 09524088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 09480328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 03131680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 03124512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 02946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 02747168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 01241376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 00655136 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 00560416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-10-23 11:30 - 2013-11-10 00:43 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-10-23 11:30 - 2013-10-12 13:36 - 30344480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-10-23 11:30 - 2013-10-12 13:36 - 18286416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-10-23 11:30 - 2013-10-12 13:36 - 18199872 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-10-23 11:30 - 2013-10-12 13:36 - 15212336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-10-23 11:30 - 2013-10-12 13:36 - 03067560 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-10-23 11:30 - 2013-10-12 13:36 - 01435504 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-10-23 11:30 - 2013-08-29 20:53 - 02695200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-10-23 11:30 - 2013-08-29 20:53 - 00023287 _____ C:\Windows\system32\nvinfo.pb 2013-10-23 09:20 - 2013-08-29 20:53 - 06669600 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-10-23 09:20 - 2013-08-29 20:53 - 03489568 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-10-23 09:20 - 2013-08-29 20:53 - 03426956 _____ C:\Windows\system32\nvcoproc.bin 2013-10-23 09:20 - 2013-08-29 20:53 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-10-23 09:20 - 2013-08-29 20:53 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-10-23 09:20 - 2013-08-29 20:53 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-10-23 09:20 - 2013-08-29 20:53 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe Some content of TEMP: ==================== C:\Users\xxxxx\AppData\Local\Temp\1_flashplayer.exe C:\Users\xxxxx\AppData\Local\Temp\CleanSchedule.exe C:\Users\xxxxx\AppData\Local\Temp\COMAP.EXE C:\Users\xxxxx\AppData\Local\Temp\detectionapi_rd.dll C:\Users\xxxxx\AppData\Local\Temp\detectionui_r.exe C:\Users\xxxxx\AppData\Local\Temp\devcon64.exe C:\Users\xxxxx\AppData\Local\Temp\directx10tests_rd.dll C:\Users\xxxxx\AppData\Local\Temp\directx11tests_rd.dll C:\Users\xxxxx\AppData\Local\Temp\directx9tests_rd.dll C:\Users\xxxxx\AppData\Local\Temp\InstallAX.exe C:\Users\xxxxx\AppData\Local\Temp\local.dll C:\Users\xxxxx\AppData\Local\Temp\nvSCPAPI.dll C:\Users\xxxxx\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\xxxxx\AppData\Local\Temp\nvStInst.exe C:\Users\xxxxx\AppData\Local\Temp\oct9C96.tmp.exe C:\Users\xxxxx\AppData\Local\Temp\RSPUpgradeInstaller.exe C:\Users\xxxxx\AppData\Local\Temp\sonarinst.exe C:\Users\xxxxx\AppData\Local\Temp\swt-win32-3349.dll C:\Users\xxxxx\AppData\Local\Temp\ubi9C1.tmp.exe C:\Users\xxxxx\AppData\Local\Temp\uninst1.exe C:\Users\xxxxx\AppData\Local\Temp\{C9A1803D-7B97-40EE-A984-35C121699716}-30.0.1599.101_30.0.1599.69_chrome_updater.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-10 01:51 ==================== End Of Log ============================ --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-11-2013 Ran by xxxxx at 2013-11-16 11:42:22 Running from C:\Users\xxxxx\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} ==================== Installed Programs ====================== 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) ACPI Driver Installer (x32 Version: 2.1) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05) Alien Breed 2: Assault (x32) Alien Breed 3: Descent (x32) Alien Breed: Impact (x32) Anna - Extended Edition (x32) Anno 1701 (x32 Version: 1.02) Asmedia ASM106x SATA Host Controller Driver (x32 Version: 1.3.8.000) AVG 2014 (Version: 14.0.3629) AVG 2014 (Version: 14.0.4158) AVG 2014 (Version: 2014.0.4158) Battlefield 1942™ (x32 Version: 1.6.20.0) Battlefield 2142 (x32) Battlefield 3™ (x32 Version: 1.6.0.0) Battlefield Heroes (x32) Battlefield Play4Free (x32) Battlelog Web Plugins (x32 Version: 2.3.0) Beamer Sound to Light 0.62 (x32) BioShock 2 (x32) Blood Bowl: Legendary Edition (x32) Burnout Paradise: The Ultimate Box (x32) Cities XL Platinum (x32) CLICKBIOSII (x32 Version: 1.0.116) CommandCenter (x32 Version: 1.0.0.32) Company of Heroes 2 (x32) Confrontation (x32) Corsair Link(TM) USB Dongle (Driver Removal) (x32) CorsairLINK2 (x32 Version: 2.3.4816) CPUID CPU-Z 1.64.0 Crysis 2 Maximum Edition (x32) Crysis®3 (x32 Version: 1.0.0.0) CyberLink InstantBurn (x32 Version: 5.0.7112) CyberLink Media Suite (x32 Version: 8.0.2227) CyberLink Power2Go (x32 Version: 7.0.0.1126) CyberLink PowerBackup (x32 Version: 2.5.6023) CyberLink PowerDVD 10 (x32 Version: 10.0.3613.52) DC-Bass Source 1.3.0 (x32) Dead Space (x32) Dead Space™ 3 (x32 Version: 1.0.0.0) Democracy 2 (x32) Die Siedler 7 (x32 Version: 1.12.1396) Direct OC (x32 Version: 1.0.0.7) DirectVobSub 2.40.4209 (x32 Version: 2.40.4209) Divinity II: Developer's Cut (x32) DivX-Setup (x32 Version: 2.6.1.84) DSL-Turbo (x32) ESN Sonar (x32 Version: 0.70.4) Fahren Lernen Offline 2.0 (x32) Fallout: New Vegas (x32) FalNET G19 Display Manager (x32) Fast Boot (x32 Version: 1.0.0.9) ffdshow v1.1.4399 [2012-03-22] (x32 Version: 1.1.4399.0) Flawless Widescreen version 1.0.10 (x32 Version: 1.0.10) FM PDF To JPG Converter Free 2.5 (x32 Version: 2.5) Fraps (x32) Free Image Convert and Resize version 2.1.24.628 (x32 Version: 2.1.24.628) Free Video Call Recorder for Skype version 1.2.1.717 (x32 Version: 1.2.1.717) Free Video to JPG Converter version 5.0.26.628 (x32 Version: 5.0.26.628) Free YouTube Download version 3.2.5.628 (x32 Version: 3.2.5.628) Free YouTube to DVD Converter version 3.1.9.725 (x32 Version: 3.1.9.725) Free YouTube to MP3 Converter version 3.12.9.725 (x32 Version: 3.12.9.725) Game of Thrones (x32) GameSpy Comrade (x32 Version: 0.26.0.134) GeForce Experience NvStream Client Components (Version: 1.6.28) GeoGebra 4.2 (x32 Version: 4.2.60.0) GIGABYTE OC_GURU II (x32 Version: 1.30.0000) Google Chrome (x32 Version: 31.0.1650.57) Google Earth (x32 Version: 7.1.1.1888) Google Update Helper (x32 Version: 1.3.21.165) Gratuitous Space Battles (x32) Gratuitous Tank Battles (x32) Haali Media Splitter (x32) Hitman 2: Silent Assassin (x32) Hitman: Absolution (x32) Hitman: Blood Money (x32) Hitman: Codename 47 (x32) Hitman: Sniper Challenge (x32) Hotspot Shield 3.11 (x32 Version: 3.11) iBomber Attack (x32) Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.36702) Intel(R) Management Engine Components (x32 Version: 9.5.15.1730) Intel(R) Processor Graphics (x32 Version: 9.18.10.3215) Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.6.1.0536) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.6.1212.0302) Intel(R) PROSet/Wireless WiFi Software Driver (Version: 15.06.1000.0167) Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 3.0.0.66956) Intel(R) Smart Connect Technology 4.0 x64 (Version: 4.0.41.2072) Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 2.5.0.19) Intel® PROSet/Wireless Software (x32 Version: 15.6.1) Intel® PROSet/Wireless WiFi Software (Version: 15.06.1000.0142) Intel® Trusted Connect Service Client (Version: 1.31.8.1) Intel® Watchdog Timer Driver (Intel® WDT) (x32) Jagged Alliance - Back in Action (x32) Just Cause (x32) Just Cause 2 (x32) Lagarith Lossless Codec (1.3.27) (x32) LAME v3.99.3 (for Windows) (x32) League of Legends (x32 Version: 3.0.1) Live Update 5 (x32 Version: 5.0.109) Logitech Gaming Software 8.46 (Version: 8.46.27) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Max Payne 2 (x32 Version: 1.1.102.0) Medal of Honor(TM) Multiplayer (x32) Medal of Honor(TM) Single Player (x32) Medal of Honor™ Warfighter (x32 Version: 1.0.0.0) Men of War (x32) Men of War: Assault Squad (x32) Men of War: Red Tide (x32) Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.1.99.0) Microsoft Games for Windows Marketplace (x32 Version: 3.5.67.0) Microsoft SQL Server Compact 3.5 SP2 ENU (x32 Version: 3.5.8080.0) Microsoft SQL Server Compact 3.5 SP2 x64 ENU (Version: 3.5.8080.0) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Mirror's Edge (x32) Movavi Video Editor 6 (x32 Version: 6.01.001) Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0) Mozilla Maintenance Service (x32 Version: 22.0) MSI Afterburner 2.3.1 (x32 Version: 2.3.1) MSI Intel Extreme Tuning Utility (x32 Version: 4.0.6.305) MSI Kombustor 2.5.0 (x32) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) Need For Speed™ World (x32 Version: 1.0.0.0) NVIDIA 3D Vision Controller-Treiber 331.65 (Version: 331.65) NVIDIA 3D Vision Treiber 331.65 (Version: 331.65) NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1) NVIDIA Grafiktreiber 331.65 (Version: 331.65) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4) NVIDIA Install Application (Version: 2.1002.140.952) NVIDIA LED Visualizer 1.0 (Version: 1.0) NVIDIA PhysX (x32 Version: 9.13.0725) NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725) NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165) NVIDIA Systemsteuerung 331.65 (Version: 331.65) NVIDIA Update 9.3.21 (Version: 9.3.21) NVIDIA Update Components (Version: 9.3.21) NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9) OpenAL (x32) OpenOffice 4.0.0 (x32 Version: 4.00.9702) OpenSource Flash Video Splitter 1.0.0.5 (x32 Version: 1.0.0.5) Operation Flashpoint ®: Red River (x32 Version: 1.0.0000.129) Origin (x32 Version: 9.0.13.2135) Pando Media Booster (x32 Version: 2.6.0.7) PDF-Viewer (Version: 2.5.211.0) Pokki (HKCU Version: 0.266.1.172) Populous (x32 Version: 1.0.0.0) PunkBuster Services (x32 Version: 0.991) Qualcomm Atheros Killer Network Manager (Version: 6.1.0.574) Qualcomm Atheros Killer Network Manager (x32 Version: 6.1.0.574) R.U.S.E (x32) RAW - Realms of Ancient War (x32) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6923) Red Orchestra 2: Heroes of Stalingrad - Single Player (x32) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 3.0.23.0) Rising Storm Beta (x32) RocketDock 1.3.5 (x32) Secure Eraser (x32 Version: 4.2.0.1) Serif PhotoPlus X2 (x32 Version: 12.0.3.013) SHIELD Streaming (Version: 1.6.53) Sine Mora (x32) SkyDrift (x32) Skype Click to Call (x32 Version: 6.3.11079) Skype™ 6.7 (x32 Version: 6.7.102) Sniper Elite: Zombie Army (x32) Sniper Ghost Warrior 2 (x32) Sniper: Ghost Warrior (x32) Sound Blaster Cinema (x32 Version: 1.00.01) Sound Blaster Cinema (x32 Version: 1.00.02) Super-Charger (x32 Version: 1.2.018) Superfrog HD (x32) TeamSpeak 3 Client (Version: 3.0.11) TechPowerUp GPU-Z (x32) The Testament of Sherlock Holmes (x32) Tom Clancy's H.A.W.X. 2 (x32 Version: 1.0.1) Trend Micro SafeSync (Version: 5.1.0.1173) Tropico 3 - Steam Special Edition (x32) Tropico 4 (x32) Ubisoft Game Launcher (x32 Version: 1.0.0.0) Unlocker 1.9.1-x64 (Version: 1.9.1) Update for Codec Pack (HKCU) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0) VGA Boost (x32 Version: 1.0.0.6) VIRTU MVP 2.0 3.0.103 (Version: 3.0.103) Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1) Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1) Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1) VLC media player 2.1.0-git-20130309-0405 (Version: 2.1.0-git-20130309-0405) Wargame: European Escalation (x32) Winamp (x32 Version: 5.63 ) Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1) Windows Live ID Sign-in Assistant (Version: 6.500.3165.0) Worms Armageddon (x32) Worms Blast (x32) Worms Crazy Golf (x32) Worms Pinball (x32) Worms Revolution (x32) Worms Ultimate Mayhem (x32) Xvid Video Codec (x32 Version: 1.3.2) ==================== Restore Points ========================= 09-11-2013 18:54:25 Windows-Sicherung 09-11-2013 22:17:47 DirectX wurde installiert 10-11-2013 00:07:17 Windows-Sicherung 10-11-2013 09:58:49 DirectX wurde installiert 10-11-2013 10:00:42 DirectX wurde installiert 10-11-2013 18:00:04 Windows-Sicherung 14-11-2013 00:11:52 Windows Update 14-11-2013 18:31:16 Windows Update 15-11-2013 23:06:28 Konfiguriert Sound Blaster Cinema 16-11-2013 02:00:10 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0369A4F8-8938-4339-8A19-F8239C00F53C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-09] (Google Inc.) Task: {28C6E952-7775-4884-A7C2-F5A2B0E2ED22} - System32\Tasks\Start CorsairLINK Hardware Monitor => C:\Program Files (x86)\Corsair\CorsairLINK2\CorsairLINK_HardwareMonitor.exe [2013-03-09] (Corsair Components, Inc.) Task: {470D5D6A-393F-4C8B-8193-FE7F684B4395} - System32\Tasks\DSite => C:\Users\xxxxx\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-06-12] () Task: {58F2F257-C028-48C2-93A1-81FF804CCF8B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-09] (Google Inc.) Task: {5BD87485-1A7C-4AD8-8134-519778B06414} - System32\Tasks\FRAPS => C:\Program Files\Ap\Fraps\fraps.exe [2013-02-26] (Beepa P/L) Task: {5F638460-ABA0-4D50-AE3A-ADE1D14FC32A} - System32\Tasks\DLL-Files.Com Fixer_Updates => C:\Program Files (x86)\Dll-Files.com Task: {66904FA1-E1F3-46E6-A85A-11EC22EC20CB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated) Task: {979D659B-EADC-4C75-8F40-07E300FE332B} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation) Task: {A5ED2530-A4FA-4A55-ACE1-4DDA2AB37167} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation) Task: {D713A4FE-1F1B-4936-9CE8-BDB2B5E5A38D} - System32\Tasks\RDReminder => C:\Program Files (x86)\Dll-Files.com Task: {E73E7A41-22AA-46BD-B66F-C6BB90C4C815} - System32\Tasks\DLL-Files.Com Fixer_MONTHLY => C:\Program Files (x86)\Dll-Files.com Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe Task: C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe Task: C:\Windows\Tasks\DSite.job => C:\Users\xxxxx\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-08-29 20:53 - 2013-10-23 09:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-11-01 06:31 - 2013-11-01 06:31 - 02329928 _____ () C:\Users\xxxxx\AppData\Local\Pokki\ocdeskband_0.dll 2013-06-09 16:13 - 2012-12-30 09:46 - 00140160 _____ () C:\Program Files\Lucidlogix Technologies\VIRTU MVP 2.0\GuiCommon.dll 2011-05-09 19:46 - 2011-05-09 19:46 - 02760192 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtCore4.dll 2011-05-09 19:56 - 2011-05-09 19:56 - 09856000 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtGui4.dll 2011-05-09 19:48 - 2011-05-09 19:48 - 00990720 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtNetwork4.dll 2011-05-09 19:47 - 2011-05-09 19:47 - 00416256 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtXml4.dll 2013-04-11 10:54 - 2013-04-11 10:54 - 00217600 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFCommon.dll 2011-05-10 11:32 - 2011-05-10 11:32 - 00731648 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\qwt5.dll 2013-04-11 10:54 - 2013-04-11 10:54 - 00404992 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modApplications.dll 2013-04-11 10:54 - 2013-04-11 10:54 - 00036864 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modFeatures.dll 2013-04-11 10:54 - 2013-04-11 10:54 - 00025088 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modFraps.dll 2013-04-11 10:54 - 2013-04-11 10:54 - 00240128 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modGraph.dll 2013-04-11 10:54 - 2013-04-11 10:54 - 00062464 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modlcd.dll 2013-04-11 10:54 - 2013-04-11 10:54 - 00291328 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modNetwork.dll 2013-04-11 10:54 - 2013-04-11 10:54 - 00184832 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modNpu.dll 2013-04-11 10:54 - 2013-04-11 10:54 - 00211456 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modOptions.dll 2013-04-11 10:54 - 2013-04-11 10:54 - 00064000 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modOverview.dll 2013-04-11 10:54 - 2013-04-11 10:54 - 00317440 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modSystemInfo.dll 2013-07-24 20:18 - 2013-07-24 20:18 - 00744744 _____ () C:\Program Files (x86)\Hotspot Shield\bin\af_proxy.dll 2013-06-09 16:12 - 2013-03-13 12:33 - 01732608 _____ () C:\MSI\Super RAID\SuperRAIDExt.DLL 2013-08-29 20:53 - 2013-10-23 09:20 - 00092448 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll 2013-06-09 14:47 - 2007-09-02 12:57 - 00069632 _____ () C:\Program Files\Ap\RocketDock\RocketDock.dll 2013-06-09 23:15 - 2013-11-10 02:10 - 00062976 _____ () E:\Program Files\Origin\tufao.dll 2013-03-12 17:10 - 2013-10-24 18:45 - 00691200 _____ () E:\Program Files\Steam\SDL2.dll 2012-06-23 14:53 - 2013-10-30 20:25 - 01123240 _____ () E:\Program Files\Steam\bin\chromehtml.DLL 2012-06-23 14:53 - 2013-10-23 21:07 - 20625832 _____ () E:\Program Files\Steam\bin\libcef.dll 2012-06-23 17:18 - 2013-06-15 00:49 - 01100800 _____ () E:\Program Files\Steam\bin\avcodec-53.dll 2012-06-23 17:18 - 2013-06-15 00:49 - 00124416 _____ () E:\Program Files\Steam\bin\avutil-51.dll 2012-06-23 17:18 - 2013-06-15 00:49 - 00192000 _____ () E:\Program Files\Steam\bin\avformat-53.dll 2013-06-09 14:55 - 2010-02-09 09:52 - 33744168 _____ () C:\Program Files (x86)\CyberLink\InstantBurn\Win2K\res.dll 2010-08-20 08:57 - 2010-08-20 08:57 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2010-08-20 08:57 - 2010-08-20 08:57 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2013-02-13 03:38 - 2013-02-13 03:38 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll 2013-11-16 00:06 - 2012-10-31 15:00 - 00991232 ____N () C:\Program Files\Ap\Creative\Sound Blaster Cinema\Sound Blaster Cinema\de-DE\SBCinema.resources.dll 2013-06-09 22:01 - 2013-03-09 09:09 - 00053760 _____ () C:\Program Files (x86)\Corsair\CorsairLINK2\SynchronousIO.Native.dll 2013-09-07 03:11 - 2013-09-07 03:11 - 00569856 _____ () C:\Users\xxxxx\AppData\Local\Pokki\Engine\ppGoogleNaClPluginChrome.dll 2013-09-07 03:11 - 2013-09-07 03:11 - 01400846 _____ () C:\Users\xxxxx\AppData\Local\Pokki\Engine\avcodec-54.dll 2013-09-07 03:11 - 2013-09-07 03:11 - 00151054 _____ () C:\Users\xxxxx\AppData\Local\Pokki\Engine\avutil-51.dll 2013-09-07 03:11 - 2013-09-07 03:11 - 00222734 _____ () C:\Users\xxxxx\AppData\Local\Pokki\Engine\avformat-54.dll 2013-11-16 02:05 - 2013-11-14 12:28 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libglesv2.dll 2013-11-16 02:05 - 2013-11-14 12:28 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libegl.dll 2013-11-16 02:05 - 2013-11-14 12:29 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll 2013-11-16 02:05 - 2013-11-14 12:29 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll 2013-11-16 02:05 - 2013-11-14 12:28 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ffmpegsumo.dll 2013-11-15 22:54 - 2013-09-17 03:20 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2013-11-16 02:05 - 2013-11-14 12:29 - 13582800 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/16/2013 11:29:50 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/16/2013 03:22:05 AM) (Source: CorsairLINK2 Hardware Monitor) (User: ) Description: Unable to write/verify to register 231 Error: (11/15/2013 11:39:35 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (11/15/2013 11:39:25 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (11/15/2013 11:39:10 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (11/15/2013 10:53:59 PM) (Source: CorsairLINK2 Hardware Monitor) (User: ) Description: Unable to write/verify to register 231 Error: (11/15/2013 03:40:21 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/14/2013 05:38:26 PM) (Source: ESENT) (User: ) Description: taskhost (6444) Versuch, Datei "C:\Users\xxxxx\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. Error: (11/14/2013 05:38:02 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/13/2013 06:01:54 PM) (Source: CorsairLINK2 Hardware Monitor) (User: ) Description: Unable to write/verify to register 231 System errors: ============= Error: (11/16/2013 11:29:45 AM) (Source: BugCheck) (User: ) Description: 0x0000007a (0x0000000000000020, 0xffffffffc000009d, 0xfffffa8010572078, 0x0000000000000000)C:\Windows\MEMORY.DMP111613-18439-01 Error: (11/16/2013 11:29:43 AM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 16.11.2013 um 08:00:12 unerwartet heruntergefahren. Error: (11/13/2013 01:43:37 PM) (Source: Service Control Manager) (User: ) Description: Dienst "MSISuperIO_CC" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (11/09/2013 08:46:09 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (11/09/2013 08:46:09 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (11/09/2013 07:25:05 PM) (Source: Service Control Manager) (User: ) Description: Dienst "MSICOMM_CC" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (11/09/2013 07:18:48 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MSISuperIO_CC erreicht. Error: (11/10/2013 00:55:16 AM) (Source: DCOM) (User: ) Description: {AD1B0A76-DBB2-45C2-8403-45B8DD7FD503} Error: (11/10/2013 00:18:54 AM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (11/10/2013 00:18:50 AM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 17.10.2013 um 21:44:23 unerwartet heruntergefahren. Microsoft Office Sessions: ========================= Error: (11/16/2013 11:29:50 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/16/2013 03:22:05 AM) (Source: CorsairLINK2 Hardware Monitor)(User: ) Description: Unable to write/verify to register 231 Error: (11/15/2013 11:39:35 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\MC133\Downloads\SoftonicDownloader_fuer_arcsoft-totalmedia-theatre.exe Error: (11/15/2013 11:39:25 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\MC133\Downloads\SoftonicDownloader_fuer_arcsoft-totalmedia-theatre.exe Error: (11/15/2013 11:39:10 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\MC133\Downloads\SoftonicDownloader_fuer_arcsoft-totalmedia-theatre.exe Error: (11/15/2013 10:53:59 PM) (Source: CorsairLINK2 Hardware Monitor)(User: ) Description: Unable to write/verify to register 231 Error: (11/15/2013 03:40:21 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/14/2013 05:38:26 PM) (Source: ESENT)(User: ) Description: taskhost6444C:\Users\MC133\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. Error: (11/14/2013 05:38:02 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/13/2013 06:01:54 PM) (Source: CorsairLINK2 Hardware Monitor)(User: ) Description: Unable to write/verify to register 231 ==================== Memory info =========================== Percentage of memory in use: 28% Total physical RAM: 16326.59 MB Available physical RAM: 11603.84 MB Total Pagefile: 32651.36 MB Available Pagefile: 27076.25 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:119.14 GB) (Free:27.36 GB) NTFS Drive e: (Volume) (Fixed) (Total:2794.39 GB) (Free:1034.73 GB) NTFS ==================== MBR & Partition Table ================== ==================== End Of Log ============================ |
17.11.2013, 06:41 | #4 |
/// the machine /// TB-Ausbilder | Google Chrome öffnet "Sponsorship"-Tabs Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Google Chrome öffnet "Sponsorship"-Tabs |
adresszeile, aktion, anti-malware, appdata, autostart, dateien, explorer, folgende, google, malwarebytes, microsoft, pup.optional.digitalsites.a, roaming, service, software, speicher, unregelmäßige, version, weiße, weiße seite, öffnen, öffnet |