|
Plagegeister aller Art und deren Bekämpfung: Habe mir den "safesaver"-Mist eingefangenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
18.01.2014, 19:17 | #1 |
| Habe mir den "safesaver"-Mist eingefangen Hallo liebes Forum, ich denke das Problem ist bekannt. Ich bekomme in meinem Chrome ständig diese Werbung und irgendwelche beliebigen Wörter werden zu Links. Meine Recherchen ergaben, dass ich mit das "safesaver"-Virus eingefangen habe. Kann mir bitte jemand sagen, wie ich dieses Teil wieder loswerde? Vielen Dank Julian |
18.01.2014, 19:48 | #2 |
/// Malwareteam | Habe mir den "safesaver"-Mist eingefangenIch habe dein Thema in Arbeit und melde mich so schnell als möglich mit weiteren Anweisungen. Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst. Ich bedanke mich für deine Geduld
__________________ |
18.01.2014, 19:50 | #3 |
/// Malwareteam | Habe mir den "safesaver"-Mist eingefangen Hallo pulp.schroth,
__________________mein Name ist Jonas und ich werde dir bei deiner Bereinigung helfen. Diese kann mit viel Arbeit für dich verbunden sein. Bevor wir anfangen können, lies bitte die Bereinigungsregeln und Hinweise: Regeln zum Ablauf der Bereinigung
Hinweise Wenn du alles gelesen hast, kann es losgehen. Bitte speichere alle Programme auf dem Desktop und führe sie von dort aus.
Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Poste folgende Logfiles in deiner nächsten Antwort:
__________________ |
18.01.2014, 20:30 | #4 |
| Habe mir den "safesaver"-Mist eingefangen Hallo Jonas, ich danke dir schonmal vorab. Hier ist die FRST.txt: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-01-2014 03 Ran by Julian (administrator) on JULIAN-PC on 18-01-2014 20:20:30 Running from C:\Users\Julian\Desktop Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) D:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Spotify Ltd) C:\Users\Julian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (AVAST Software) D:\Program Files\AVAST Software\Avast\AvastUI.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (TuneUp Software) D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (TuneUp Software) D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (TuneUp Software) D:\Program Files\TuneUp Utilities 2013\Integrator.exe (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe (TuneUp Software) D:\Program Files\TuneUp Utilities 2013\UninstallManager.exe (Valve Corporation) D:\Program Files\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe () D:\Program Files\Steam\SteamApps\common\dota 2 beta\dota.exe (Valve Corporation) D:\Program Files\Steam\GameOverlayUI.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647064 2013-08-28] (Realtek Semiconductor) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation) HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM-x32\...\Run: [AvastUI.exe] - D:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-01] (AVAST Software) HKLM-x32\...\Run: [] - [x] HKCU\...\Run: [Spotify Web Helper] - C:\Users\Julian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-01-05] (Spotify Ltd) AppInit_DLLs: [ ] () AppInit_DLLs-x32: [ ] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?rd=1&ucc=DE&dcc=DE&opt=0&ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC06216782FAECE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us BHO: BestSavueFooruYou - {515B934F-50A0-116B-750C-E3A51DC83BF9} - C:\ProgramData\BestSavueFooruYou\gB4C.x64.dll () BHO: NewSaver - {5F5223CC-0958-9143-B6EC-483DAE5C0550} - C:\ProgramData\NewSaver\P2ns_3D.x64.dll () BHO-x32: BestSavueFooruYou - {515B934F-50A0-116B-750C-E3A51DC83BF9} - C:\ProgramData\BestSavueFooruYou\gB4C.dll () BHO-x32: NewSaver - {5F5223CC-0958-9143-B6EC-483DAE5C0550} - C:\ProgramData\NewSaver\P2ns_3D.dll () Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Chrome: ======= CHR HomePage: hxxp://www.google.de/ CHR Plugin: (Shockwave Flash) - C:\Users\Julian\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Julian\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Julian\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Google Update) - C:\Users\Julian\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Extension: (Adblock Plus) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-01-18] CHR Extension: (AdBlock) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-01] CHR Extension: (Google Wallet) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-29] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-01] (AVAST Software) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) S2 SkypeUpdate; D:\Program Files\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies) R2 TuneUp.UtilitiesSvc; D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2409272 2013-12-10] (TuneUp Software) ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-12-01] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-12-01] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-01] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-01] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-12-01] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-12-01] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-12-01] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-01] () R3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [58368 2011-05-18] (GenesysLogic) S3 ks2avs; C:\Windows\System32\Drivers\ks2avs.sys [359784 2012-12-18] (Native Instruments GmbH) S3 ks2usb_svc; C:\Windows\System32\Drivers\ks2usb.sys [83816 2012-12-18] (Native Instruments GmbH) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) R3 TuneUpUtilitiesDrv; D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software) S3 NTIOLib_1_0_4; \??\d:\Program Files\MSI\Live Update 5\NTIOLib_X64.sys [x] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-18 20:20 - 2014-01-18 20:20 - 00009460 _____ C:\Users\Julian\Desktop\FRST.txt 2014-01-18 20:20 - 2014-01-18 20:20 - 00000000 ____D C:\FRST 2014-01-18 19:08 - 2014-01-18 19:09 - 02076160 _____ (Farbar) C:\Users\Julian\Desktop\FRST64.exe 2014-01-18 13:46 - 2014-01-18 13:46 - 00000000 _____ C:\autoexec.bat 2014-01-18 13:45 - 2014-01-18 13:45 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-18 13:44 - 2014-01-18 19:12 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-18 13:39 - 2014-01-18 13:39 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Julian\Downloads\SpyHunter-Installer.exe 2014-01-17 19:11 - 2014-01-17 19:15 - 00800864 _____ C:\Users\Julian\Desktop\IMG_6892.mp4 2014-01-15 17:44 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 17:44 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 17:44 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 17:44 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 17:44 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 17:44 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 17:44 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 17:44 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 17:44 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-12 16:15 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2014-01-12 16:15 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2014-01-12 16:15 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2014-01-12 16:15 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2014-01-12 16:15 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2014-01-12 16:15 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2014-01-12 16:15 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2014-01-12 16:15 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2014-01-12 16:15 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2014-01-12 16:15 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2014-01-12 16:15 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2014-01-12 16:15 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2014-01-12 16:15 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2014-01-12 16:15 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2014-01-12 16:15 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2014-01-12 16:15 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2014-01-12 16:15 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2014-01-12 16:15 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2014-01-12 16:15 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2014-01-12 16:15 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2014-01-12 16:15 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2014-01-12 16:15 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-01-12 16:15 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2014-01-12 16:15 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2014-01-12 16:15 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2014-01-12 16:15 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2014-01-12 16:15 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2014-01-12 16:15 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2014-01-12 16:15 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2014-01-12 16:15 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2014-01-12 16:15 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2014-01-12 16:15 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2014-01-12 16:15 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2014-01-12 16:15 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2014-01-12 16:15 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2014-01-12 16:15 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2014-01-12 16:15 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2014-01-12 16:15 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2014-01-12 16:15 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2014-01-12 16:15 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2014-01-12 16:15 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2014-01-12 16:15 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2014-01-12 16:15 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2014-01-12 16:15 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2014-01-12 16:15 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2014-01-12 16:15 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2014-01-12 16:15 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2014-01-12 16:15 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2014-01-12 16:15 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2014-01-12 16:15 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2014-01-12 16:15 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2014-01-12 16:15 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2014-01-12 16:15 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2014-01-12 16:15 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2014-01-12 16:15 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2014-01-12 16:15 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2014-01-12 16:15 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2014-01-12 16:15 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2014-01-12 16:15 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2014-01-12 16:15 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2014-01-12 16:15 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2014-01-12 16:15 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2014-01-12 16:15 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2014-01-12 16:15 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2014-01-12 16:15 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2014-01-12 16:15 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2014-01-12 16:15 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2014-01-12 16:15 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2014-01-12 16:15 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2014-01-12 16:15 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2014-01-12 16:15 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2014-01-12 16:15 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2014-01-12 16:15 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2014-01-12 16:15 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2014-01-12 16:15 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2014-01-12 16:15 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2014-01-12 16:15 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2014-01-12 16:15 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2014-01-12 16:15 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2014-01-12 16:15 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2014-01-12 16:15 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2014-01-12 16:15 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2014-01-12 16:15 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2014-01-12 16:15 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2014-01-12 16:15 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2014-01-12 16:15 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2014-01-12 16:15 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2014-01-12 16:15 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2014-01-12 16:15 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2014-01-12 16:15 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2014-01-12 16:15 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2014-01-12 16:15 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2014-01-12 16:15 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2014-01-12 16:15 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2014-01-12 16:15 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2014-01-12 16:15 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2014-01-12 16:15 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2014-01-12 16:15 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2014-01-12 16:15 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2014-01-12 16:15 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2014-01-12 16:15 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2014-01-12 16:15 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2014-01-12 16:15 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2014-01-12 16:15 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2014-01-12 16:15 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2014-01-12 16:15 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2014-01-12 16:15 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2014-01-12 16:15 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2014-01-12 16:15 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2014-01-12 16:15 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2014-01-12 16:14 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2014-01-12 16:14 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2014-01-12 16:14 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2014-01-12 16:14 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2014-01-12 16:14 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2014-01-12 16:14 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2014-01-12 16:14 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2014-01-12 16:14 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2014-01-12 16:14 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2014-01-12 16:14 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2014-01-12 16:14 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2014-01-12 16:14 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2014-01-12 16:14 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2014-01-12 16:14 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2014-01-12 16:14 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2014-01-12 16:14 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2014-01-12 16:14 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2014-01-12 16:14 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2014-01-12 16:14 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2014-01-12 16:14 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2014-01-12 16:14 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2014-01-12 16:14 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2014-01-12 16:14 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2014-01-12 16:14 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2014-01-12 16:14 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2014-01-12 16:14 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2014-01-12 16:14 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2014-01-12 16:14 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2014-01-12 16:14 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2014-01-12 16:14 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2014-01-12 16:14 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2014-01-12 16:14 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2014-01-12 16:14 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2014-01-12 16:14 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2014-01-12 16:14 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2014-01-12 16:14 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2014-01-12 16:14 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2014-01-12 16:14 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2014-01-12 16:14 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2014-01-12 16:14 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2014-01-12 16:14 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2014-01-12 16:08 - 2014-01-18 18:35 - 00002296 _____ C:\Windows\setupact.log 2014-01-12 16:08 - 2014-01-16 21:15 - 00001002 _____ C:\Windows\PFRO.log 2014-01-12 16:08 - 2014-01-12 16:08 - 00000000 _____ C:\Windows\setuperr.log 2014-01-11 14:37 - 2014-01-12 16:15 - 00019093 _____ C:\Windows\DirectX.log 2014-01-11 14:37 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2014-01-11 14:37 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2014-01-11 14:37 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2014-01-11 14:37 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2014-01-11 14:37 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2014-01-11 14:37 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2014-01-11 14:37 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2014-01-11 14:37 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2014-01-11 14:37 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2014-01-11 14:37 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2014-01-11 14:37 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2014-01-11 14:37 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2014-01-11 14:37 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2014-01-11 14:37 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-01-11 13:48 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-01-11 13:48 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-01-11 13:48 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-01-11 13:48 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-01-11 13:48 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-01-11 13:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-01-11 13:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-01-11 13:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-01-11 13:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-01-11 13:41 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-01-11 13:41 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-01-06 16:26 - 2014-01-06 17:57 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TS3Client 2014-01-06 16:23 - 2014-01-06 16:25 - 32520760 _____ (TeamSpeak Systems GmbH) C:\Users\Julian\Downloads\TeamSpeak3-Client-win64-3.0.13.1.exe 2014-01-03 12:00 - 2014-01-03 12:01 - 04089416 _____ (Smart PC Solutions ) C:\Users\Julian\Downloads\PCSpeedMaximizer.exe 2013-12-30 00:30 - 2013-12-30 00:30 - 00002758 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-29 21:53 - 2014-01-01 19:25 - 00000000 ____D C:\ProgramData\NewSaver 2013-12-29 21:53 - 2014-01-01 19:24 - 00000000 ____D C:\ProgramData\BestSavueFooruYou 2013-12-29 21:53 - 2013-12-29 21:53 - 00000000 ____D C:\Users\Julian\AppData\Local\Packages 2013-12-29 21:53 - 2013-12-29 21:53 - 00000000 ____D C:\ProgramData\eklfhpgfamchoobdajklncjpnnnebdjj 2013-12-29 21:53 - 2013-12-29 21:53 - 00000000 ____D C:\ProgramData\8c8d11e4dd17bca1 2013-12-29 20:52 - 2013-12-29 20:52 - 00000000 ____D C:\Program Files\Adobe 2013-12-29 20:51 - 2013-12-29 20:51 - 00000000 ____D C:\ProgramData\ALM 2013-12-29 20:42 - 2014-01-01 19:23 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-12-29 20:39 - 2013-12-29 20:55 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-12-29 20:33 - 2014-01-17 19:12 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Adobe 2013-12-29 20:15 - 2012-06-30 17:47 - 00000000 ____D C:\Users\Julian\Downloads\Adobe Creative Suite 6 Master Collection CS6 Win & Mac OS X Keygen by Team X-FORCE 2013-12-29 20:04 - 2013-12-10 18:43 - 00038200 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2013-12-29 20:04 - 2013-12-10 18:43 - 00030520 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2013-12-29 20:01 - 2013-12-10 18:43 - 00035640 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2013-12-29 20:01 - 2013-12-10 18:43 - 00026936 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2013-12-29 20:01 - 2013-12-10 18:43 - 00022328 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2013-12-29 19:49 - 2013-12-30 00:32 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} 2013-12-29 19:46 - 2013-12-29 19:46 - 00000000 ____D C:\Windows\system32\appmgmt 2013-12-29 19:43 - 2013-12-29 19:44 - 28211040 _____ (TuneUp Software) C:\Users\Julian\Downloads\TuneUpUtilities2013_de-DE.exe 2013-12-29 16:31 - 2013-12-29 16:31 - 00000000 ____D C:\ProgramData\QuickSet 2013-12-29 16:29 - 2013-12-29 16:29 - 00000000 ____D C:\ProgramData\InstallMate 2013-12-20 18:53 - 2013-12-20 18:53 - 00000000 ____D C:\Users\Julian\AppData\Local\SoftwareUpdater ==================== One Month Modified Files and Folders ======= 2014-01-18 20:20 - 2014-01-18 20:20 - 00009460 _____ C:\Users\Julian\Desktop\FRST.txt 2014-01-18 20:20 - 2014-01-18 20:20 - 00000000 ____D C:\FRST 2014-01-18 19:51 - 2013-09-10 14:29 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2413890212-2489616044-827944105-1001UA.job 2014-01-18 19:12 - 2014-01-18 13:44 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-18 19:09 - 2014-01-18 19:08 - 02076160 _____ (Farbar) C:\Users\Julian\Desktop\FRST64.exe 2014-01-18 18:40 - 2013-09-10 23:17 - 01186010 _____ C:\Windows\WindowsUpdate.log 2014-01-18 18:40 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-18 18:40 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-18 18:35 - 2014-01-12 16:08 - 00002296 _____ C:\Windows\setupact.log 2014-01-18 18:34 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-18 13:46 - 2014-01-18 13:46 - 00000000 _____ C:\autoexec.bat 2014-01-18 13:45 - 2014-01-18 13:45 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-18 13:39 - 2014-01-18 13:39 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Julian\Downloads\SpyHunter-Installer.exe 2014-01-18 11:47 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2014-01-17 19:15 - 2014-01-17 19:11 - 00800864 _____ C:\Users\Julian\Desktop\IMG_6892.mp4 2014-01-17 19:14 - 2013-09-10 17:14 - 00000000 ____D C:\Windows\system32\MRT 2014-01-17 19:12 - 2013-12-29 20:33 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Adobe 2014-01-17 19:12 - 2013-09-10 17:14 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-17 09:14 - 2013-09-29 12:25 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2014-01-16 22:39 - 2013-09-10 14:29 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2413890212-2489616044-827944105-1001Core.job 2014-01-16 21:17 - 2013-09-10 14:47 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2014-01-16 21:15 - 2014-01-12 16:08 - 00001002 _____ C:\Windows\PFRO.log 2014-01-15 21:48 - 2013-09-11 18:45 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Skype 2014-01-15 20:42 - 2013-09-29 12:42 - 04894040 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-12 20:09 - 2013-09-21 09:19 - 00000000 ____D C:\Users\Julian\Desktop\cover 2014-01-12 16:15 - 2014-01-11 14:37 - 00019093 _____ C:\Windows\DirectX.log 2014-01-12 16:08 - 2014-01-12 16:08 - 00000000 _____ C:\Windows\setuperr.log 2014-01-11 13:59 - 2013-09-11 18:38 - 00000000 ____D C:\Users\Julian\AppData\Local\Adobe 2014-01-11 13:51 - 2013-09-10 14:57 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-11 13:42 - 2013-12-06 11:30 - 00000000 ____D C:\Users\Julian\AppData\Local\NVIDIA Corporation 2014-01-06 17:57 - 2014-01-06 16:26 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TS3Client 2014-01-06 16:25 - 2014-01-06 16:23 - 32520760 _____ (TeamSpeak Systems GmbH) C:\Users\Julian\Downloads\TeamSpeak3-Client-win64-3.0.13.1.exe 2014-01-05 17:57 - 2013-09-22 11:08 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Spotify 2014-01-05 15:16 - 2013-09-22 11:16 - 00000000 ____D C:\Users\Julian\AppData\Local\Spotify 2014-01-03 12:01 - 2014-01-03 12:00 - 04089416 _____ (Smart PC Solutions ) C:\Users\Julian\Downloads\PCSpeedMaximizer.exe 2014-01-01 19:25 - 2013-12-29 21:53 - 00000000 ____D C:\ProgramData\NewSaver 2014-01-01 19:24 - 2013-12-29 21:53 - 00000000 ____D C:\ProgramData\BestSavueFooruYou 2014-01-01 19:23 - 2013-12-29 20:42 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-12-30 14:39 - 2013-09-11 18:45 - 00000000 ____D C:\ProgramData\Adobe 2013-12-30 00:32 - 2013-12-29 19:49 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} 2013-12-30 00:32 - 2013-09-22 15:28 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2013-12-30 00:30 - 2013-12-30 00:30 - 00002758 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-29 21:53 - 2013-12-29 21:53 - 00000000 ____D C:\Users\Julian\AppData\Local\Packages 2013-12-29 21:53 - 2013-12-29 21:53 - 00000000 ____D C:\ProgramData\eklfhpgfamchoobdajklncjpnnnebdjj 2013-12-29 21:53 - 2013-12-29 21:53 - 00000000 ____D C:\ProgramData\8c8d11e4dd17bca1 2013-12-29 20:58 - 2013-09-29 12:26 - 00058800 _____ C:\Users\Julian\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-29 20:55 - 2013-12-29 20:39 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-12-29 20:52 - 2013-12-29 20:52 - 00000000 ____D C:\Program Files\Adobe 2013-12-29 20:51 - 2013-12-29 20:51 - 00000000 ____D C:\ProgramData\ALM 2013-12-29 20:38 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-12-29 20:04 - 2013-09-22 15:19 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-12-29 20:01 - 2013-09-22 15:21 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TuneUp Software 2013-12-29 19:46 - 2013-12-29 19:46 - 00000000 ____D C:\Windows\system32\appmgmt 2013-12-29 19:44 - 2013-12-29 19:43 - 28211040 _____ (TuneUp Software) C:\Users\Julian\Downloads\TuneUpUtilities2013_de-DE.exe 2013-12-29 16:31 - 2013-12-29 16:31 - 00000000 ____D C:\ProgramData\QuickSet 2013-12-29 16:29 - 2013-12-29 16:29 - 00000000 ____D C:\ProgramData\InstallMate 2013-12-29 15:32 - 2013-09-10 19:26 - 00697256 _____ C:\Windows\system32\perfh007.dat 2013-12-29 15:32 - 2013-09-10 19:26 - 00149224 _____ C:\Windows\system32\perfc007.dat 2013-12-29 15:32 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-26 15:48 - 2013-09-10 15:29 - 00000000 ____D C:\Program Files\SoftwareUpdater 2013-12-25 14:57 - 2013-09-11 00:13 - 00000000 ____D C:\Windows\Panther 2013-12-21 15:54 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-20 18:53 - 2013-12-20 18:53 - 00000000 ____D C:\Users\Julian\AppData\Local\SoftwareUpdater 2013-12-19 21:33 - 2014-01-11 13:48 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-12-19 21:33 - 2014-01-11 13:48 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-12-19 21:33 - 2014-01-11 13:48 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-12-19 21:33 - 2013-09-29 12:24 - 00023754 _____ C:\Windows\system32\nvinfo.pb 2013-12-19 21:33 - 2013-09-10 14:57 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2013-12-19 21:33 - 2013-09-10 14:57 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2013-12-19 21:33 - 2013-02-25 23:32 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-12-19 21:33 - 2013-02-25 23:32 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-12-19 21:33 - 2013-02-25 23:32 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-12-19 21:33 - 2013-02-25 23:32 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-12-19 21:33 - 2013-02-25 23:32 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-12-19 19:53 - 2013-09-10 14:57 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-12-19 19:53 - 2013-09-10 14:57 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-12-19 19:53 - 2013-09-10 14:57 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-12-19 19:53 - 2013-09-10 14:57 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-12-19 19:53 - 2013-09-10 14:57 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-12-19 19:53 - 2013-09-10 14:57 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-12-19 06:01 - 2013-09-10 14:57 - 03539040 _____ C:\Windows\system32\nvcoproc.bin Some content of TEMP: ==================== C:\Users\Julian\AppData\Local\Temp\SHSetup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 18:36 ==================== End Of Log ============================ Und hier die Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-01-2014 03 Ran by Julian at 2014-01-18 20:21:25 Running from C:\Users\Julian\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== µTorrent (HKCU Version: 3.3.1.30017 - BitTorrent Inc.) Adobe Acrobat X Pro - English, Français, Deutsch (x32 Version: 10.1.1 - Adobe Systems) Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden Adobe Creative Suite 6 Master Collection (x32 Version: 6 - Adobe Systems Incorporated) Apple Application Support (x32 Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) avast! Free Antivirus (x32 Version: 9.0.2008 - Avast Software) Bonjour (Version: 3.0.0.10 - Apple Inc.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dota 2 (x32 Version: - Valve) Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden Genesys USB Mass Storage Device (x32 Version: 4.0.2.1 - Genesys Logic) Google Chrome (HKCU Version: 31.0.1650.63 - Google Inc.) iCloud (Version: 3.0.2.163 - Apple Inc.) iTunes (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 25 (x32 Version: 7.0.250 - Oracle) Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Mouse and Keyboard Center (Version: 2.2.173.0 - Microsoft Corporation) Microsoft Mouse and Keyboard Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL-Sprachdienst (x32 Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden Native Instruments Audio 2 DJ Driver (Version: 3.1.0.761 - Native Instruments) Hidden Native Instruments Controller Editor (Version: 1.5.6.1344 - Native Instruments) Hidden Native Instruments Service Center (Version: 2.4.3.1177 - Native Instruments) Hidden Native Instruments Traktor 2 (Version: 2.6.3.144 - Native Instruments) Hidden Native Instruments Traktor Audio 2 (Version: 3.0.0.625 - Native Instruments) Hidden Native Instruments Traktor Kontrol S2 Driver (Version: 3.1.0.761 - Native Instruments) Hidden NVIDIA Drivers (Version: 1.10.57.35 - NVIDIA Corporation) NVIDIA GeForce Experience 1.8.1 (Version: 1.8.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 332.21 (Version: 332.21 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.30.1 (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.19 (Version: 1.2.19 - NVIDIA Corporation) PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (x32 Version: 6.0.1.7026 - Realtek Semiconductor Corp.) SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) Spotify (HKCU Version: 0.9.6.81.gd359a796 - Spotify AB) Steam (x32 Version: 1.0.0.0 - Valve Corporation) TeamSpeak 3 Client (Version: 3.0.13 - TeamSpeak Systems GmbH) TuneUp Utilities 2013 (x32 Version: 13.0.4000.179 - TuneUp Software) TuneUp Utilities 2013 (x32 Version: 13.0.4000.179 - TuneUp Software) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.4000.179 - TuneUp Software) Hidden VLC media player 2.0.7 (Version: 2.0.7 - VideoLAN) Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden WinRAR 5.00 (64-bit) (Version: 5.00.0 - win.rar GmbH) ==================== Restore Points ========================= 18-01-2014 18:10:52 Removed SpyHunter ==================== Hosts content: ========================== 2013-09-29 19:39 - 2013-12-29 21:03 - 00002742 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 3dns.adobe.com 127.0.0.1 3dns-1.adobe.com 127.0.0.1 3dns-2.adobe.com 127.0.0.1 3dns-3.adobe.com 127.0.0.1 3dns-4.adobe.com 127.0.0.1 activate.adobe.com 127.0.0.1 activate-sea.adobe.com 127.0.0.1 activate-sea.adobe.com 127.0.0.1 activate-sjc0.adobe.com 127.0.0.1 activate.wip.adobe.com 127.0.0.1 activate.wip1.adobe.com 127.0.0.1 activate.wip2.adobe.com 127.0.0.1 activate.wip3.adobe.com 127.0.0.1 activate.wip4.adobe.com 127.0.0.1 adobe-dns.adobe.com 127.0.0.1 adobe-dns-1.adobe.com 127.0.0.1 adobe-dns-2.adobe.com 127.0.0.1 adobe-dns-3.adobe.com 127.0.0.1 adobe-dns-4.adobe.com 127.0.0.1 crl.verisign.net 127.0.0.1 CRL.VERISIGN.NET 127.0.0.1 ood.opsource.net 127.0.0.1 209-34-83-73.ood.opsource.net 127.0.0.1 practivate.adobe 127.0.0.1 practivate.adobe 127.0.0.1 practivate.adobe.com 127.0.0.1 practivate.adobe.newoa 127.0.0.1 practivate.adobe.ntp 127.0.0.1 practivate.adobe.ipp There are 34 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: {04DA0F68-336E-4C14-8DCA-84DFCCECAC1E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-09-05] (Adobe Systems Incorporated) Task: {39CCCF37-4755-48E4-9EAD-E5C1D9C940F4} - System32\Tasks\Google Updater and Installer => C:\Users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-10] (Google Inc.) Task: {435E6DB4-B9D5-4486-8F71-92E5C4AA09E6} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation) Task: {4985A04D-5096-4D32-824C-21519FD4ADF6} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation) Task: {6013F749-3C8C-4D0F-8527-46CAEF1019F8} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => D:\Program Files\TuneUp Utilities 2013\OneClick.exe [2013-12-10] (TuneUp Software) Task: {751AEEDF-D74A-44CD-B885-0DF6B3C99E7B} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation) Task: {7E76145B-0954-49D3-9C84-894C9A6A55DC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2413890212-2489616044-827944105-1001UA => C:\Users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-10] (Google Inc.) Task: {8D1F9B1D-B716-49ED-B3B2-EDBF615E2D08} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation) Task: {94FD40CE-E7EE-4139-9FC1-BC449B14709E} - System32\Tasks\avast! Emergency Update => D:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-01] (AVAST Software) Task: {9734E225-1346-4665-BE66-3C878F2CB937} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation) Task: {B38A96CB-B180-450A-B0C4-CDB6E8D8121A} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft) Task: {FEFE99B1-5783-4E1E-92E2-7A9D32E70D8D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2413890212-2489616044-827944105-1001Core => C:\Users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-10] (Google Inc.) Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2413890212-2489616044-827944105-1001Core.job => C:\Users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2413890212-2489616044-827944105-1001UA.job => C:\Users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-01-18 15:48 - 2014-01-18 10:01 - 02155008 _____ () D:\Program Files\AVAST Software\Avast\defs\14011800\algo.dll 2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-12-01 10:09 - 2013-12-01 10:09 - 19336120 _____ () D:\Program Files\AVAST Software\Avast\libcef.dll 2013-12-05 20:01 - 2013-12-04 03:47 - 00702416 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll 2013-12-05 20:01 - 2013-12-04 03:47 - 00099792 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll 2013-12-05 20:01 - 2013-12-04 03:48 - 04055504 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll 2013-12-05 20:01 - 2013-12-04 03:48 - 00399312 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll 2013-12-05 20:01 - 2013-12-04 03:47 - 01619408 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll 2013-12-05 20:01 - 2013-12-04 03:48 - 13586896 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll 2012-11-16 16:49 - 2012-11-16 16:49 - 13416256 _____ () D:\Program Files\TuneUp Utilities 2013\libcef.dll 2014-01-11 13:35 - 2013-12-12 23:19 - 00142848 _____ () D:\Program Files\Steam\libavresample-1.dll 2014-01-11 13:35 - 2013-11-05 02:12 - 00890592 _____ () D:\Program Files\Steam\libavutil-52.dll 2013-08-21 13:18 - 2013-12-12 23:04 - 00716800 _____ () D:\Program Files\Steam\SDL2.dll 2013-09-06 11:55 - 2014-01-07 22:00 - 01138088 _____ () D:\Program Files\Steam\bin\chromehtml.DLL 2013-08-07 10:31 - 2013-12-12 23:04 - 20625832 _____ () D:\Program Files\Steam\bin\libcef.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 01100800 _____ () D:\Program Files\Steam\bin\avcodec-53.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 00124416 _____ () D:\Program Files\Steam\bin\avutil-51.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 00192000 _____ () D:\Program Files\Steam\bin\avformat-53.dll 2014-01-15 21:28 - 2014-01-15 21:28 - 00231336 _____ () D:\Program Files\Steam\steamapps\common\dota 2 beta\bin\launcher.dll 2014-01-15 21:26 - 2014-01-15 21:28 - 00411560 _____ () D:\Program Files\Steam\steamapps\common\dota 2 beta\bin\tier0.dll 2014-01-15 21:26 - 2014-01-15 21:28 - 00360872 _____ () D:\Program Files\Steam\steamapps\common\dota 2 beta\bin\vstdlib.dll 2014-01-15 21:26 - 2014-01-15 21:27 - 00435624 _____ () D:\Program Files\Steam\steamapps\common\dota 2 beta\bin\filesystem_stdio.dll 2014-01-18 11:50 - 2014-01-18 11:58 - 06057896 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\engine.dll 2014-01-18 11:50 - 2014-01-18 11:58 - 00839592 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\networksystem.dll 2014-01-15 21:27 - 2014-01-15 21:27 - 00167336 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\inputsystem.dll 2014-01-15 21:26 - 2014-01-15 21:28 - 01229736 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\materialsystem.dll 2014-01-15 21:26 - 2014-01-15 21:27 - 00512424 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\datacache.dll 2014-01-15 21:26 - 2014-01-15 21:28 - 00639912 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\studiorender.dll 2014-01-15 21:28 - 2014-01-15 21:28 - 00188840 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\soundemittersystem.dll 2014-01-15 21:26 - 2014-01-15 21:28 - 01191336 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\vphysics.dll 2014-01-15 21:26 - 2014-01-15 21:28 - 00605096 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\vscript.dll 2013-11-21 20:01 - 2013-11-21 20:46 - 00465920 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\lua51.dll 2014-01-15 21:26 - 2014-01-15 21:28 - 01503144 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\vguimatsurface.dll 2014-01-15 21:26 - 2014-01-15 21:27 - 00512936 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\vgui2.dll 2014-01-15 21:26 - 2014-01-15 21:28 - 05620648 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\scaleformui_4.dll 2014-01-15 21:26 - 2014-01-15 21:28 - 00995752 _____ () D:\Program Files\Steam\steamapps\common\dota 2 beta\bin\shaderapidx9.dll 2014-01-15 21:27 - 2014-01-15 21:27 - 00164776 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\localize.dll 2014-01-15 21:28 - 2014-01-15 21:28 - 00246184 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\stdshader_dbg.dll 2014-01-15 21:26 - 2014-01-15 21:28 - 01146792 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\stdshader_dx9.dll 2014-01-18 11:50 - 2014-01-18 11:58 - 22181288 _____ () d:\program files\steam\steamapps\common\dota 2 beta\dota\bin\client.dll 2014-01-18 11:50 - 2014-01-18 11:58 - 17899944 _____ () d:\program files\steam\steamapps\common\dota 2 beta\dota\bin\server.dll 2014-01-15 21:27 - 2014-01-15 21:27 - 00246184 _____ () D:\Program Files\Steam\steamapps\common\dota 2 beta\bin\scenefilecache.dll 2014-01-15 21:28 - 2014-01-15 21:28 - 00106920 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\vaudio_miles.dll 2013-09-10 19:00 - 2013-09-10 19:00 - 00071680 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\mssmp3.asi 2013-09-10 19:00 - 2013-09-10 19:00 - 00153088 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\mssvoice.asi 2013-09-10 19:00 - 2013-09-10 19:00 - 00013312 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\mssds3d.flt 2013-09-10 18:59 - 2013-09-10 18:59 - 00055808 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\msseax.flt 2014-01-18 11:50 - 2014-01-18 11:58 - 00918952 _____ () D:\Program Files\Steam\steamapps\common\dota 2 beta\bin\chromehtml.dll 2013-09-23 18:17 - 2013-09-23 18:55 - 20625832 _____ () D:\Program Files\Steam\steamapps\common\dota 2 beta\bin\libcef.dll 2013-09-10 15:51 - 2013-09-10 18:59 - 01094158 _____ () D:\Program Files\Steam\steamapps\common\dota 2 beta\bin\avcodec-53.dll 2013-09-10 18:59 - 2013-09-10 18:59 - 00117262 _____ () D:\Program Files\Steam\steamapps\common\dota 2 beta\bin\avutil-51.dll 2013-09-10 18:59 - 2013-09-10 18:59 - 00183822 _____ () D:\Program Files\Steam\steamapps\common\dota 2 beta\bin\avformat-53.dll 2014-01-15 21:27 - 2014-01-15 21:27 - 00181672 _____ () d:\program files\steam\steamapps\common\dota 2 beta\bin\vaudio_celt.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Julian\Cookies:FYeB9ZLLgrgGYkEUKnh6 AlternateDataStreams: C:\Users\Julian\Local Settings:TkuniQ00R4nlGyoBfxxdNre AlternateDataStreams: C:\Users\Julian\AppData\Local:TkuniQ00R4nlGyoBfxxdNre AlternateDataStreams: C:\Users\Julian\AppData\Local\Application Data:TkuniQ00R4nlGyoBfxxdNre AlternateDataStreams: C:\Users\Julian\AppData\Local\Temp:32OZYoFatfZD25WndUBUEoxW0i AlternateDataStreams: C:\Users\Julian\AppData\Local\Temp:ppfSv8zKQ04bXEYMHgy6BsO ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Standardtastatur (PS/2) Description: Standardtastatur (PS/2) Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318} Manufacturer: (Standardtastaturen) Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (01/18/2014 07:12:49 PM) (Source: Microsoft-Windows-RestartManager) (User: Julian-PC) Description: Die Anwendung oder der Dienst "SpyHunter4 application" konnte nicht heruntergefahren werden. Error: (01/18/2014 04:47:08 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] System errors: ============= Error: (01/18/2014 06:33:38 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT AUTHORITY) Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (01/18/2014 11:46:32 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT AUTHORITY) Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (01/17/2014 07:12:56 PM) (Source: DCOM) (User: ) Description: {ED1D0FDF-4414-470A-A56D-CFB68623FC58} Error: (01/17/2014 07:06:17 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT AUTHORITY) Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (01/17/2014 09:06:13 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT AUTHORITY) Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (01/16/2014 09:15:49 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT AUTHORITY) Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (01/15/2014 08:41:23 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT AUTHORITY) Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (01/15/2014 08:40:19 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT AUTHORITY) Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007045b Error: (01/15/2014 08:39:06 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT AUTHORITY) Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (01/15/2014 05:37:15 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT AUTHORITY) Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Microsoft Office Sessions: ========================= Error: (01/18/2014 07:12:49 PM) (Source: Microsoft-Windows-RestartManager)(User: Julian-PC) Description: 1C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exeSpyHunter4 application0211727200 Error: (01/18/2014 04:47:08 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] ==================== Memory info =========================== Percentage of memory in use: 79% Total physical RAM: 4095.35 MB Available physical RAM: 852.26 MB Total Pagefile: 8188.88 MB Available Pagefile: 2972.69 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (Windows) (Fixed) (Total:43.85 GB) (Free:6.91 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Programme) (Fixed) (Total:104.05 GB) (Free:87.37 GB) NTFS Drive e: (Stuff) (Fixed) (Total:195.32 GB) (Free:114.41 GB) NTFS Drive f: (Other) (Fixed) (Total:29.3 GB) (Free:29.07 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 373 GB) (Disk ID: B3B26404) Partition 1: (Active) - (Size=44 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=329 GB) - (Type=OF Extended) ==================== End Of Log ============================ |
18.01.2014, 21:44 | #5 |
/// Malwareteam | Habe mir den "safesaver"-Mist eingefangen Hey, du hast auf deinem Rechner die Adobe Creative Suite 6 Master Collection installiert und in deiner hosts Datei sind unter anderem folgende Einträge vorhanden: Code:
ATTFilter 127.0.0.1 3dns-3.adobe.com 127.0.0.1 3dns-4.adobe.com 127.0.0.1 activate.adobe.com
__________________ Gruß, Jonas |
19.01.2014, 09:59 | #6 |
| Habe mir den "safesaver"-Mist eingefangen Hallo zusammen, ich habe das Problem selbst gelöst. Der Vollständigkeit halber, hier die Dateien, die wohl Probleme gemacht haben: Code:
ATTFilter BHO: BestSavueFooruYou - {515B934F-50A0-116B-750C-E3A51DC83BF9} - C:\ProgramData\BestSavueFooruYou\gB4C.x64.dll () BHO: NewSaver - {5F5223CC-0958-9143-B6EC-483DAE5C0550} - C:\ProgramData\NewSaver\P2ns_3D.x64.dll () BHO-x32: BestSavueFooruYou - {515B934F-50A0-116B-750C-E3A51DC83BF9} - C:\ProgramData\BestSavueFooruYou\gB4C.dll () BHO-x32: NewSaver - {5F5223CC-0958-9143-B6EC-483DAE5C0550} - C:\ProgramData\NewSaver\P2ns_3D.dll () Kleine Anmerkung: Ich danke Jonas, dass er mir nicht geholfen hat, denn dadurch konnte ich mir selbst helfen. Jedoch ist es schade, dass man hier keine Hilfe mehr bekommt, sobald sich der leiseste Verdacht auf etwas Illegales auftut. Natürlich will man niemanden unterstützen, der Illegales treibt. Völlig klar und auch gut so. Bei mir war das jedoch nicht der Fall. Geändert von pulp.schroth (19.01.2014 um 10:06 Uhr) |
20.01.2014, 17:34 | #7 | |
/// Malwareteam | Habe mir den "safesaver"-Mist eingefangenZitat:
__________________ Gruß, Jonas |
20.01.2014, 18:01 | #8 |
| Habe mir den "safesaver"-Mist eingefangen Naja, es hat sich schon ein bisschen so angehört. Falls dies nicht der Fall war - entschuldige bitte! Zum Virus: Er ist weg, Chrome zeigt keine lästige Werbung mehr. Habe ich irgendwas vergessen oder wärst du anders vorgegangen? |
Themen zu Habe mir den "safesaver"-Mist eingefangen |
beliebige, chrome, eingefangen, forum, gefangen, gen, problem, safesaver, werbung, wörter |