|
Log-Analyse und Auswertung: Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stopptWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
11.06.2014, 11:38 | #1 |
| Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Guten Tag, Ich habe mehrere Probleme mit meinem Rechner, bei denen ich mir nicht sicher bin, ob die zusammenhängen (Virus?). Ich benutze den Internetbrowser Opera (Version: 22.0.1471.50) und seit kurzem stürzt dieser bzw. die geöffneten Webseiten öfters ab. Wenn die Webseiten abstürzen, muss ich diese nur neu laden, damit die gewünschten Webseiten erscheinen. Des weiteren hängen sich meine Spiele öfters auf. Ich habe deren Grafikeinstellungen schon auf das Minimum gesetzt, da ich dachte, dass mein Rechner möglicherweise zu alt für diese Spiele ist (Wobei das Problem bei manchen Spielen früher nicht aufgetreten ist). Zudem hängt sich bei manchen Spielen der ganze Computer auf, d.h. der Bildschirm wird schwarz (bzw. schaltet sich automatisch ab, da dieser keine Verbindung zum Computer mehr erkennt) und die Soundausgabe (Boxen oder Headset) gibt nur noch ein lautes Rauschen von sich. Wenn dieses Problem auftretet muss ich die Stromzufuhr zum Rechner unterbrechen und neu hochfahren. Da ich in erster Linie einen Virus vermutet habe, habe ich mein Antivirus Program (Norton 360 Online [Version 21.3.0.12]) mein Computer scannen lassen, dieser hat aber keine Viren gefunden bzw. oben genannten Probleme treten weiterhin auf. Können Sie mir bei diesem Problem weiterhelfen? LogDateien: FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-06-2014 Ran by Ankhang (administrator) on ANKHANG-PC on 11-06-2014 11:44:28 Running from C:\Users\Ankhang\Downloads\Trojanerboard Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe (Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Spotify Ltd) C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () C:\Windows\SysWOW64\PnkBstrA.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe () C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation) HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2353880 2013-11-01] (Microsoft Corp.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) HKU\S-1-5-21-802949540-198687548-912749210-1000\...\Run: [Spotify Web Helper] => C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-04] (Spotify Ltd) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://9gag.com/ HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited) BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation) BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\ [] FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF [2014-02-17] ==================== Services (Whitelisted) ================= R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.) R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED) R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [265040 2014-05-11] (Symantec Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-05-31] () S2 SkypeUpdate; D:\Khang Hoang\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies) R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [549008 2014-05-12] (Cherished Technololgy LIMITED) ==================== Drivers (Whitelisted) ==================== S3 1394hub; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140606.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-11] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-11] (Symantec Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140610.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation) R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140610.019\ENG64.SYS [126040 2014-06-10] (Symantec Corporation) R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140610.019\EX64.SYS [2099288 2014-06-10] (Symantec Corporation) R0 SMR410; C:\Windows\System32\drivers\SMR410.SYS [96856 2014-06-11] (Symantec Corporation) R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1503000.00C\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-16] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-11 11:44 - 2014-06-11 11:44 - 00000000 ____D () C:\FRST 2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule 2014-06-11 11:40 - 2014-06-11 11:44 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard 2014-06-11 11:40 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins 2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable 2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp 2014-06-11 10:25 - 2014-06-11 10:25 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS 2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp 2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE 2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM 2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk 2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk 2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-06-06 12:03 - 2014-06-10 21:17 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk 2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine 2014-06-06 11:19 - 2014-06-06 12:03 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare 2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk 2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft 2014-06-04 09:33 - 2014-06-04 09:36 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc 2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-06-04 09:05 - 2014-06-06 10:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify 2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk 2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-06-04 09:04 - 2014-06-07 16:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify 2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url 2014-06-03 23:01 - 2014-06-03 23:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim 2014-06-03 22:56 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\Documents\my games 2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089 2014-06-03 10:55 - 2014-06-09 15:03 - 00000000 ____D () C:\Program Files (x86)\SEGA 2014-06-03 09:41 - 2014-06-03 11:00 - 00000360 _____ () C:\console.log 2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk 2014-06-02 22:17 - 2014-06-03 11:04 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA 2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet 2014-06-02 18:00 - 2014-06-02 18:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite 2014-05-31 17:17 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins 2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe 2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core 2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk 2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3 2014-05-31 17:06 - 2014-06-07 19:02 - 00115581 _____ () C:\Windows\DirectX.log 2014-05-31 17:06 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-05-31 17:06 - 2014-06-01 14:25 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-05-31 17:06 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2014-05-31 17:06 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2014-05-31 17:06 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2014-05-31 17:06 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2014-05-31 17:06 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2014-05-31 17:06 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2014-05-31 17:06 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2014-05-31 17:06 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2014-05-31 17:06 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2014-05-31 17:06 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2014-05-31 17:06 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2014-05-31 17:06 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2014-05-31 17:06 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2014-05-31 17:06 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2014-05-31 17:06 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2014-05-31 17:06 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2014-05-31 17:06 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2014-05-31 17:06 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2014-05-31 17:06 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2014-05-31 17:06 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2014-05-31 17:06 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2014-05-31 17:06 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2014-05-31 17:06 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2014-05-31 17:06 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2014-05-31 17:06 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2014-05-31 17:06 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2014-05-31 17:06 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2014-05-31 17:06 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2014-05-31 17:06 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2014-05-31 17:06 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2014-05-31 17:06 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2014-05-31 17:06 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2014-05-31 17:06 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2014-05-31 17:06 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2014-05-31 17:06 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2014-05-31 17:06 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2014-05-31 17:06 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2014-05-31 17:06 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2014-05-31 17:06 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2014-05-31 17:06 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2014-05-31 17:06 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2014-05-31 17:06 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2014-05-31 17:06 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2014-05-31 17:06 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2014-05-31 17:06 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2014-05-31 17:06 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2014-05-31 17:06 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2014-05-31 17:06 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2014-05-31 17:06 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2014-05-31 17:06 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2014-05-31 17:06 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2014-05-31 17:06 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2014-05-31 17:06 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2014-05-31 17:06 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2014-05-31 17:06 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2014-05-31 17:06 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2014-05-31 17:06 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2014-05-31 17:06 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2014-05-31 17:06 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2014-05-31 17:06 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2014-05-31 17:06 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2014-05-31 17:06 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2014-05-31 17:06 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2014-05-31 17:06 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2014-05-31 17:06 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2014-05-31 17:06 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2014-05-31 17:06 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2014-05-31 17:06 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2014-05-31 17:06 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2014-05-31 17:06 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2014-05-31 17:06 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2014-05-31 17:06 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2014-05-31 17:06 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2014-05-31 17:06 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2014-05-31 17:06 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2014-05-31 17:06 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2014-05-31 17:06 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2014-05-31 17:06 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2014-05-31 16:00 - 2014-06-09 15:04 - 00000000 ____D () C:\Spiele 2014-05-31 15:56 - 2014-06-01 14:08 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin 2014-05-31 15:56 - 2014-05-31 17:12 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin 2014-05-31 15:54 - 2014-06-10 21:13 - 00000000 ____D () C:\ProgramData\Origin 2014-05-31 15:54 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\Electronic Arts 2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk 2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp 2014-05-24 11:32 - 2014-05-24 11:32 - 00001532 _____ () C:\ProgramData\SMRResults410.dat 2014-05-23 18:25 - 2014-05-31 10:31 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk 2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10} 2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360 2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp 2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp 2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp 2014-05-18 10:30 - 2014-05-18 10:30 - 00000000 ____D () C:\IePluginService 2014-05-15 08:23 - 2014-05-15 08:23 - 00994160 _____ () C:\Users\Ankhang\Downloads\setup.exe 2014-05-13 20:04 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-13 20:04 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-13 20:04 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-13 20:04 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-13 20:04 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-13 20:04 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-13 19:59 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-13 19:59 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-13 19:59 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-13 19:59 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-13 19:59 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-13 19:59 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-13 19:59 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-13 19:59 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-13 19:59 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-13 19:59 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-13 19:59 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-13 19:59 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-13 19:59 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-13 19:59 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-13 19:59 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-13 19:59 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-13 19:58 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-13 19:58 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-13 19:58 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-13 19:58 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NCSOFT 2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NCSOFT 2014-05-12 16:26 - 2014-05-12 16:28 - 00000000 ____D () C:\ProgramData\IePluginService 2014-05-12 16:26 - 2014-05-12 16:27 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SupTab 2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\WPM 2014-05-12 16:25 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\Downloads\Wildstar 2014-05-12 16:23 - 2014-06-06 21:35 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NVIDIA ==================== One Month Modified Files and Folders ======= 2014-06-11 11:44 - 2014-06-11 11:44 - 00000000 ____D () C:\FRST 2014-06-11 11:44 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard 2014-06-11 11:44 - 2014-02-16 19:39 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Temp 2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule 2014-06-11 11:42 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins 2014-06-11 11:41 - 2014-03-04 13:35 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\uTorrent 2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable 2014-06-11 11:39 - 2014-02-16 19:39 - 00000000 ____D () C:\Users\Ankhang 2014-06-11 11:31 - 2014-05-08 15:21 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NPE 2014-06-11 11:24 - 2014-02-19 17:51 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-11 11:24 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-11 11:24 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-11 11:21 - 2014-02-16 19:34 - 01724277 _____ () C:\Windows\WindowsUpdate.log 2014-06-11 11:15 - 2014-05-08 20:49 - 00000000 ____D () C:\NPE 2014-06-11 11:15 - 2014-02-16 22:12 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-06-11 11:15 - 2010-11-21 05:47 - 00100398 _____ () C:\Windows\PFRO.log 2014-06-11 11:15 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-11 11:15 - 2009-07-14 06:51 - 00058858 _____ () C:\Windows\setupact.log 2014-06-11 11:00 - 2014-03-05 18:54 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\CrashDumps 2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp 2014-06-11 10:31 - 2014-04-15 19:27 - 450936029 _____ () C:\Windows\MEMORY.DMP 2014-06-11 10:31 - 2014-04-15 19:27 - 00000000 ____D () C:\Windows\Minidump 2014-06-11 10:25 - 2014-06-11 10:25 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS 2014-06-11 09:51 - 2014-02-17 19:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Skype 2014-06-10 21:17 - 2014-06-06 12:03 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk 2014-06-10 21:13 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Origin 2014-06-09 15:04 - 2014-05-31 16:00 - 00000000 ____D () C:\Spiele 2014-06-09 15:04 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-06-09 15:03 - 2014-06-03 10:55 - 00000000 ____D () C:\Program Files (x86)\SEGA 2014-06-09 14:47 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp 2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE 2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM 2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk 2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk 2014-06-07 19:02 - 2014-05-31 17:06 - 00115581 _____ () C:\Windows\DirectX.log 2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-06-07 16:16 - 2014-06-04 09:04 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify 2014-06-06 21:35 - 2014-05-12 16:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NVIDIA 2014-06-06 12:03 - 2014-06-06 11:19 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare 2014-06-06 12:02 - 2014-02-16 22:11 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine 2014-06-06 11:41 - 2014-06-03 22:56 - 00000000 ____D () C:\Users\Ankhang\Documents\my games 2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk 2014-06-06 10:23 - 2014-06-04 09:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify 2014-06-05 08:09 - 2014-02-17 19:50 - 00000000 ____D () C:\ProgramData\Skype 2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft 2014-06-04 09:43 - 2014-02-17 04:29 - 00698688 _____ () C:\Windows\system32\perfh007.dat 2014-06-04 09:43 - 2014-02-17 04:29 - 00148828 _____ () C:\Windows\system32\perfc007.dat 2014-06-04 09:43 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-04 09:36 - 2014-06-04 09:33 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc 2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk 2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url 2014-06-03 23:16 - 2014-06-03 23:01 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim 2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089 2014-06-03 15:49 - 2014-05-08 19:27 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-06-03 11:04 - 2014-06-02 22:17 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA 2014-06-03 11:00 - 2014-06-03 09:41 - 00000360 _____ () C:\console.log 2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk 2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet 2014-06-02 18:05 - 2014-06-02 18:00 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite 2014-06-02 12:16 - 2014-05-31 17:17 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-06-02 12:16 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-06-01 14:25 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-06-01 14:08 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins 2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe 2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core 2014-05-31 17:12 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin 2014-05-31 17:12 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Electronic Arts 2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk 2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3 2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk 2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2014-05-31 15:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-05-31 10:31 - 2014-05-23 18:25 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk 2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp 2014-05-24 11:32 - 2014-05-24 11:32 - 00001532 _____ () C:\ProgramData\SMRResults410.dat 2014-05-23 18:26 - 2014-04-06 13:50 - 00000059 _____ () C:\Windows\JQHApp.dat 2014-05-23 18:25 - 2014-04-06 13:49 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MKJogo 2014-05-22 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10} 2014-05-22 16:22 - 2009-07-14 01:59 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\msdtc.exe 2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360 2014-05-22 15:51 - 2014-02-16 23:28 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-05-22 15:51 - 2014-02-16 23:28 - 00002319 _____ () C:\Users\Public\Desktop\Norton 360.lnk 2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360 2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64 2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp 2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp 2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp 2014-05-18 10:30 - 2014-05-18 10:30 - 00000000 ____D () C:\IePluginService 2014-05-16 17:14 - 2014-03-24 16:42 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-05-15 08:23 - 2014-05-15 08:23 - 00994160 _____ () C:\Users\Ankhang\Downloads\setup.exe 2014-05-14 20:24 - 2014-02-19 17:51 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-14 20:24 - 2014-02-19 17:51 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-14 20:24 - 2014-02-19 17:51 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-13 20:37 - 2014-05-01 00:40 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-13 20:03 - 2014-02-16 22:03 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-13 20:02 - 2014-02-16 22:03 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-13 18:41 - 2014-02-19 17:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Adobe 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NCSOFT 2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NCSOFT 2014-05-12 16:28 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\IePluginService 2014-05-12 16:27 - 2014-05-12 16:26 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SupTab 2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\WPM 2014-05-12 16:26 - 2014-05-12 16:25 - 00000000 ____D () C:\Users\Ankhang\Downloads\Wildstar 2014-05-12 16:26 - 2014-02-16 19:40 - 00001635 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Files to move or delete: ==================== C:\ProgramData\SMRResults410.dat ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-05-09 06:51 ==================== End Of Log ============================ --- --- --- Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-06-2014 Ran by Ankhang at 2014-06-11 11:45:15 Running from C:\Users\Ankhang\Downloads\Trojanerboard Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Norton 360 Online (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB} AS: Norton 360 Online (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton 360 Online (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0} ==================== Installed Programs ====================== 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated) Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB) Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.347.0 - Microsoft Corporation) Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve) Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts) Dragon Age™ II (HKLM-x32\...\{E1EB9F56-AFE2-4204-B28F-AD8DA793B9F4}) (Version: 1.04.8524.0 - Electronic Arts) Internet Explorer (Enable DEP) (HKLM\...\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb) (Version: - ) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Small Business Edition 2003 (HKLM-x32\...\{91CA0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MKLOL (HKCU\...\MKLOL) (Version: - ) Norton 360 (HKLM-x32\...\N360) (Version: 21.3.0.12 - Symantec Corporation) NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation) NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden NVIDIA PhysX (HKLM-x32\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden Opera Stable 22.0.1471.50 (HKLM-x32\...\Opera 22.0.1471.50) (Version: 22.0.1471.50 - Opera Software ASA) Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.) Pointofix (HKLM-x32\...\Pointofix_is1) (Version: - Amerigomedia) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts) Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH) The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) WPM18.8.0.304 (HKLM-x32\...\WPM) (Version: 18.8.0.304 - Cherished Technololgy LIMITED) <==== ATTENTION ==================== Restore Points ========================= 07-06-2014 17:01:04 DirectX wurde installiert 09-06-2014 13:05:56 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {43E67C9A-557E-4E5B-A808-79F9B8BCE1C1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated) Task: {985EBFEE-C4E0-4265-9F16-55908D468A89} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {A87828C2-F008-44AE-86D9-66C975704767} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation) Task: {C6245414-7C62-4989-9F52-CAF330FF2C67} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {C96F1BA6-3444-432A-9549-DABE511AC317} - System32\Tasks\{D65FF839-151E-45D9-BB4F-8F8B982E3852} => C:\Program Files (x86)\Skype\Phone\Skype.exe Task: {E2821676-D67F-46C1-AC1A-FD2225325605} - System32\Tasks\Opera scheduled Autoupdate 1399999089 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-27] (Opera Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2014-02-16 22:12 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-06-03 15:49 - 2014-06-03 15:49 - 01396344 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe 2014-06-03 15:49 - 2014-06-03 15:48 - 00877176 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\libglesv2.dll 2014-06-03 15:49 - 2014-06-03 15:48 - 00135800 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\libegl.dll 2014-06-03 15:49 - 2014-06-03 15:48 - 00957048 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: Microsoft PS/2-Maus Description: Microsoft PS/2-Maus Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (06/11/2014 11:31:07 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000003fefeb33480 ID des fehlerhaften Prozesses: 0xeb0 Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0 Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1 Pfad des fehlerhaften Moduls: TrustedInstaller.exe2 Berichtskennung: TrustedInstaller.exe3 Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=3800} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (06/11/2014 11:21:32 AM) (Source: ESENT) (EventID: 474) (User: ) Description: Windows (2144) Windows: Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 22970368 (0x00000000015e8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [29cd29cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1], die tatsächliche Prüfsumme [11cd11cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller. Error: (06/11/2014 11:17:05 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/11/2014 11:13:38 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001d821 ID des fehlerhaften Prozesses: 0xb34 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 Error: (06/11/2014 11:13:36 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0015e235 ID des fehlerhaften Prozesses: 0xb34 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 Error: (06/11/2014 11:12:56 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001d821 ID des fehlerhaften Prozesses: 0x914 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 Error: (06/11/2014 11:12:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0015e235 ID des fehlerhaften Prozesses: 0x914 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 Error: (06/11/2014 11:12:12 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001d821 ID des fehlerhaften Prozesses: 0xcd0 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 System errors: ============= Error: (06/11/2014 11:31:11 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts. Error: (06/11/2014 11:16:43 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/11/2014 11:14:20 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (06/11/2014 10:37:26 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/11/2014 10:35:15 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (06/11/2014 10:33:09 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/11/2014 10:31:30 AM) (Source: BugCheck) (EventID: 1001) (User: ) Description: 0x0000001a (0x0000000000005003, 0xfffff70001080000, 0x00000000000029d5, 0x0000000001294069)C:\Windows\MEMORY.DMP061114-24008-01 Error: (06/11/2014 10:31:29 AM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 11.06.2014 um 10:29:44 unerwartet heruntergefahren. Error: (06/11/2014 10:29:07 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/11/2014 10:25:48 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Microsoft Office Sessions: ========================= Error: (06/11/2014 11:31:07 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: TrustedInstaller.exe6.1.7601.175144ce7989bunknown0.0.0.000000000c0000005000003fefeb33480eb001cf85566749cf5dC:\Windows\servicing\TrustedInstaller.exeunknown1d0b485e-f14b-11e3-8b77-002511a293a5 Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) The catalog is corrupt Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) 3800 Error: (06/11/2014 11:21:32 AM) (Source: ESENT) (EventID: 474) (User: ) Description: Windows2144Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb22970368 (0x00000000015e8000)32768 (0x00008000)-1018 (0xfffffc06)[29cd29cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1][11cd11cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1]700 (0x2BC) Error: (06/11/2014 11:17:05 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/11/2014 11:13:38 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d821b3401cf855556fdf305C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLLab9937b7-f148-11e3-897e-002511a293a5 Error: (06/11/2014 11:13:36 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819SporeApp.exe1.1.0.3384897d819c00000050015e235b3401cf855556fdf305C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\SporeApp.exeaa6769fc-f148-11e3-897e-002511a293a5 Error: (06/11/2014 11:12:56 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d82191401cf85553c708c93C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLL92997da8-f148-11e3-897e-002511a293a5 Error: (06/11/2014 11:12:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819SporeApp.exe1.1.0.3384897d819c00000050015e23591401cf85553c708c93C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\SporeApp.exe8fc9d85f-f148-11e3-897e-002511a293a5 Error: (06/11/2014 11:12:12 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d821cd001cf85538e7ab96eC:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLL786cdd16-f148-11e3-897e-002511a293a5 CodeIntegrity Errors: =================================== Date: 2014-05-08 20:58:05.725 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:58:05.665 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:59.459 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:59.334 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:53.156 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:53.032 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:46.760 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:46.698 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:40.524 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:40.478 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 23% Total physical RAM: 8191.14 MB Available physical RAM: 6273.25 MB Total Pagefile: 16380.46 MB Available Pagefile: 14240.18 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:456.26 GB) (Free:311.37 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (VOLUME) (Fixed) (Total:18.55 GB) (Free:1.97 GB) NTFS Drive e: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS Drive f: () (Fixed) (Total:456.6 GB) (Free:456.44 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: B200EA93) Partition 1: (Not Active) - (Size=19 GB) - (Type=OF Extended) Partition 2: (Not Active) - (Size=99 MB) - (Type=07 NTFS) Partition 3: (Active) - (Size=456 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
11.06.2014, 11:50 | #2 |
/// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stopptMein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags: So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Alle Tools auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind. Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen. |
11.06.2014, 11:56 | #3 |
| Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hallo Matthias
__________________Vielen Dank für die schnelle Antwort. Wie muss ich nun vorgehen, um das Problem zu beheben? |
11.06.2014, 12:00 | #4 |
/// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Servus, naja, wie ich geschrieben habe... erst mal FRST.exe auf den Desktop verschieben (dort belassen) und FRST erneut ausführen:
Selbiges gilt für alle zukünftigen Tools, die wir verwenden. |
11.06.2014, 12:08 | #5 |
| Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hallo nochmals, Bitte verzeiht mir meine Inkompetenz oben. Ich habe dafür keine Erklärung, außer das meine Fähigkeit zu lesen, ausgesetzt hat. FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-06-2014 Ran by Ankhang (administrator) on ANKHANG-PC on 11-06-2014 13:03:42 Running from C:\Users\Ankhang\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe (Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Spotify Ltd) C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () C:\Windows\SysWOW64\PnkBstrA.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe () C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (Spotify Ltd) C:\Users\Ankhang\AppData\Roaming\Spotify\spotify.exe () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation) HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2353880 2013-11-01] (Microsoft Corp.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) HKU\S-1-5-21-802949540-198687548-912749210-1000\...\Run: [Spotify Web Helper] => C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-04] (Spotify Ltd) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://9gag.com/ HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited) BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation) BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\ [] FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF [2014-02-17] ==================== Services (Whitelisted) ================= R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.) R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED) R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [265040 2014-05-11] (Symantec Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-05-31] () S2 SkypeUpdate; D:\Khang Hoang\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies) R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [549008 2014-05-12] (Cherished Technololgy LIMITED) ==================== Drivers (Whitelisted) ==================== S3 1394hub; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140606.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-11] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-11] (Symantec Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140610.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation) R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140610.019\ENG64.SYS [126040 2014-06-10] (Symantec Corporation) R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140610.019\EX64.SYS [2099288 2014-06-10] (Symantec Corporation) R0 SMR410; C:\Windows\System32\drivers\SMR410.SYS [96856 2014-06-11] (Symantec Corporation) R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1503000.00C\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-16] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] U3 uxriqfow; \??\C:\Users\Ankhang\AppData\Local\Temp\uxriqfow.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-11 12:26 - 2014-06-11 12:31 - 00001283 _____ () C:\Users\Ankhang\Desktop\trojanerboard.txt 2014-06-11 12:01 - 2014-06-11 12:01 - 00012682 _____ () C:\Users\Ankhang\Desktop\gmer.log 2014-06-11 11:47 - 2014-06-11 11:47 - 00380416 _____ () C:\Users\Ankhang\Desktop\Gmer-19357.exe 2014-06-11 11:45 - 2014-06-11 11:46 - 00027736 _____ () C:\Users\Ankhang\Desktop\Addition.txt 2014-06-11 11:44 - 2014-06-11 13:03 - 00013129 _____ () C:\Users\Ankhang\Desktop\FRST.txt 2014-06-11 11:44 - 2014-06-11 13:03 - 00000000 ____D () C:\FRST 2014-06-11 11:43 - 2014-06-11 11:43 - 02081792 _____ (Farbar) C:\Users\Ankhang\Desktop\FRST64.exe 2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule 2014-06-11 11:40 - 2014-06-11 12:54 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard 2014-06-11 11:40 - 2014-06-11 12:52 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins 2014-06-11 11:39 - 2014-06-11 11:39 - 00000476 _____ () C:\Users\Ankhang\Desktop\defogger_disable.log 2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable 2014-06-11 11:38 - 2014-06-11 11:38 - 00050477 _____ () C:\Users\Ankhang\Desktop\Defogger.exe 2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp 2014-06-11 10:25 - 2014-06-11 10:25 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS 2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp 2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE 2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM 2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk 2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk 2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-06-06 12:03 - 2014-06-10 21:17 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk 2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine 2014-06-06 11:19 - 2014-06-06 12:03 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare 2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk 2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft 2014-06-04 09:33 - 2014-06-04 09:36 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc 2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-06-04 09:05 - 2014-06-06 10:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify 2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk 2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-06-04 09:04 - 2014-06-11 12:44 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify 2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url 2014-06-03 23:01 - 2014-06-03 23:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim 2014-06-03 22:56 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\Documents\my games 2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089 2014-06-03 10:55 - 2014-06-09 15:03 - 00000000 ____D () C:\Program Files (x86)\SEGA 2014-06-03 09:41 - 2014-06-03 11:00 - 00000360 _____ () C:\console.log 2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk 2014-06-02 22:17 - 2014-06-03 11:04 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA 2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet 2014-06-02 18:00 - 2014-06-02 18:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite 2014-05-31 17:17 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins 2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe 2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core 2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk 2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3 2014-05-31 17:06 - 2014-06-07 19:02 - 00115581 _____ () C:\Windows\DirectX.log 2014-05-31 17:06 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-05-31 17:06 - 2014-06-01 14:25 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-05-31 17:06 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2014-05-31 17:06 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2014-05-31 17:06 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2014-05-31 17:06 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2014-05-31 17:06 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2014-05-31 17:06 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2014-05-31 17:06 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2014-05-31 17:06 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2014-05-31 17:06 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2014-05-31 17:06 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2014-05-31 17:06 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2014-05-31 17:06 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2014-05-31 17:06 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2014-05-31 17:06 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2014-05-31 17:06 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2014-05-31 17:06 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2014-05-31 17:06 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2014-05-31 17:06 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2014-05-31 17:06 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2014-05-31 17:06 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2014-05-31 17:06 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2014-05-31 17:06 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2014-05-31 17:06 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2014-05-31 17:06 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2014-05-31 17:06 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2014-05-31 17:06 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2014-05-31 17:06 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2014-05-31 17:06 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2014-05-31 17:06 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2014-05-31 17:06 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2014-05-31 17:06 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2014-05-31 17:06 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2014-05-31 17:06 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2014-05-31 17:06 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2014-05-31 17:06 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2014-05-31 17:06 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2014-05-31 17:06 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2014-05-31 17:06 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2014-05-31 17:06 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2014-05-31 17:06 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2014-05-31 17:06 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2014-05-31 17:06 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2014-05-31 17:06 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2014-05-31 17:06 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2014-05-31 17:06 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2014-05-31 17:06 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2014-05-31 17:06 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2014-05-31 17:06 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2014-05-31 17:06 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2014-05-31 17:06 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2014-05-31 17:06 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2014-05-31 17:06 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2014-05-31 17:06 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2014-05-31 17:06 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2014-05-31 17:06 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2014-05-31 17:06 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2014-05-31 17:06 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2014-05-31 17:06 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2014-05-31 17:06 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2014-05-31 17:06 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2014-05-31 17:06 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2014-05-31 17:06 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2014-05-31 17:06 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2014-05-31 17:06 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2014-05-31 17:06 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2014-05-31 17:06 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2014-05-31 17:06 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2014-05-31 17:06 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2014-05-31 17:06 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2014-05-31 17:06 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2014-05-31 17:06 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2014-05-31 17:06 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2014-05-31 17:06 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2014-05-31 17:06 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2014-05-31 17:06 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2014-05-31 17:06 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2014-05-31 17:06 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2014-05-31 17:06 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2014-05-31 16:00 - 2014-06-09 15:04 - 00000000 ____D () C:\Spiele 2014-05-31 15:56 - 2014-06-01 14:08 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin 2014-05-31 15:56 - 2014-05-31 17:12 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin 2014-05-31 15:54 - 2014-06-10 21:13 - 00000000 ____D () C:\ProgramData\Origin 2014-05-31 15:54 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\Electronic Arts 2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk 2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp 2014-05-24 11:32 - 2014-05-24 11:32 - 00001532 _____ () C:\ProgramData\SMRResults410.dat 2014-05-23 18:25 - 2014-05-31 10:31 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk 2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10} 2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360 2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp 2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp 2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp 2014-05-18 10:30 - 2014-05-18 10:30 - 00000000 ____D () C:\IePluginService 2014-05-15 08:23 - 2014-05-15 08:23 - 00994160 _____ () C:\Users\Ankhang\Downloads\setup.exe 2014-05-13 20:04 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-13 20:04 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-13 20:04 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-13 20:04 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-13 20:04 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-13 20:04 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-13 19:59 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-13 19:59 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-13 19:59 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-13 19:59 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-13 19:59 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-13 19:59 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-13 19:59 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-13 19:59 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-13 19:59 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-13 19:59 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-13 19:59 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-13 19:59 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-13 19:59 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-13 19:59 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-13 19:59 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-13 19:59 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-13 19:58 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-13 19:58 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-13 19:58 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-13 19:58 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NCSOFT 2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NCSOFT 2014-05-12 16:26 - 2014-05-12 16:28 - 00000000 ____D () C:\ProgramData\IePluginService 2014-05-12 16:26 - 2014-05-12 16:27 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SupTab 2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\WPM 2014-05-12 16:25 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\Downloads\Wildstar 2014-05-12 16:23 - 2014-06-06 21:35 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NVIDIA ==================== One Month Modified Files and Folders ======= 2014-06-11 13:03 - 2014-06-11 11:44 - 00013129 _____ () C:\Users\Ankhang\Desktop\FRST.txt 2014-06-11 13:03 - 2014-06-11 11:44 - 00000000 ____D () C:\FRST 2014-06-11 13:03 - 2014-02-16 19:39 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Temp 2014-06-11 12:59 - 2014-03-05 18:54 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\CrashDumps 2014-06-11 12:54 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard 2014-06-11 12:52 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins 2014-06-11 12:44 - 2014-06-04 09:04 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify 2014-06-11 12:31 - 2014-06-11 12:26 - 00001283 _____ () C:\Users\Ankhang\Desktop\trojanerboard.txt 2014-06-11 12:30 - 2014-02-16 19:34 - 01731668 _____ () C:\Windows\WindowsUpdate.log 2014-06-11 12:24 - 2014-02-19 17:51 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-11 12:01 - 2014-06-11 12:01 - 00012682 _____ () C:\Users\Ankhang\Desktop\gmer.log 2014-06-11 11:47 - 2014-06-11 11:47 - 00380416 _____ () C:\Users\Ankhang\Desktop\Gmer-19357.exe 2014-06-11 11:47 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-11 11:47 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-11 11:46 - 2014-06-11 11:45 - 00027736 _____ () C:\Users\Ankhang\Desktop\Addition.txt 2014-06-11 11:43 - 2014-06-11 11:43 - 02081792 _____ (Farbar) C:\Users\Ankhang\Desktop\FRST64.exe 2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule 2014-06-11 11:41 - 2014-03-04 13:35 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\uTorrent 2014-06-11 11:39 - 2014-06-11 11:39 - 00000476 _____ () C:\Users\Ankhang\Desktop\defogger_disable.log 2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable 2014-06-11 11:39 - 2014-02-16 19:39 - 00000000 ____D () C:\Users\Ankhang 2014-06-11 11:38 - 2014-06-11 11:38 - 00050477 _____ () C:\Users\Ankhang\Desktop\Defogger.exe 2014-06-11 11:31 - 2014-05-08 15:21 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NPE 2014-06-11 11:15 - 2014-05-08 20:49 - 00000000 ____D () C:\NPE 2014-06-11 11:15 - 2014-02-16 22:12 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-06-11 11:15 - 2010-11-21 05:47 - 00100398 _____ () C:\Windows\PFRO.log 2014-06-11 11:15 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-11 11:15 - 2009-07-14 06:51 - 00058858 _____ () C:\Windows\setupact.log 2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp 2014-06-11 10:31 - 2014-04-15 19:27 - 450936029 _____ () C:\Windows\MEMORY.DMP 2014-06-11 10:31 - 2014-04-15 19:27 - 00000000 ____D () C:\Windows\Minidump 2014-06-11 10:25 - 2014-06-11 10:25 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS 2014-06-11 09:51 - 2014-02-17 19:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Skype 2014-06-10 21:17 - 2014-06-06 12:03 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk 2014-06-10 21:13 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Origin 2014-06-09 15:04 - 2014-05-31 16:00 - 00000000 ____D () C:\Spiele 2014-06-09 15:04 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-06-09 15:03 - 2014-06-03 10:55 - 00000000 ____D () C:\Program Files (x86)\SEGA 2014-06-09 14:47 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp 2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE 2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM 2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk 2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk 2014-06-07 19:02 - 2014-05-31 17:06 - 00115581 _____ () C:\Windows\DirectX.log 2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-06-06 21:35 - 2014-05-12 16:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NVIDIA 2014-06-06 12:03 - 2014-06-06 11:19 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare 2014-06-06 12:02 - 2014-02-16 22:11 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine 2014-06-06 11:41 - 2014-06-03 22:56 - 00000000 ____D () C:\Users\Ankhang\Documents\my games 2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk 2014-06-06 10:23 - 2014-06-04 09:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify 2014-06-05 08:09 - 2014-02-17 19:50 - 00000000 ____D () C:\ProgramData\Skype 2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft 2014-06-04 09:43 - 2014-02-17 04:29 - 00698688 _____ () C:\Windows\system32\perfh007.dat 2014-06-04 09:43 - 2014-02-17 04:29 - 00148828 _____ () C:\Windows\system32\perfc007.dat 2014-06-04 09:43 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-04 09:36 - 2014-06-04 09:33 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc 2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk 2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url 2014-06-03 23:16 - 2014-06-03 23:01 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim 2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089 2014-06-03 15:49 - 2014-05-08 19:27 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-06-03 11:04 - 2014-06-02 22:17 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA 2014-06-03 11:00 - 2014-06-03 09:41 - 00000360 _____ () C:\console.log 2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk 2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet 2014-06-02 18:05 - 2014-06-02 18:00 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite 2014-06-02 12:16 - 2014-05-31 17:17 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-06-02 12:16 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-06-01 14:25 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-06-01 14:08 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins 2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe 2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core 2014-05-31 17:12 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin 2014-05-31 17:12 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Electronic Arts 2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk 2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3 2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk 2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2014-05-31 15:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-05-31 10:31 - 2014-05-23 18:25 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk 2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp 2014-05-24 11:32 - 2014-05-24 11:32 - 00001532 _____ () C:\ProgramData\SMRResults410.dat 2014-05-23 18:26 - 2014-04-06 13:50 - 00000059 _____ () C:\Windows\JQHApp.dat 2014-05-23 18:25 - 2014-04-06 13:49 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MKJogo 2014-05-22 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10} 2014-05-22 16:22 - 2009-07-14 01:59 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\msdtc.exe 2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360 2014-05-22 15:51 - 2014-02-16 23:28 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-05-22 15:51 - 2014-02-16 23:28 - 00002319 _____ () C:\Users\Public\Desktop\Norton 360.lnk 2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360 2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64 2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp 2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp 2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp 2014-05-18 10:30 - 2014-05-18 10:30 - 00000000 ____D () C:\IePluginService 2014-05-16 17:14 - 2014-03-24 16:42 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-05-15 08:23 - 2014-05-15 08:23 - 00994160 _____ () C:\Users\Ankhang\Downloads\setup.exe 2014-05-14 20:24 - 2014-02-19 17:51 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-14 20:24 - 2014-02-19 17:51 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-14 20:24 - 2014-02-19 17:51 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-13 20:37 - 2014-05-01 00:40 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-13 20:03 - 2014-02-16 22:03 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-13 20:02 - 2014-02-16 22:03 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-13 18:41 - 2014-02-19 17:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Adobe 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NCSOFT 2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NCSOFT 2014-05-12 16:28 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\IePluginService 2014-05-12 16:27 - 2014-05-12 16:26 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SupTab 2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\WPM 2014-05-12 16:26 - 2014-05-12 16:25 - 00000000 ____D () C:\Users\Ankhang\Downloads\Wildstar 2014-05-12 16:26 - 2014-02-16 19:40 - 00001635 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Files to move or delete: ==================== C:\ProgramData\SMRResults410.dat ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-05-09 06:51 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-06-2014 Ran by Ankhang at 2014-06-11 13:04:05 Running from C:\Users\Ankhang\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Norton 360 Online (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB} AS: Norton 360 Online (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton 360 Online (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0} ==================== Installed Programs ====================== 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated) Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB) Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.347.0 - Microsoft Corporation) Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve) Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts) Dragon Age™ II (HKLM-x32\...\{E1EB9F56-AFE2-4204-B28F-AD8DA793B9F4}) (Version: 1.04.8524.0 - Electronic Arts) Internet Explorer (Enable DEP) (HKLM\...\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb) (Version: - ) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Small Business Edition 2003 (HKLM-x32\...\{91CA0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MKLOL (HKCU\...\MKLOL) (Version: - ) Norton 360 (HKLM-x32\...\N360) (Version: 21.3.0.12 - Symantec Corporation) NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation) NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden NVIDIA PhysX (HKLM-x32\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden Opera Stable 22.0.1471.50 (HKLM-x32\...\Opera 22.0.1471.50) (Version: 22.0.1471.50 - Opera Software ASA) Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.) Pointofix (HKLM-x32\...\Pointofix_is1) (Version: - Amerigomedia) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts) Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH) The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) WPM18.8.0.304 (HKLM-x32\...\WPM) (Version: 18.8.0.304 - Cherished Technololgy LIMITED) <==== ATTENTION ==================== Restore Points ========================= 07-06-2014 17:01:04 DirectX wurde installiert 09-06-2014 13:05:56 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {43E67C9A-557E-4E5B-A808-79F9B8BCE1C1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated) Task: {985EBFEE-C4E0-4265-9F16-55908D468A89} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {A87828C2-F008-44AE-86D9-66C975704767} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation) Task: {C6245414-7C62-4989-9F52-CAF330FF2C67} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {C96F1BA6-3444-432A-9549-DABE511AC317} - System32\Tasks\{D65FF839-151E-45D9-BB4F-8F8B982E3852} => C:\Program Files (x86)\Skype\Phone\Skype.exe Task: {E2821676-D67F-46C1-AC1A-FD2225325605} - System32\Tasks\Opera scheduled Autoupdate 1399999089 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-27] (Opera Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2014-02-16 22:12 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-06-03 15:49 - 2014-06-03 15:49 - 01396344 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe 2014-06-04 09:05 - 2014-06-04 09:05 - 00598072 _____ () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe 2014-06-03 15:49 - 2014-06-03 15:48 - 00877176 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\libglesv2.dll 2014-06-03 15:49 - 2014-06-03 15:48 - 00135800 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\libegl.dll 2014-06-03 15:49 - 2014-06-03 15:48 - 00957048 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\ffmpegsumo.dll 2014-06-04 09:05 - 2014-06-04 09:05 - 36966968 _____ () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\libcef.dll 2014-06-04 09:05 - 2014-06-04 09:05 - 00886840 _____ () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\libglesv2.dll 2014-06-04 09:05 - 2014-06-04 09:05 - 00108600 _____ () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\libegl.dll 2014-05-13 18:41 - 2014-05-13 18:41 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: L:\ Description: SM/xD-Picture Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a} Manufacturer: Generic Service: WUDFRd Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. Name: J:\ Description: microSD Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a} Manufacturer: Generic Service: WUDFRd Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. Name: K:\ Description: MS/MS-PRO Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a} Manufacturer: Generic Service: WUDFRd Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. Name: I:\ Description: SD/MMC Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a} Manufacturer: Generic Service: WUDFRd Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. Name: Microsoft PS/2-Maus Description: Microsoft PS/2-Maus Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (06/11/2014 00:59:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SpotifyHelper.exe, Version: 0.0.0.0, Zeitstempel: 0x53709048 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x009cfba0 ID des fehlerhaften Prozesses: 0x12a4 Startzeit der fehlerhaften Anwendung: 0xSpotifyHelper.exe0 Pfad der fehlerhaften Anwendung: SpotifyHelper.exe1 Pfad des fehlerhaften Moduls: SpotifyHelper.exe2 Berichtskennung: SpotifyHelper.exe3 Error: (06/11/2014 11:31:07 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000003fefeb33480 ID des fehlerhaften Prozesses: 0xeb0 Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0 Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1 Pfad des fehlerhaften Moduls: TrustedInstaller.exe2 Berichtskennung: TrustedInstaller.exe3 Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=3800} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (06/11/2014 11:21:32 AM) (Source: ESENT) (EventID: 474) (User: ) Description: Windows (2144) Windows: Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 22970368 (0x00000000015e8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [29cd29cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1], die tatsächliche Prüfsumme [11cd11cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller. Error: (06/11/2014 11:17:05 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/11/2014 11:13:38 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001d821 ID des fehlerhaften Prozesses: 0xb34 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 Error: (06/11/2014 11:13:36 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0015e235 ID des fehlerhaften Prozesses: 0xb34 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 Error: (06/11/2014 11:12:56 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001d821 ID des fehlerhaften Prozesses: 0x914 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 Error: (06/11/2014 11:12:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0015e235 ID des fehlerhaften Prozesses: 0x914 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 System errors: ============= Error: (06/11/2014 11:31:11 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts. Error: (06/11/2014 11:16:43 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/11/2014 11:14:20 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (06/11/2014 10:37:26 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/11/2014 10:35:15 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (06/11/2014 10:33:09 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/11/2014 10:31:30 AM) (Source: BugCheck) (EventID: 1001) (User: ) Description: 0x0000001a (0x0000000000005003, 0xfffff70001080000, 0x00000000000029d5, 0x0000000001294069)C:\Windows\MEMORY.DMP061114-24008-01 Error: (06/11/2014 10:31:29 AM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 11.06.2014 um 10:29:44 unerwartet heruntergefahren. Error: (06/11/2014 10:29:07 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/11/2014 10:25:48 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Microsoft Office Sessions: ========================= Error: (06/11/2014 00:59:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: SpotifyHelper.exe0.0.0.053709048unknown0.0.0.000000000c0000005009cfba012a401cf8562135dbc6bC:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exeunknown6495528a-f157-11e3-8b77-002511a293a5 Error: (06/11/2014 11:31:07 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: TrustedInstaller.exe6.1.7601.175144ce7989bunknown0.0.0.000000000c0000005000003fefeb33480eb001cf85566749cf5dC:\Windows\servicing\TrustedInstaller.exeunknown1d0b485e-f14b-11e3-8b77-002511a293a5 Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) The catalog is corrupt Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) 3800 Error: (06/11/2014 11:21:32 AM) (Source: ESENT) (EventID: 474) (User: ) Description: Windows2144Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb22970368 (0x00000000015e8000)32768 (0x00008000)-1018 (0xfffffc06)[29cd29cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1][11cd11cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1]700 (0x2BC) Error: (06/11/2014 11:17:05 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/11/2014 11:13:38 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d821b3401cf855556fdf305C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLLab9937b7-f148-11e3-897e-002511a293a5 Error: (06/11/2014 11:13:36 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819SporeApp.exe1.1.0.3384897d819c00000050015e235b3401cf855556fdf305C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\SporeApp.exeaa6769fc-f148-11e3-897e-002511a293a5 Error: (06/11/2014 11:12:56 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d82191401cf85553c708c93C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLL92997da8-f148-11e3-897e-002511a293a5 Error: (06/11/2014 11:12:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819SporeApp.exe1.1.0.3384897d819c00000050015e23591401cf85553c708c93C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\SporeApp.exe8fc9d85f-f148-11e3-897e-002511a293a5 CodeIntegrity Errors: =================================== Date: 2014-05-08 20:58:05.725 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:58:05.665 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:59.459 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:59.334 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:53.156 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:53.032 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:46.760 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:46.698 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:40.524 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:40.478 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 28% Total physical RAM: 8191.14 MB Available physical RAM: 5870.09 MB Total Pagefile: 16380.46 MB Available Pagefile: 13823.63 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:456.26 GB) (Free:311.04 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (VOLUME) (Fixed) (Total:18.55 GB) (Free:1.97 GB) NTFS Drive e: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS Drive f: () (Fixed) (Total:456.6 GB) (Free:456.44 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: B200EA93) Partition 1: (Not Active) - (Size=19 GB) - (Type=OF Extended) Partition 2: (Not Active) - (Size=99 MB) - (Type=07 NTFS) Partition 3: (Active) - (Size=456 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
11.06.2014, 13:09 | #6 |
/// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Servus, wir beginnen erst mal so: Scan mit Combofix
|
11.06.2014, 14:30 | #7 |
| Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hi, Ich habe Combofix heruntergeladen und auf den Desktop gezogen. Nachdem ich meine Antivirensoftware deaktiviert habe, führte ich Combofix aus. Es kam die Meldung, das meine Antivirensoftware immer noch aktiv war. Während Combofix lief, bekam ich dreimal die Meldung "grep.3XE funktioniert nicht mehr" und einmal "pev.3XE funktioniert nicht mehr" (Ich habe die Maus bewegt, um diese Meldungen zu schließen). Nachdem Combofix fertig war und die Log Datei erstellte, startete ich den PC neu. Während der Rechner lange brauchte, um herunterzufahren, bekam ich ein Bluescreen und der Computer fuhr daraufhin neu hoch. Code:
ATTFilter ComboFix 14-06-10.01 - Ankhang 11.06.2014 14:46:10.1.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8191.6136 [GMT 2:00] ausgeführt von:: c:\users\Ankhang\Desktop\ComboFix.exe AV: Norton 360 Online *Disabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB} FW: Norton 360 Online *Disabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0} SP: Norton 360 Online *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((( Dateien erstellt von 2014-05-11 bis 2014-06-11 )))))))))))))))))))))))))))))) . . 2014-06-11 12:56 . 2014-06-11 12:56 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2014-06-11 12:56 . 2014-06-11 12:56 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-06-11 09:44 . 2014-06-11 11:04 -------- d-----w- C:\FRST 2014-06-11 08:25 . 2014-06-11 08:25 96856 ----a-w- c:\windows\system32\drivers\SMR410.SYS 2014-06-09 13:06 . 2014-05-19 23:18 10702536 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3E17EA1B-F0E6-4377-A1B8-09F436528A85}\mpengine.dll 2014-06-07 20:27 . 2014-06-07 20:27 -------- d-----w- c:\users\Ankhang\AppData\Roaming\SPORE 2014-06-07 20:26 . 2014-06-07 20:26 -------- d--h--r- c:\users\Ankhang\AppData\Roaming\SecuROM 2014-06-07 16:30 . 2014-06-07 16:30 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information 2014-06-06 09:41 . 2014-06-06 09:41 -------- d-----w- c:\users\Ankhang\AppData\Local\BigHugeEngine 2014-06-05 06:09 . 2014-06-05 06:09 -------- d-----w- c:\program files (x86)\Common Files\Skype 2014-06-04 13:22 . 2014-06-04 13:22 -------- d-----w- c:\users\Ankhang\AppData\Local\Ubisoft 2014-06-04 07:33 . 2014-06-04 07:36 -------- d-----w- c:\users\Ankhang\AppData\Roaming\vlc 2014-06-04 07:31 . 2014-06-04 07:31 -------- d-----w- c:\program files (x86)\VideoLAN 2014-06-04 07:05 . 2014-06-06 08:23 -------- d-----w- c:\users\Ankhang\AppData\Local\Spotify 2014-06-04 07:04 . 2014-06-11 12:11 -------- d-----w- c:\users\Ankhang\AppData\Roaming\Spotify 2014-06-03 21:01 . 2014-06-03 21:16 -------- d-----w- c:\users\Ankhang\AppData\Local\Skyrim 2014-06-03 20:13 . 2014-06-03 21:06 -------- d-----w- c:\program files (x86)\Common Files\Steam 2014-06-03 08:55 . 2014-06-09 13:03 -------- d-----w- c:\program files (x86)\SEGA 2014-06-02 16:22 . 2014-06-02 16:22 -------- d-----w- C:\Downloads 2014-06-02 16:22 . 2014-06-02 16:22 -------- d-----w- c:\users\Ankhang\AppData\Roaming\BitComet 2014-05-31 15:17 . 2014-06-02 10:16 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2014-05-31 15:17 . 2014-05-31 15:17 -------- d-----w- c:\users\Ankhang\AppData\Local\PunkBuster 2014-05-31 15:16 . 2014-05-31 15:16 -------- d-----w- c:\users\Ankhang\AppData\Local\ESN 2014-05-31 15:16 . 2014-05-31 15:16 -------- d-----w- c:\program files (x86)\Battlelog Web Plugins 2014-05-31 15:12 . 2014-05-31 15:12 -------- d-----w- c:\programdata\EA Core 2014-05-31 15:12 . 2014-05-31 15:19 -------- d-----w- c:\programdata\EA Logs 2014-05-31 15:07 . 2014-06-07 17:03 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller 2014-05-31 14:00 . 2014-06-09 13:04 -------- d-----w- C:\Spiele 2014-05-31 13:56 . 2014-06-01 12:08 -------- d-----w- c:\users\Ankhang\AppData\Roaming\Origin 2014-05-31 13:56 . 2014-05-31 15:12 -------- d-----w- c:\users\Ankhang\AppData\Local\Origin 2014-05-31 13:54 . 2014-06-10 19:13 -------- d-----w- c:\programdata\Origin 2014-05-31 13:54 . 2014-05-31 15:12 -------- d-----w- c:\programdata\Electronic Arts 2014-05-19 12:56 . 2014-06-06 06:49 -------- d-----w- c:\windows\system32\drivers\N360x64\1503000.00C 2014-05-18 08:30 . 2014-05-18 08:30 -------- d-----w- C:\IePluginService 2014-05-13 18:04 . 2014-05-06 04:40 23544320 ----a-w- c:\windows\system32\mshtml.dll 2014-05-13 18:04 . 2014-05-06 03:00 84992 ----a-w- c:\windows\system32\mshtmled.dll 2014-05-13 18:04 . 2014-05-06 04:17 2724864 ----a-w- c:\windows\system32\mshtml.tlb 2014-05-13 18:04 . 2014-05-06 03:07 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb 2014-05-13 17:58 . 2014-03-25 02:43 14175744 ----a-w- c:\windows\system32\shell32.dll 2014-05-13 17:58 . 2014-05-09 06:14 477184 ----a-w- c:\windows\system32\aepdu.dll 2014-05-13 17:58 . 2014-05-09 06:11 424448 ----a-w- c:\windows\system32\aeinv.dll 2014-05-12 14:29 . 2014-05-12 14:29 -------- d-----w- c:\users\Ankhang\AppData\Roaming\NCSOFT 2014-05-12 14:29 . 2014-05-12 14:29 -------- d-----w- c:\users\Ankhang\AppData\Local\NCSOFT 2014-05-12 14:26 . 2014-05-12 14:28 -------- d-----w- c:\programdata\IePluginService 2014-05-12 14:26 . 2014-05-12 14:27 -------- d-----w- c:\program files (x86)\SupTab 2014-05-12 14:26 . 2014-05-12 14:26 -------- d-----w- c:\users\Ankhang\AppData\Roaming\SupTab 2014-05-12 14:26 . 2014-05-12 14:26 -------- d-----w- c:\programdata\WPM 2014-05-12 14:23 . 2014-06-06 19:35 -------- d-----w- c:\users\Ankhang\AppData\Roaming\NVIDIA . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-05-22 14:22 . 2009-07-13 23:59 141824 ----a-w- c:\windows\system32\msdtc.exe 2014-05-14 18:24 . 2014-02-19 15:51 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-05-14 18:24 . 2014-02-19 15:51 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-05-13 18:02 . 2014-02-16 20:03 93223848 ----a-w- c:\windows\system32\MRT.exe 2014-03-31 07:35 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe 2014-03-20 21:03 . 2014-02-16 20:11 62408 ----a-w- c:\windows\system32\OpenCL.dll 2014-03-20 21:03 . 2014-02-16 20:11 54216 ----a-w- c:\windows\SysWow64\OpenCL.dll 2014-03-20 21:03 . 2014-03-20 21:03 15783992 ----a-w- c:\windows\SysWow64\nvwgf2um.dll 2014-03-20 21:03 . 2013-10-27 08:12 18302384 ----a-w- c:\windows\system32\nvwgf2umx.dll 2014-03-20 21:03 . 2014-03-20 21:03 832936 ----a-w- c:\windows\SysWow64\nvumdshim.dll 2014-03-20 21:03 . 2013-10-27 08:12 947808 ----a-w- c:\windows\system32\nvumdshimx.dll 2014-03-20 21:03 . 2014-03-20 21:03 9690424 ----a-w- c:\windows\SysWow64\nvopencl.dll 2014-03-20 21:03 . 2014-03-20 21:03 11589272 ----a-w- c:\windows\system32\nvopencl.dll 2014-03-20 21:02 . 2014-03-20 21:02 31474976 ----a-w- c:\windows\system32\nvoglv64.dll 2014-03-20 21:02 . 2014-03-20 21:02 353504 ----a-w- c:\windows\system32\nvoglshim64.dll 2014-03-20 21:02 . 2014-03-20 21:02 305600 ----a-w- c:\windows\SysWow64\nvoglshim32.dll 2014-03-20 21:02 . 2014-03-20 21:02 23716640 ----a-w- c:\windows\SysWow64\nvoglv32.dll 2014-03-20 21:02 . 2014-03-20 21:02 12708128 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys 2014-03-20 21:02 . 2014-03-20 21:02 892704 ----a-w- c:\windows\system32\NvIFR64.dll 2014-03-20 21:02 . 2014-03-20 21:02 863064 ----a-w- c:\windows\SysWow64\NvIFR.dll 2014-03-20 21:02 . 2014-03-20 21:02 174296 ----a-w- c:\windows\system32\nvinitx.dll 2014-03-20 21:02 . 2014-03-20 21:02 148016 ----a-w- c:\windows\SysWow64\nvinit.dll 2014-03-20 21:02 . 2014-03-20 21:02 877856 ----a-w- c:\windows\system32\NvFBC64.dll 2014-03-20 21:02 . 2014-03-20 21:02 846168 ----a-w- c:\windows\SysWow64\NvFBC.dll 2014-03-20 21:02 . 2014-03-20 21:02 1885472 ----a-w- c:\windows\system32\nvdispco6433523.dll 2014-03-20 21:02 . 2014-03-20 21:02 1516488 ----a-w- c:\windows\system32\nvdispgenco6433523.dll 2014-03-20 21:02 . 2014-03-20 21:02 3143456 ----a-w- c:\windows\system32\nvcuvid.dll 2014-03-20 21:02 . 2014-03-20 21:02 17755424 ----a-w- c:\windows\system32\nvd3dumx.dll 2014-03-20 21:02 . 2014-03-20 21:02 14709720 ----a-w- c:\windows\SysWow64\nvd3dum.dll 2014-03-20 21:02 . 2014-03-20 21:02 9728064 ----a-w- c:\windows\SysWow64\nvcuda.dll 2014-03-20 21:02 . 2014-03-20 21:02 2958792 ----a-w- c:\windows\SysWow64\nvcuvid.dll 2014-03-20 21:02 . 2014-03-20 21:02 2783008 ----a-w- c:\windows\system32\nvcuvenc.dll 2014-03-20 21:02 . 2014-03-20 21:02 2411976 ----a-w- c:\windows\SysWow64\nvcuvenc.dll 2014-03-20 21:02 . 2014-03-20 21:02 11636176 ----a-w- c:\windows\system32\nvcuda.dll 2014-03-20 21:02 . 2014-03-20 21:02 17561544 ----a-w- c:\windows\SysWow64\nvcompiler.dll 2014-03-20 21:02 . 2014-03-20 21:02 25255256 ----a-w- c:\windows\system32\nvcompiler.dll 2014-03-20 21:02 . 2013-10-27 08:12 3093280 ----a-w- c:\windows\system32\nvapi64.dll 2014-03-20 21:02 . 2014-03-20 21:02 2715264 ----a-w- c:\windows\SysWow64\nvapi.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}] 2014-04-11 02:05 513648 ----a-w- c:\program files (x86)\SupTab\SupTab.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="c:\users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-06-04 1176632] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "BingDesktop"="c:\program files (x86)\Microsoft\BingDesktop\BingDesktop.exe" [2013-11-01 2353880] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;d:\khang hoang\Skype\Updater\Updater.exe;d:\khang hoang\Skype\Updater\Updater.exe [x] R3 1394hub;1394 Enabled Hub;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x] R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys;c:\windows\SYSNATIVE\drivers\nusb3hub.sys [x] R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys;c:\windows\SYSNATIVE\drivers\nusb3xhc.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] S0 SMR410;Symantec SMR Utility Service 4.1.0;c:\windows\System32\drivers\SMR410.SYS;c:\windows\SYSNATIVE\drivers\SMR410.SYS [x] S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1503000.00C\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1503000.00C\SYMDS64.SYS [x] S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1503000.00C\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1503000.00C\SYMEFA64.SYS [x] S1 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140606.001\BHDrvx64.sys;c:\program files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140606.001\BHDrvx64.sys [x] S1 ccSet_N360;N360 Settings Manager;c:\windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\N360x64\1503000.00C\ccSetx64.sys [x] S1 IDSVia64;IDSVia64;c:\program files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140610.001\IDSvia64.sys;c:\program files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140610.001\IDSvia64.sys [x] S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1503000.00C\Ironx64.SYS [x] S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\N360x64\1503000.00C\SYMNETS.SYS [x] S2 BingDesktopUpdate;Bing Desktop Update service;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [x] S2 IePluginService;IePlugin Service;c:\programdata\IePluginService\PluginService.exe;c:\programdata\IePluginService\PluginService.exe [x] S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\21.3.0.12\N360.exe;c:\program files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S2 Wpm;Wpm Service;c:\programdata\WPM\wprotectmanager.exe;c:\programdata\WPM\wprotectmanager.exe [x] S3 e1yexpress;Intel(R) Gigabit-Netzwerkverbindungstreiber;c:\windows\system32\DRIVERS\e1y60x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1y60x64.sys [x] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x] S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192su.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - UXRIQFOW *Deregistered* - uxriqfow . Inhalt des "geplante Tasks" Ordners . 2014-06-11 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-19 18:24] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-03-20 1797064] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://9gag.com/ mDefault_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} mDefault_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665 mStart Page = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665 mLocal Page = c:\windows\SysWOW64\blank.htm mSearch Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms} TCP: DhcpNameServer = 192.168.2.1 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start AddRemove-MKLOL - d:\khang hoang\Neuer Ordner\MKJogo\MKLOL\MKuInst.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360] "ImagePath"="\"c:\program files (x86)\Norton 360\Engine\21.3.0.12\N360.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\21.3.0.12\diMaster.dll\" /prefetch:1" "ImagePath"="\SystemRoot\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS" "TrustedImagePaths"="c:\program files (x86)\Norton 360\Engine\21.3.0.12;c:\program files (x86)\Norton 360\Engine64\21.3.0.12" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-802949540-198687548-912749210-1000\Software\SecuROM\License information*] "datasecu"=hex:25,51,aa,67,77,e6,50,e5,b6,73,04,8d,42,3c,cd,f4,84,d0,3f,5c,1d, 9a,ee,6a,93,bb,90,13,38,c2,d2,b8,76,2f,0f,8e,69,a6,25,2d,e9,73,f8,4a,5b,03,\ "rkeysecu"=hex:cb,bd,f2,61,5a,4e,c6,95,f2,29,8b,82,ba,6b,3d,44 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.13" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2014-06-11 15:06:38 ComboFix-quarantined-files.txt 2014-06-11 13:06 . Vor Suchlauf: 15 Verzeichnis(se), 332.810.182.656 Bytes frei Nach Suchlauf: 18 Verzeichnis(se), 332.806.844.416 Bytes frei . - - End Of File - - 84B669412323C57288B8BE7EC0AD6555 A36C5E4F47E84449FF07ED3517B43A31 |
12.06.2014, 09:07 | #8 |
/// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Schritt 1 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte Malwarebytes Anti-Malware
Schritt 3 Bitte deaktiviere dein Anti-Viren-Programm, da es das Ergebnis beeinflussen oder ggf. die Bereinigung stören kann. Bitte lade dir zoek.exe von hier: http://hijackthis.nl/smeenk/ und speichere die Datei auf deinem Desktop.
Schritt 4
Bitte poste mit deiner nächsten Antwort
|
12.06.2014, 10:40 | #9 |
| Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hier die angeforderten Log Dateien: AdwCleaner: Code:
ATTFilter # AdwCleaner v3.212 - Bericht erstellt am 12/06/2014 um 10:53:36 # Aktualisiert 05/06/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Ankhang - ANKHANG-PC # Gestartet von : C:\Users\Ankhang\Desktop\adwcleaner_3.212.exe # Option : Löschen ***** [ Dienste ] ***** Dienst Gelöscht : IePluginService Dienst Gelöscht : Wpm ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\IePluginService Ordner Gelöscht : C:\ProgramData\IePluginService Ordner Gelöscht : C:\ProgramData\WPM Ordner Gelöscht : C:\Program Files (x86)\SupTab Ordner Gelöscht : C:\Users\Ankhang\AppData\Roaming\SupTab ***** [ Verknüpfungen ] ***** Verknüpfung Desinfiziert : C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Verknüpfung Desinfiziert : C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk Verknüpfung Desinfiziert : C:\Users\Ankhang\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Schlüssel Gelöscht : HKLM\Software\SupTab Schlüssel Gelöscht : HKLM\Software\supWPM Schlüssel Gelöscht : HKLM\Software\sweet-pageSoftware Schlüssel Gelöscht : HKLM\Software\Wpm Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wpm ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17041 Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] ************************* AdwCleaner[R0].txt - [3871 octets] - [12/06/2014 10:53:02] AdwCleaner[S0].txt - [2829 octets] - [12/06/2014 10:53:36] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2889 octets] ########## Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 12.06.2014 Suchlauf-Zeit: 11:02:58 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.06.12.04 Rootkit Datenbank: v2014.06.02.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Ankhang Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 311676 Verstrichene Zeit: 5 Min, 48 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 1 PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[eea6aacd205b3cfad8c296dd3dc72bd5] Ordner: 0 (No malicious items detected) Dateien: 1 PUP.Optional.OutBrowse, C:\Users\Ankhang\Downloads\setup.exe, In Quarantäne, [f3a165127b007eb8799dc8b5f20f29d7], Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter Zoek.exe v5.0.0.0 Updated 02-June-2014 Tool run by Ankhang on 12.06.2014 at 11:18:00,72. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Ankhang\Desktop\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 12.06.2014 11:19:08 Zoek.exe System Restore Point Created Succesfully. ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-802949540-198687548-912749210-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} deleted successfully HKEY_USERS\S-1-5-21-802949540-198687548-912749210-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\PROGRA~3\SMRResults410.dat deleted C:\Windows\SysWow64\AI_RecycleBin deleted "C:\Users\Ankhang\AppData\Roaming\mresreg" deleted ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "{BBDA0591-3099-440a-AA10-41764D9DB4DB}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF" [18.03.2014 17:57] ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\Exts\Chrome.crx[28.04.2014 14:52] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="hxxp://9gag.com/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Search_URL"="hxxp://www.google.com" "Default_Page_URL"="hxxp://www.google.com" "Start Page"="hxxp://www.google.com" "Search Page"="hxxp://www.google.com" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Default_Search_URL"="hxxp://www.google.com" "Default_Page_URL"="hxxp://www.google.com" "Start Page"="hxxp://www.google.com" "Search Page"="hxxp://www.google.com" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] No DefaultScope Set For HKCU New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="hxxp://9gag.com/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" "Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" "Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Reset Google Chrome ====================== Nothing found to reset ==== Reset IE Proxy ====================== Value(s) before fix: "ProxyEnable"=dword:00000000 Value(s) after fix: "ProxyEnable"=dword:00000000 ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Ankhang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Ankhang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== No Chrome User Data found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== No Java Cache Found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=2 folders=13 1773 bytes) ==== Empty Temp Folders ====================== C:\Users\Ankhang\AppData\Local\Temp will be emptied at reboot C:\Users\Default\AppData\Local\temp emptied successfully C:\Users\Default User\AppData\Local\temp emptied successfully C:\Users\dub_cm_auto\AppData\Local\temp emptied successfully C:\Users\Public\AppData\Local\temp emptied successfully C:\Users\UpdatusUser\AppData\Local\temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Ankhang\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on 12.06.2014 at 11:29:27,53 ====================== FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-06-2014 Ran by Ankhang (administrator) on ANKHANG-PC on 12-06-2014 11:30:40 Running from C:\Users\Ankhang\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe (Skype Technologies) D:\Khang Hoang\Skype\Updater\Updater.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Spotify Ltd) C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation) HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2353880 2013-11-01] (Microsoft Corp.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) HKU\S-1-5-21-802949540-198687548-912749210-1000\...\Run: [Spotify Web Helper] => C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-04] (Spotify Ltd) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://9gag.com/ StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation) BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\ [] FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF [2014-02-17] ==================== Services (Whitelisted) ================= R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.) R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [265040 2014-05-11] (Symantec Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-05-31] () R2 SkypeUpdate; D:\Khang Hoang\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies) ==================== Drivers (Whitelisted) ==================== S3 1394hub; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140606.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-11] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-11] (Symantec Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140611.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation) S3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140611.032\ENG64.SYS [126040 2014-06-12] (Symantec Corporation) S3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140611.032\EX64.SYS [2099288 2014-06-12] (Symantec Corporation) S3 SRTSP; C:\Windows\System32\Drivers\N360x64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1503000.00C\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-16] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-12 11:27 - 2014-06-12 11:31 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Temp 2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\temp 2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Public\AppData\Local\temp 2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\dub_cm_auto\AppData\Local\temp 2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Default\AppData\Local\temp 2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp 2014-06-12 11:27 - 2014-06-12 11:17 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-06-12 11:18 - 2014-06-12 11:29 - 00006396 _____ () C:\zoek-results.log 2014-06-12 11:17 - 2014-06-12 11:26 - 00000000 ____D () C:\zoek_backup 2014-06-12 11:00 - 2014-06-12 11:00 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-12 11:00 - 2014-06-12 11:00 - 00001098 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-12 11:00 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-06-12 11:00 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-06-12 11:00 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-06-12 10:52 - 2014-06-12 10:53 - 00000000 ____D () C:\AdwCleaner 2014-06-12 10:38 - 2014-06-12 10:38 - 01285120 _____ () C:\Users\Ankhang\Desktop\zoek.exe 2014-06-12 10:21 - 2014-06-12 10:21 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Ankhang\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-12 10:20 - 2014-06-12 10:20 - 01333465 _____ () C:\Users\Ankhang\Desktop\adwcleaner_3.212.exe 2014-06-11 21:02 - 2014-06-11 21:02 - 00291896 _____ () C:\Windows\Minidump\061114-32432-01.dmp 2014-06-11 16:26 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-11 16:26 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-11 16:26 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-06-11 16:26 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-06-11 15:19 - 2014-06-11 15:19 - 00536528 _____ () C:\Windows\Minidump\061114-25833-01.dmp 2014-06-11 15:06 - 2014-06-11 15:06 - 00020982 _____ () C:\Users\Ankhang\Desktop\ComboFix.txt 2014-06-11 14:19 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-06-11 14:19 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-06-11 14:19 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-06-11 14:19 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-06-11 14:19 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-06-11 14:19 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-06-11 14:19 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-06-11 14:19 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-06-11 14:15 - 2014-06-11 15:07 - 00000000 ____D () C:\Qoobox 2014-06-11 14:14 - 2014-06-11 15:03 - 00000000 ____D () C:\Windows\erdnt 2014-06-11 14:10 - 2014-06-11 14:10 - 05205915 ____R (Swearware) C:\Users\Ankhang\Desktop\ComboFix.exe 2014-06-11 12:26 - 2014-06-11 12:31 - 00001283 _____ () C:\Users\Ankhang\Desktop\trojanerboard.txt 2014-06-11 12:01 - 2014-06-11 12:01 - 00012682 _____ () C:\Users\Ankhang\Desktop\gmer.log 2014-06-11 11:47 - 2014-06-11 11:47 - 00380416 _____ () C:\Users\Ankhang\Desktop\Gmer-19357.exe 2014-06-11 11:45 - 2014-06-11 13:04 - 00030040 _____ () C:\Users\Ankhang\Desktop\Addition.txt 2014-06-11 11:44 - 2014-06-12 11:31 - 00009837 _____ () C:\Users\Ankhang\Desktop\FRST.txt 2014-06-11 11:44 - 2014-06-12 11:30 - 00000000 ____D () C:\FRST 2014-06-11 11:43 - 2014-06-11 11:43 - 02081792 _____ (Farbar) C:\Users\Ankhang\Desktop\FRST64.exe 2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule 2014-06-11 11:40 - 2014-06-11 12:54 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard 2014-06-11 11:40 - 2014-06-11 12:52 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins 2014-06-11 11:39 - 2014-06-11 11:39 - 00000476 _____ () C:\Users\Ankhang\Desktop\defogger_disable.log 2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable 2014-06-11 11:38 - 2014-06-11 11:38 - 00050477 _____ () C:\Users\Ankhang\Desktop\Defogger.exe 2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp 2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp 2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE 2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM 2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk 2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk 2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-06-06 12:03 - 2014-06-10 21:17 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk 2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine 2014-06-06 11:19 - 2014-06-06 12:03 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare 2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk 2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft 2014-06-04 09:33 - 2014-06-04 09:36 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc 2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-06-04 09:05 - 2014-06-06 10:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify 2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk 2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-06-04 09:04 - 2014-06-11 18:57 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify 2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url 2014-06-03 23:01 - 2014-06-03 23:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim 2014-06-03 22:56 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\Documents\my games 2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089 2014-06-03 10:55 - 2014-06-09 15:03 - 00000000 ____D () C:\Program Files (x86)\SEGA 2014-06-03 09:41 - 2014-06-03 11:00 - 00000360 _____ () C:\console.log 2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk 2014-06-02 22:17 - 2014-06-03 11:04 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA 2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet 2014-06-02 18:00 - 2014-06-02 18:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite 2014-05-31 17:17 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins 2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe 2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core 2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk 2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3 2014-05-31 17:06 - 2014-06-07 19:02 - 00115581 _____ () C:\Windows\DirectX.log 2014-05-31 17:06 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-05-31 17:06 - 2014-06-01 14:25 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-05-31 17:06 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2014-05-31 17:06 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-05-31 17:06 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2014-05-31 17:06 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2014-05-31 17:06 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2014-05-31 17:06 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2014-05-31 17:06 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2014-05-31 17:06 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2014-05-31 17:06 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2014-05-31 17:06 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2014-05-31 17:06 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2014-05-31 17:06 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2014-05-31 17:06 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2014-05-31 17:06 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2014-05-31 17:06 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2014-05-31 17:06 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2014-05-31 17:06 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2014-05-31 17:06 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2014-05-31 17:06 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2014-05-31 17:06 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2014-05-31 17:06 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2014-05-31 17:06 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2014-05-31 17:06 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2014-05-31 17:06 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2014-05-31 17:06 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2014-05-31 17:06 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2014-05-31 17:06 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2014-05-31 17:06 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2014-05-31 17:06 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2014-05-31 17:06 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2014-05-31 17:06 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2014-05-31 17:06 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2014-05-31 17:06 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2014-05-31 17:06 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2014-05-31 17:06 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2014-05-31 17:06 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2014-05-31 17:06 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2014-05-31 17:06 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2014-05-31 17:06 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2014-05-31 17:06 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2014-05-31 17:06 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2014-05-31 17:06 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2014-05-31 17:06 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2014-05-31 17:06 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2014-05-31 17:06 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2014-05-31 17:06 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2014-05-31 17:06 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2014-05-31 17:06 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2014-05-31 17:06 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2014-05-31 17:06 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2014-05-31 17:06 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2014-05-31 17:06 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2014-05-31 17:06 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2014-05-31 17:06 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2014-05-31 17:06 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2014-05-31 17:06 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2014-05-31 17:06 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2014-05-31 17:06 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2014-05-31 17:06 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2014-05-31 17:06 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2014-05-31 17:06 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2014-05-31 17:06 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2014-05-31 17:06 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2014-05-31 17:06 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2014-05-31 17:06 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2014-05-31 17:06 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2014-05-31 17:06 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2014-05-31 17:06 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2014-05-31 17:06 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2014-05-31 17:06 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2014-05-31 17:06 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2014-05-31 17:06 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2014-05-31 17:06 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2014-05-31 17:06 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2014-05-31 17:06 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2014-05-31 17:06 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2014-05-31 17:06 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2014-05-31 17:06 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2014-05-31 17:06 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2014-05-31 17:06 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2014-05-31 17:06 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2014-05-31 17:06 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2014-05-31 17:06 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2014-05-31 17:06 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2014-05-31 17:06 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2014-05-31 17:06 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2014-05-31 17:06 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2014-05-31 17:06 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2014-05-31 17:06 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2014-05-31 17:06 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2014-05-31 17:06 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2014-05-31 17:06 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2014-05-31 17:06 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2014-05-31 17:06 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2014-05-31 16:00 - 2014-06-09 15:04 - 00000000 ____D () C:\Spiele 2014-05-31 15:56 - 2014-06-01 14:08 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin 2014-05-31 15:56 - 2014-05-31 17:12 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin 2014-05-31 15:54 - 2014-06-10 21:13 - 00000000 ____D () C:\ProgramData\Origin 2014-05-31 15:54 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\Electronic Arts 2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk 2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp 2014-05-23 18:25 - 2014-05-31 10:31 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk 2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10} 2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360 2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp 2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp 2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp 2014-05-13 20:04 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-13 20:04 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-13 20:04 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-13 20:04 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-13 20:04 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-13 20:04 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-13 19:59 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-13 19:59 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-13 19:59 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-13 19:59 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-13 19:59 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-13 19:59 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-13 19:59 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-13 19:59 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-13 19:59 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-13 19:59 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-13 19:59 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-13 19:59 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-13 19:59 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-13 19:59 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-13 19:59 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-13 19:59 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-13 19:59 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-13 19:59 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-13 19:59 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-13 19:58 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-13 19:58 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk ==================== One Month Modified Files and Folders ======= 2014-06-12 11:31 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Temp 2014-06-12 11:31 - 2014-06-11 11:44 - 00009837 _____ () C:\Users\Ankhang\Desktop\FRST.txt 2014-06-12 11:30 - 2014-06-11 11:44 - 00000000 ____D () C:\FRST 2014-06-12 11:29 - 2014-06-12 11:18 - 00006396 _____ () C:\zoek-results.log 2014-06-12 11:29 - 2014-02-16 22:12 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-06-12 11:29 - 2010-11-21 05:47 - 00103574 _____ () C:\Windows\PFRO.log 2014-06-12 11:29 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-12 11:29 - 2009-07-14 06:51 - 00059250 _____ () C:\Windows\setupact.log 2014-06-12 11:28 - 2014-02-16 19:34 - 01954375 _____ () C:\Windows\WindowsUpdate.log 2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\temp 2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Public\AppData\Local\temp 2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\dub_cm_auto\AppData\Local\temp 2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Default\AppData\Local\temp 2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp 2014-06-12 11:26 - 2014-06-12 11:17 - 00000000 ____D () C:\zoek_backup 2014-06-12 11:24 - 2014-02-19 17:51 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-12 11:20 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-12 11:20 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-12 11:17 - 2014-06-12 11:27 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-06-12 11:00 - 2014-06-12 11:00 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-12 11:00 - 2014-06-12 11:00 - 00001098 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-12 10:53 - 2014-06-12 10:52 - 00000000 ____D () C:\AdwCleaner 2014-06-12 10:53 - 2014-02-16 19:40 - 00000999 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-12 10:38 - 2014-06-12 10:38 - 01285120 _____ () C:\Users\Ankhang\Desktop\zoek.exe 2014-06-12 10:21 - 2014-06-12 10:21 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Ankhang\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-12 10:20 - 2014-06-12 10:20 - 01333465 _____ () C:\Users\Ankhang\Desktop\adwcleaner_3.212.exe 2014-06-12 09:33 - 2014-03-05 18:54 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\CrashDumps 2014-06-11 21:02 - 2014-06-11 21:02 - 00291896 _____ () C:\Windows\Minidump\061114-32432-01.dmp 2014-06-11 21:02 - 2014-04-15 19:27 - 750144861 _____ () C:\Windows\MEMORY.DMP 2014-06-11 21:02 - 2014-04-15 19:27 - 00000000 ____D () C:\Windows\Minidump 2014-06-11 20:45 - 2014-02-16 22:03 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-11 20:43 - 2014-05-01 00:40 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-06-11 20:43 - 2014-02-16 22:03 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-11 20:42 - 2014-02-17 19:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Skype 2014-06-11 18:57 - 2014-06-04 09:04 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify 2014-06-11 15:19 - 2014-06-11 15:19 - 00536528 _____ () C:\Windows\Minidump\061114-25833-01.dmp 2014-06-11 15:07 - 2014-06-11 14:15 - 00000000 ____D () C:\Qoobox 2014-06-11 15:07 - 2014-04-23 07:00 - 00000000 ____D () C:\Users\dub_cm_auto 2014-06-11 15:06 - 2014-06-11 15:06 - 00020982 _____ () C:\Users\Ankhang\Desktop\ComboFix.txt 2014-06-11 15:03 - 2014-06-11 14:14 - 00000000 ____D () C:\Windows\erdnt 2014-06-11 14:56 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-06-11 14:10 - 2014-06-11 14:10 - 05205915 ____R (Swearware) C:\Users\Ankhang\Desktop\ComboFix.exe 2014-06-11 13:04 - 2014-06-11 11:45 - 00030040 _____ () C:\Users\Ankhang\Desktop\Addition.txt 2014-06-11 12:54 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard 2014-06-11 12:52 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins 2014-06-11 12:31 - 2014-06-11 12:26 - 00001283 _____ () C:\Users\Ankhang\Desktop\trojanerboard.txt 2014-06-11 12:01 - 2014-06-11 12:01 - 00012682 _____ () C:\Users\Ankhang\Desktop\gmer.log 2014-06-11 11:47 - 2014-06-11 11:47 - 00380416 _____ () C:\Users\Ankhang\Desktop\Gmer-19357.exe 2014-06-11 11:43 - 2014-06-11 11:43 - 02081792 _____ (Farbar) C:\Users\Ankhang\Desktop\FRST64.exe 2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule 2014-06-11 11:41 - 2014-03-04 13:35 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\uTorrent 2014-06-11 11:39 - 2014-06-11 11:39 - 00000476 _____ () C:\Users\Ankhang\Desktop\defogger_disable.log 2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable 2014-06-11 11:39 - 2014-02-16 19:39 - 00000000 ____D () C:\Users\Ankhang 2014-06-11 11:38 - 2014-06-11 11:38 - 00050477 _____ () C:\Users\Ankhang\Desktop\Defogger.exe 2014-06-11 11:31 - 2014-05-08 15:21 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NPE 2014-06-11 11:15 - 2014-05-08 20:49 - 00000000 ____D () C:\NPE 2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp 2014-06-10 21:17 - 2014-06-06 12:03 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk 2014-06-10 21:13 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Origin 2014-06-09 15:04 - 2014-05-31 16:00 - 00000000 ____D () C:\Spiele 2014-06-09 15:04 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-06-09 15:03 - 2014-06-03 10:55 - 00000000 ____D () C:\Program Files (x86)\SEGA 2014-06-09 14:47 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp 2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp 2014-06-08 11:13 - 2014-06-11 16:26 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-08 11:08 - 2014-06-11 16:26 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen 2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE 2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM 2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk 2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk 2014-06-07 19:02 - 2014-05-31 17:06 - 00115581 _____ () C:\Windows\DirectX.log 2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-06-06 21:35 - 2014-05-12 16:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NVIDIA 2014-06-06 12:03 - 2014-06-06 11:19 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare 2014-06-06 12:02 - 2014-02-16 22:11 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine 2014-06-06 11:41 - 2014-06-03 22:56 - 00000000 ____D () C:\Users\Ankhang\Documents\my games 2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk 2014-06-06 10:23 - 2014-06-04 09:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify 2014-06-05 08:09 - 2014-02-17 19:50 - 00000000 ____D () C:\ProgramData\Skype 2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft 2014-06-04 09:43 - 2014-02-17 04:29 - 00698688 _____ () C:\Windows\system32\perfh007.dat 2014-06-04 09:43 - 2014-02-17 04:29 - 00148828 _____ () C:\Windows\system32\perfc007.dat 2014-06-04 09:43 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-04 09:36 - 2014-06-04 09:33 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc 2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk 2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url 2014-06-03 23:16 - 2014-06-03 23:01 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim 2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089 2014-06-03 15:49 - 2014-05-08 19:27 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-06-03 11:04 - 2014-06-02 22:17 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA 2014-06-03 11:00 - 2014-06-03 09:41 - 00000360 _____ () C:\console.log 2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk 2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet 2014-06-02 18:05 - 2014-06-02 18:00 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite 2014-06-02 12:16 - 2014-05-31 17:17 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-06-02 12:16 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-06-01 14:25 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-06-01 14:08 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3 2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN 2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins 2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe 2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core 2014-05-31 17:12 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin 2014-05-31 17:12 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Electronic Arts 2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk 2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3 2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk 2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2014-05-31 15:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-05-31 10:31 - 2014-05-23 18:25 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk 2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp 2014-05-23 18:26 - 2014-04-06 13:50 - 00000059 _____ () C:\Windows\JQHApp.dat 2014-05-23 18:25 - 2014-04-06 13:49 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MKJogo 2014-05-22 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10} 2014-05-22 16:22 - 2009-07-14 01:59 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\msdtc.exe 2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360 2014-05-22 15:51 - 2014-02-16 23:28 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-05-22 15:51 - 2014-02-16 23:28 - 00002319 _____ () C:\Users\Public\Desktop\Norton 360.lnk 2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360 2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64 2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp 2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp 2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp 2014-05-16 17:14 - 2014-03-24 16:42 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-05-14 20:24 - 2014-02-19 17:51 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-14 20:24 - 2014-02-19 17:51 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-14 20:24 - 2014-02-19 17:51 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-13 18:41 - 2014-02-19 17:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Adobe 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-05-09 06:51 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-06-2014 Ran by Ankhang at 2014-06-12 11:31:44 Running from C:\Users\Ankhang\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Norton 360 Online (Disabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB} AS: Norton 360 Online (Disabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton 360 Online (Disabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0} ==================== Installed Programs ====================== 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated) Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB) Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.347.0 - Microsoft Corporation) Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve) Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts) Dragon Age™ II (HKLM-x32\...\{E1EB9F56-AFE2-4204-B28F-AD8DA793B9F4}) (Version: 1.04.8524.0 - Electronic Arts) Internet Explorer (Enable DEP) (HKLM\...\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb) (Version: - ) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Small Business Edition 2003 (HKLM-x32\...\{91CA0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Norton 360 (HKLM-x32\...\N360) (Version: 21.3.0.12 - Symantec Corporation) NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation) NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden NVIDIA PhysX (HKLM-x32\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden Opera Stable 22.0.1471.50 (HKLM-x32\...\Opera 22.0.1471.50) (Version: 22.0.1471.50 - Opera Software ASA) Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.) Pointofix (HKLM-x32\...\Pointofix_is1) (Version: - Amerigomedia) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts) Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH) The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) ==================== Restore Points ========================= 09-06-2014 13:05:56 Windows Update 11-06-2014 18:42:53 Windows Update 12-06-2014 09:18:48 zoek.exe restore point ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {43E67C9A-557E-4E5B-A808-79F9B8BCE1C1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated) Task: {985EBFEE-C4E0-4265-9F16-55908D468A89} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {A87828C2-F008-44AE-86D9-66C975704767} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation) Task: {C6245414-7C62-4989-9F52-CAF330FF2C67} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {C96F1BA6-3444-432A-9549-DABE511AC317} - System32\Tasks\{D65FF839-151E-45D9-BB4F-8F8B982E3852} => C:\Program Files (x86)\Skype\Phone\Skype.exe Task: {E2821676-D67F-46C1-AC1A-FD2225325605} - System32\Tasks\Opera scheduled Autoupdate 1399999089 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-27] (Opera Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2014-02-16 22:12 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: Microsoft PS/2-Maus Description: Microsoft PS/2-Maus Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (06/12/2014 11:30:49 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/12/2014 11:14:49 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/12/2014 10:56:52 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/12/2014 09:57:15 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/12/2014 09:33:37 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001d821 ID des fehlerhaften Prozesses: 0xf78 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 Error: (06/12/2014 09:33:17 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0015e235 ID des fehlerhaften Prozesses: 0xf78 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 Error: (06/12/2014 09:31:26 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/11/2014 09:06:51 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b Name des fehlerhaften Moduls: wcp.dll, Version: 6.1.7601.17592, Zeitstempel: 0x4da00342 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000009a156 ID des fehlerhaften Prozesses: 0x440 Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0 Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1 Pfad des fehlerhaften Moduls: TrustedInstaller.exe2 Berichtskennung: TrustedInstaller.exe3 Error: (06/11/2014 09:03:56 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/11/2014 06:59:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819 Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001d821 ID des fehlerhaften Prozesses: 0x14b0 Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0 Pfad der fehlerhaften Anwendung: SporeApp.exe1 Pfad des fehlerhaften Moduls: SporeApp.exe2 Berichtskennung: SporeApp.exe3 System errors: ============= Error: (06/12/2014 11:30:13 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/12/2014 11:26:38 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (06/12/2014 11:26:37 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (06/12/2014 11:26:37 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (06/12/2014 11:26:36 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (06/12/2014 11:26:35 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (06/12/2014 11:14:14 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/12/2014 10:58:15 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht. Error: (06/12/2014 10:56:15 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/12/2014 09:56:39 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Microsoft Office Sessions: ========================= Error: (06/12/2014 11:30:49 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/12/2014 11:14:49 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/12/2014 10:56:52 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/12/2014 09:57:15 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/12/2014 09:33:37 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d821f7801cf86104a9c5d2bC:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLLdd8aa9fe-f203-11e3-8aec-002511a293a5 Error: (06/12/2014 09:33:17 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819SporeApp.exe1.1.0.3384897d819c00000050015e235f7801cf86104a9c5d2bC:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\SporeApp.exed16f462c-f203-11e3-8aec-002511a293a5 Error: (06/12/2014 09:31:26 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/11/2014 09:06:51 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: TrustedInstaller.exe6.1.7601.175144ce7989bwcp.dll6.1.7601.175924da00342c0000005000000000009a15644001cf85a7b157d058C:\Windows\servicing\TrustedInstaller.exeC:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.17592_none_672ce6c3de2cb17f\wcp.dll8af5a14b-f19b-11e3-bba2-002511a293a5 Error: (06/11/2014 09:03:56 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/11/2014 06:59:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d82114b001cf85964f17d8cbC:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLLc8ec30b7-f189-11e3-8660-002511a293a5 CodeIntegrity Errors: =================================== Date: 2014-05-08 20:58:05.725 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:58:05.665 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:59.459 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:59.334 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:53.156 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:53.032 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:46.760 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:46.698 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:40.524 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-08 20:57:40.478 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 15% Total physical RAM: 8191.14 MB Available physical RAM: 6931.2 MB Total Pagefile: 16380.46 MB Available Pagefile: 15065.92 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:456.26 GB) (Free:311.93 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (VOLUME) (Fixed) (Total:18.55 GB) (Free:1.97 GB) NTFS Drive e: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS Drive f: () (Fixed) (Total:456.6 GB) (Free:456.44 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: B200EA93) Partition 1: (Not Active) - (Size=19 GB) - (Type=OF Extended) Partition 2: (Not Active) - (Size=99 MB) - (Type=07 NTFS) Partition 3: (Active) - (Size=456 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
12.06.2014, 10:43 | #10 |
/// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Wir kontrollieren nochmal alles. ESET kann länger (> 3 h) dauern. Im Anschluss entfernen wir alle verwendeten Tools und ich gebe dir noch ein paar Tipps mit auf den Weg. Schritt 1 ESET Online Scanner
Schritt 2 Downloade Dir bitte SecurityCheck und:
Bitte poste mit deiner nächsten Antwort
|
12.06.2014, 11:53 | #11 |
| Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hier die Log Dateien von ESET und Security Check Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7587 # api_version=3.0.2 # EOSSerial=85b2e54168572540b164f88689c636ef # engine=18681 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2014-06-12 10:46:16 # local_time=2014-06-12 12:46:16 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='Norton 360' # compatibility_mode=3598 16777213 100 100 257506 153232472 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 4969 154199826 0 0 # scanned=225476 # found=10 # cleaned=0 # scan_time=3023 sh=4E475FD620FBCCBB37453AF2BD0427BDA73109FF ft=1 fh=70875884387ffbdb vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir" sh=524ED1264811258D64BA2BE8B48005C6D1935713 ft=1 fh=19b60c262a337e59 vn="Win64/Thinknice.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface64.dll.vir" sh=72971E4B87542575A876B36FB87879B416F4EC88 ft=1 fh=eb8c71c588367618 vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterfacef32.dll.vir" sh=F34BB16FA7EEF85B106A7C3A3FDEEE95ECF18001 ft=1 fh=7bd5299d4d87abc5 vn="Win32/Thinknice.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect32.dll.vir" sh=FB15CD6ADCD9BDFBF68D5DF5EAEA02BF329F8D4F ft=1 fh=dfa2b1c2f56e7303 vn="Win64/Thinknice.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect64.dll.vir" sh=EC7EC5D60C5A578BC9953115D368BECD05BA14B2 ft=1 fh=ecbff00cc7dcc0fd vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir" sh=95D8C7F2851240F836D46EBD0DCB0BBAE3C9C3C8 ft=1 fh=c39b2415a29978f2 vn="Variante von Win32/ELEX.AD evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\IePluginService\PluginService.exe.vir" sh=A70C63312CBCD0D975236E48372A5F3275A01554 ft=1 fh=b3500ac9ac48c1c9 vn="Variante von Win32/ELEX.AE evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\WPM\wprotectmanager.exe.vir" sh=EC7EC5D60C5A578BC9953115D368BECD05BA14B2 ft=1 fh=ecbff00cc7dcc0fd vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Ankhang\AppData\Roaming\SupTab\SupTab.dll.vir" sh=AC8E627E20A1EF7BEB483D9654751D36F1483952 ft=1 fh=34eb50337ba521c2 vn="Variante von Win32/DomaIQ.BH evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Ankhang\AppData\Roaming\Opera Software\Opera Stable\File System\002\t\00\00000000" Code:
ATTFilter Results of screen317's Security Check version 0.99.83 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Norton 360 Online WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Adobe Flash Player 13.0.0.214 Adobe Reader XI ````````Process Check: objlist.exe by Laurent```````` `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` |
12.06.2014, 14:27 | #12 |
/// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber. Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern. Schritt 1 Die Reihenfolge ist hier entscheidend.
Schritt 2 Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems. Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti-Viren-Programm und zusätzlicher Schutz
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden. Mozilla Firefox
Performance
Was du vermeiden solltest:
Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen? Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
12.06.2014, 16:02 | #13 |
| Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hallo. Und vielen Dank für die Hilfe. Leider treten die Probleme immer noch auf. Könnte eine Formatierung die Probleme lösen? |
12.06.2014, 16:04 | #14 | |
/// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stopptZitat:
Ich bin froh, dass wir helfen konnten In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
Themen zu Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt |
abstürzen, association, automatisch, bildschirm, computer, hängen, keine verbindung, keine viren, norton 360, probleme, pup.optional.outbrowse, pup.optional.qone8, sich automatisch, spotify web helper, stürzt ab, sweet-page, sweet-page entfernen, verbindung, webseiten, win32/domaiq.bh, win32/elex.ad, win32/elex.ae, win32/thinknice.a, win32/thinknice.b, win64/thinknice.a, windows |