|
Plagegeister aller Art und deren Bekämpfung: Eventuell Skype Virus eingefangenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
12.11.2014, 21:36 | #1 |
| Eventuell Skype Virus eingefangen Hey, ich habe vorhin eine Nachricht von einem meiner Kontakte in Skype bekommen: pozri sa na tento obrázok hxxp://www.bit.ly/11hAdbU?image=xxx Ist eine andere Sprache am Anfang da er nicht aus Deutschland ist, ist sicher das mit dem "Guck dir mal das Foto an" oder so ähnlich. xxx soll mein Skype-Name sein, habe ich nur entfernt. Ich habe den Link angeklickt und dann bin ich auf eine Seite gekommen wo eine Datei angeboten wurde, welche ich Speichern sollte. Bin aber auf abbrechen gegangen. Kann es trotzdem sein, dass im Hintergrund oder so was installiert wurde? |
12.11.2014, 22:02 | #2 |
| Eventuell Skype Virus eingefangen Oh Gott!
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
12.11.2014, 23:02 | #3 |
| Eventuell Skype Virus eingefangen Wieso das "Oh Gott!"?
__________________FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014 Ran by Lukas (administrator) on LUKAS on 12-11-2014 22:58:40 Running from C:\Users\Lukas\Desktop Loaded Profile: Lukas (Available profiles: Lukas) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Spotify Ltd) C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Spotify Ltd) C:\Users\Lukas\AppData\Roaming\Spotify\spotify.exe () C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\livecomm.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor) HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS) HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5223016 2014-11-01] (AVAST Software) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Run: [FreeAC] => C:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe [1553688 2014-02-20] (Comfort Software Group) HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd) HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Run: [Spotify] => C:\Users\Lukas\AppData\Roaming\Spotify\Spotify.exe [6553144 2014-10-27] (Spotify Ltd) HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Run: [Spotify Web Helper] => C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-10-27] (Spotify Ltd) HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [468192 2014-09-01] (Sony) AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL File Not Found AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-10-30] (NVIDIA Corporation) AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [174856 2014-10-30] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156840 2014-10-30] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) Tcpip\Parameters: [DhcpNameServer] 192.168.11.1 FireFox: ======== FF ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default FF Homepage: chrome://speeddial/content/speeddial.xul FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml FF Extension: YouTube Downloader & Converter - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\youtube@downloader.yt [2014-10-27] FF Extension: YouTube Unblocker - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\youtubeunblocker@unblocker.yt [2014-11-07] FF Extension: WOT - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-10-27] FF Extension: Video Downloader professional - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\ffext_basicvideoext@startpage24.xpi [2014-10-27] FF Extension: MEGA - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\firefox@mega.co.nz.xpi [2014-11-06] FF Extension: Google Search by Image - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\google@hitachi.com.xpi [2014-10-27] FF Extension: Deutsch (DE) Language Pack - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-10-27] FF Extension: Secure Login - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\secureLogin@blueimp.net.xpi [2014-10-27] FF Extension: Flagfox - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-10-27] FF Extension: Speed Dial - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2014-10-27] FF Extension: RightToClick - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\{cd617375-6743-4ee8-bac4-fbf10f35729e}.xpi [2014-10-27] FF Extension: Adblock Plus - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-27] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-28] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-10-28] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-10-28] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-28] (AVAST Software) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-10-28] (Avast Software) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation) S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-09-24] (Microsoft Corporation) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2283296 2014-10-27] (IObit) S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-09-24] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation) S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation) S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-09-24] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-09-24] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-10-28] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-01] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-10-28] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-10-28] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-01] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-10-28] (AVAST Software) S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-10-28] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-10-28] () R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation) S3 ggsomc; C:\Windows\System32\drivers\ggsomc.sys [30424 2014-11-07] (Sony Mobile Communications) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [270728 2014-10-28] (Avast Software) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-09-24] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-12 22:58 - 2014-11-12 22:59 - 00020183 _____ () C:\Users\Lukas\Desktop\FRST.txt 2014-11-12 22:57 - 2014-11-12 22:58 - 02116096 _____ (Farbar) C:\Users\Lukas\Desktop\FRST64.exe 2014-11-12 18:32 - 2014-11-12 22:44 - 00000162 _____ () C:\Users\Lukas\Desktop\links.txt 2014-11-12 13:16 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll 2014-11-12 13:16 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll 2014-11-11 03:57 - 2014-11-12 20:48 - 00614896 _____ () C:\WINDOWS\WindowsUpdate.log 2014-11-10 15:34 - 2014-11-10 15:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-11-08 22:36 - 2014-10-30 05:53 - 31890064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 24554824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 20966504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 20922696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 19966856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 18497600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 17258696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 14029400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 13942368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 13189832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2014-11-08 22:36 - 2014-10-30 05:53 - 11395672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 11333848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 04289856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 04011840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 02849224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 01876296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434460.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 01539272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434460.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00961224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00932168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00922944 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00896144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00352016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00303600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00031560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2014-11-08 19:36 - 2014-11-08 19:36 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Day 1 Studios 2014-11-08 17:33 - 2014-11-08 17:33 - 00000295 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk 2014-11-07 22:00 - 2014-10-30 01:55 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-11-07 22:00 - 2014-10-30 01:55 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-11-07 21:57 - 2014-11-07 22:00 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-11-07 18:08 - 2014-11-07 18:08 - 00000386 _____ () C:\WINDOWS\Tasks\WpsUpdateTask_Lukas.job 2014-11-07 18:08 - 2014-11-07 18:08 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Kingsoft 2014-11-07 18:07 - 2014-11-07 18:07 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Kingsoft 2014-11-07 18:07 - 2014-11-07 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingsoft Writer 2014-11-07 18:07 - 2014-11-07 18:07 - 00000000 ____D () C:\ProgramData\Kingsoft 2014-11-07 18:07 - 2014-11-07 18:07 - 00000000 ____D () C:\Program Files (x86)\Kingsoft 2014-11-07 16:13 - 2014-11-07 16:13 - 00030424 _____ (Sony Mobile Communications) C:\WINDOWS\system32\Drivers\ggsomc.sys 2014-11-07 16:13 - 2014-11-07 16:13 - 00016088 _____ (Sony Mobile Communications) C:\WINDOWS\system32\Drivers\ggflt.sys 2014-11-07 15:53 - 2014-11-07 15:53 - 00002120 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk 2014-11-07 15:53 - 2014-11-07 15:53 - 00000000 ____D () C:\ProgramData\Sony 2014-11-07 15:53 - 2014-11-07 15:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony 2014-11-07 15:53 - 2014-11-07 15:53 - 00000000 ____D () C:\Program Files (x86)\Sony 2014-11-06 20:42 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys 2014-11-06 20:40 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-11-06 20:40 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-11-06 20:40 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll 2014-11-06 20:40 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll 2014-11-06 20:40 - 2014-08-23 05:44 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-11-06 20:40 - 2014-08-23 05:34 - 13423104 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-11-06 20:40 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-11-06 20:40 - 2014-08-23 05:31 - 01038336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-11-06 20:40 - 2014-08-23 05:20 - 11818496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-11-06 20:40 - 2014-08-16 05:08 - 21195616 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-11-06 20:40 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-11-06 20:40 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2014-11-06 20:40 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-11-06 20:40 - 2014-08-16 04:57 - 02498880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-11-06 20:40 - 2014-08-16 04:57 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-11-06 20:40 - 2014-08-16 04:16 - 18722600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-11-06 20:40 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-11-06 20:40 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2014-11-06 20:40 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-11-06 20:40 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll 2014-11-06 20:40 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-11-06 20:40 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2014-11-06 20:40 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll 2014-11-06 20:40 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-11-06 20:40 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll 2014-11-06 20:40 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2014-11-06 20:40 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2014-11-06 20:40 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll 2014-11-06 20:40 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-11-06 20:40 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-11-06 20:40 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-11-06 20:40 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-11-06 20:40 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-11-06 20:40 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-11-06 20:40 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-11-06 20:40 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-11-06 20:40 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-11-06 20:40 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-11-06 20:40 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-11-06 20:40 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-11-06 20:40 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-11-06 20:40 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-11-06 20:40 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-11-06 20:40 - 2014-08-01 00:22 - 00388729 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-11-06 20:39 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2014-11-06 20:39 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2014-11-06 20:39 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2014-11-06 20:39 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll 2014-11-06 20:39 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2014-11-06 20:39 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2014-11-06 20:39 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2014-11-06 20:39 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2014-11-06 20:39 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll 2014-11-06 20:39 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll 2014-11-06 20:39 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll 2014-11-06 20:39 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll 2014-11-06 20:39 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll 2014-11-06 20:39 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll 2014-11-06 20:39 - 2014-05-03 00:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat 2014-11-06 20:39 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys 2014-11-06 20:39 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-11-06 20:39 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys 2014-11-06 20:39 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys 2014-11-06 20:39 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe 2014-11-06 20:39 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe 2014-11-06 20:39 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll 2014-11-06 20:39 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2014-11-06 20:39 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2014-11-06 20:39 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll 2014-11-06 20:39 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-11-06 20:39 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-11-06 20:39 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2014-11-06 20:39 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2014-11-06 20:39 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll 2014-11-06 20:39 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll 2014-11-06 20:39 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2014-11-06 20:39 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2014-11-06 20:39 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2014-11-06 20:39 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2014-11-06 20:39 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2014-11-06 20:39 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2014-11-06 20:38 - 2014-10-09 23:16 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll 2014-11-06 20:38 - 2014-10-08 23:09 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2014-11-06 20:38 - 2014-09-19 02:24 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2014-11-06 20:38 - 2014-09-05 03:36 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2014-11-06 20:38 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll 2014-11-06 20:38 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll 2014-11-06 20:38 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-11-06 20:38 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll 2014-11-06 20:38 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2014-11-06 20:38 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys 2014-11-06 20:38 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys 2014-11-06 20:38 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe 2014-11-06 20:38 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2014-11-06 20:38 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll 2014-11-06 20:38 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll 2014-11-06 20:38 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll 2014-11-06 19:36 - 2014-11-08 20:11 - 00000000 __RDO () C:\Users\Lukas\OneDrive 2014-11-06 19:33 - 2014-11-06 19:33 - 00001456 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-11-06 19:33 - 2014-11-06 19:33 - 00000020 ___SH () C:\Users\Lukas\ntuser.ini 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Programme 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-11-06 19:31 - 2014-11-06 19:31 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-11-06 19:21 - 2014-11-06 19:21 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-11-06 19:16 - 2014-11-06 19:16 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-11-06 19:15 - 2014-11-06 19:36 - 00000000 ____D () C:\Users\Lukas 2014-11-06 19:15 - 2014-11-06 19:31 - 00020958 _____ () C:\WINDOWS\diagwrn.xml 2014-11-06 19:15 - 2014-11-06 19:31 - 00020958 _____ () C:\WINDOWS\diagerr.xml 2014-11-06 19:15 - 2014-11-06 19:16 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-11-06 19:15 - 2014-11-06 19:16 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Vorlagen 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Startmenü 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Netzwerkumgebung 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Lokale Einstellungen 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Eigene Dateien 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Druckumgebung 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Documents\Eigene Musik 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Documents\Eigene Bilder 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\AppData\Local\Verlauf 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\AppData\Local\Anwendungsdaten 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Anwendungsdaten 2014-11-06 19:15 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-11-06 19:15 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-11-06 19:15 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-11-06 19:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-11-06 19:08 - 2014-11-08 22:37 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-11-06 19:08 - 2014-11-06 19:08 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-11-06 19:08 - 2014-11-06 19:08 - 00000000 ____D () C:\Program Files\Realtek 2014-11-06 19:08 - 2014-10-30 03:10 - 06880968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 03533632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 02558792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 01090704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 00935232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-11-06 19:08 - 2014-10-30 03:10 - 00385352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 00061640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-11-06 19:08 - 2014-10-27 01:34 - 04066553 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-11-06 19:07 - 2014-11-06 19:19 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-11-06 19:07 - 2014-11-06 19:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-11-06 19:07 - 2014-11-06 19:18 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-11-06 19:07 - 2014-11-06 19:18 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-11-06 19:07 - 2013-10-01 13:02 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2014-11-06 19:07 - 2013-10-01 13:02 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2014-11-06 19:04 - 2014-11-11 01:19 - 00000000 ___DC () C:\WINDOWS\Panther 2014-11-06 19:04 - 2014-11-06 19:04 - 03448320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-11-06 19:04 - 2014-11-06 19:04 - 01702400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-11-06 19:04 - 2014-11-06 19:04 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-11-06 19:04 - 2014-11-06 19:04 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-11-06 19:04 - 2014-11-06 19:04 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-11-06 19:04 - 2014-11-06 19:04 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-11-06 19:04 - 2014-11-06 19:04 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-11-06 19:04 - 2014-11-06 19:04 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-11-06 19:04 - 2014-11-06 19:04 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-11-06 19:04 - 2014-11-06 19:04 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-11-06 19:04 - 2014-11-06 19:04 - 00054752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-11-06 19:04 - 2014-11-06 19:04 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2014-11-06 19:04 - 2014-11-06 19:04 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-11-06 19:04 - 2014-11-06 19:04 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-11-06 19:03 - 2014-11-06 19:03 - 23631360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 17484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 13619200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 11807232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 05829632 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 04201472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 04183040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-11-06 19:03 - 2014-11-06 19:03 - 03117568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 02779648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 02321920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 02309632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 02187264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 02108416 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-11-06 19:03 - 2014-11-06 19:03 - 02017280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-11-06 19:03 - 2014-11-06 19:03 - 01810944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 01447936 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 01190400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-11-06 19:03 - 2014-11-06 19:03 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe 2014-11-06 19:03 - 2014-11-06 19:03 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll 2014-11-06 19:02 - 2014-11-06 19:02 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-11-06 19:02 - 2014-11-06 19:02 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-11-06 19:02 - 2014-11-06 19:02 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-11-06 18:55 - 2014-11-06 19:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-11-06 18:55 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-11-06 18:55 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files\MSBuild 2014-11-06 18:55 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-11-06 18:55 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-11-06 18:55 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2014-11-06 18:55 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-11-06 18:55 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2014-11-06 18:55 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-11-06 17:43 - 2014-11-06 17:43 - 00000000 ____D () C:\Users\Lukas\Desktop\Left4Uncut 2014-11-06 17:28 - 2014-11-07 16:12 - 00000000 ____D () C:\ProgramData\Sony Mobile 2014-11-06 17:28 - 2014-11-07 16:12 - 00000000 ____D () C:\Program Files (x86)\Sony Mobile 2014-11-03 17:04 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll 2014-11-03 17:04 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll 2014-11-03 17:04 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll 2014-11-03 17:04 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll 2014-11-03 17:04 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll 2014-11-03 17:04 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll 2014-11-03 17:01 - 2014-11-03 17:01 - 00000000 ____D () C:\Users\Lukas\AppData\Local\FalloutNV 2014-11-03 07:10 - 2014-11-03 07:10 - 00000221 _____ () C:\Users\Lukas\Desktop\Fallout New Vegas.url 2014-11-03 04:08 - 2014-11-03 04:08 - 00000000 ____D () C:\Users\Lukas\Documents\my games 2014-11-03 00:22 - 2014-11-04 00:40 - 00000221 _____ () C:\Users\Lukas\Desktop\F.E.A.R. 3.url 2014-11-03 00:21 - 2014-11-03 00:21 - 00000219 _____ () C:\Users\Lukas\Desktop\Left 4 Dead 2.url 2014-11-01 19:55 - 2014-11-01 19:55 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-11-01 19:51 - 2014-11-06 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam 2014-11-01 19:51 - 2014-11-01 19:51 - 00000994 _____ () C:\Users\Lukas\Desktop\Bandicam.lnk 2014-11-01 19:51 - 2014-11-01 19:51 - 00000000 ____D () C:\Users\Lukas\Documents\Bandicam 2014-11-01 19:51 - 2014-11-01 19:51 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\BANDISOFT 2014-11-01 19:51 - 2014-11-01 19:51 - 00000000 ____D () C:\Program Files (x86)\BandiMPEG1 2014-11-01 19:51 - 2014-11-01 19:51 - 00000000 ____D () C:\Program Files (x86)\Bandicam 2014-11-01 15:52 - 2014-11-05 19:21 - 00000000 ____D () C:\Users\Lukas\Desktop\Terroristen 2014-11-01 15:39 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SciTE4AutoHotkey 2014-11-01 15:39 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey 2014-11-01 15:39 - 2014-11-01 15:39 - 00000000 ____D () C:\Users\Lukas\Documents\AutoHotkey 2014-11-01 15:39 - 2014-11-01 15:39 - 00000000 ____D () C:\Program Files\AutoHotkey 2014-11-01 15:27 - 2014-11-01 15:27 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\NVIDIA 2014-11-01 02:45 - 2014-11-01 15:44 - 00000000 ____D () C:\ProgramData\AnyDesk 2014-11-01 02:18 - 2014-11-01 15:44 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\AnyDesk 2014-11-01 00:35 - 2014-11-01 00:35 - 00000197 _____ () C:\WINDOWS\system32\2014-10-31-23-35-39.039-AvastVBoxSVC.exe-3720.log 2014-11-01 00:33 - 2014-11-01 00:35 - 00000197 _____ () C:\WINDOWS\system32\2014-10-31-23-33-42.000-AvastVBoxSVC.exe-8644.log 2014-11-01 00:31 - 2014-11-01 00:31 - 00000197 _____ () C:\WINDOWS\system32\2014-10-31-23-31-37.044-AvastVBoxSVC.exe-9132.log 2014-10-31 21:14 - 2014-10-31 21:14 - 00001817 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Notepad2-mod.lnk 2014-10-31 21:14 - 2014-10-31 21:14 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Notepad2 2014-10-31 21:14 - 2014-10-31 21:14 - 00000000 ____D () C:\Program Files\Notepad2 2014-10-31 19:05 - 2014-11-06 19:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe 2014-10-31 18:06 - 2014-10-31 21:11 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Notepad++ 2014-10-31 16:03 - 2014-10-31 16:04 - 00000197 _____ () C:\WINDOWS\system32\2014-10-31-15-03-37.027-AvastVBoxSVC.exe-3152.log 2014-10-31 15:56 - 2014-11-07 00:16 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense 2014-10-31 12:23 - 2014-10-31 12:23 - 00000117 _____ () C:\WINDOWS\system32\netcfg-357125296.txt 2014-10-31 12:15 - 2014-10-31 12:15 - 00000117 _____ () C:\WINDOWS\system32\netcfg-356700531.txt 2014-10-31 02:59 - 2014-10-31 02:59 - 00000117 _____ () C:\WINDOWS\system32\netcfg-323332937.txt 2014-10-31 02:59 - 2014-10-31 02:59 - 00000117 _____ () C:\WINDOWS\system32\netcfg-323332828.txt 2014-10-31 01:57 - 2014-10-31 01:57 - 00000000 ____D () C:\Users\Lukas\AppData\Local\NVIDIA Corporation 2014-10-31 01:57 - 2014-10-31 01:57 - 00000000 ____D () C:\Users\Lukas\AppData\Local\NVIDIA 2014-10-31 01:57 - 2014-10-16 17:54 - 02800296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2014-10-31 01:57 - 2014-10-16 17:54 - 02197680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2014-10-31 01:57 - 2014-10-16 17:54 - 01715224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2014-10-31 01:57 - 2014-10-16 17:54 - 01291280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2014-10-31 01:56 - 2014-10-31 01:56 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-10-31 01:54 - 2014-10-30 05:53 - 16886168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 03237528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00987008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00870112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00174856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00156840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00027024 _____ () C:\WINDOWS\system32\nvinfo.pb 2014-10-31 01:54 - 2014-10-16 17:54 - 16886168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\SETE8C.tmp 2014-10-31 01:54 - 2014-10-16 17:54 - 03237528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\SETBB66.tmp 2014-10-31 01:54 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434448.dll 2014-10-31 01:54 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434448.dll 2014-10-31 01:54 - 2014-10-16 17:54 - 00987008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\SETD8CD.tmp 2014-10-31 01:54 - 2014-10-16 17:54 - 00870112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\SET2652.tmp 2014-10-31 01:54 - 2014-10-16 17:54 - 00174856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\SETC977.tmp 2014-10-31 01:54 - 2014-10-16 17:54 - 00156840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\SET1073.tmp 2014-10-31 01:54 - 2014-10-16 17:54 - 00038048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2014-10-31 01:54 - 2014-10-16 17:54 - 00034976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2014-10-31 01:54 - 2014-10-16 17:54 - 00032416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2014-10-30 23:09 - 2014-10-30 23:09 - 00000117 _____ () C:\WINDOWS\system32\netcfg-309532078.txt 2014-10-30 23:09 - 2014-10-30 23:09 - 00000117 _____ () C:\WINDOWS\system32\netcfg-309531656.txt 2014-10-30 18:27 - 2014-10-30 18:27 - 00000117 _____ () C:\WINDOWS\system32\netcfg-292582281.txt 2014-10-30 18:27 - 2014-10-30 18:27 - 00000117 _____ () C:\WINDOWS\system32\netcfg-292581750.txt 2014-10-30 17:58 - 2014-10-30 17:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-290867093.txt 2014-10-30 17:58 - 2014-10-30 17:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-290866828.txt 2014-10-30 13:17 - 2014-10-30 13:17 - 00000117 _____ () C:\WINDOWS\system32\netcfg-273973703.txt 2014-10-30 13:17 - 2014-10-30 13:17 - 00000117 _____ () C:\WINDOWS\system32\netcfg-273973093.txt 2014-10-29 20:56 - 2014-10-29 20:56 - 00000197 _____ () C:\WINDOWS\system32\2014-10-29-19-56-36.059-AvastVBoxSVC.exe-8800.log 2014-10-29 20:50 - 2014-11-11 01:19 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\TeamViewer 2014-10-29 19:34 - 2014-10-29 19:34 - 00000117 _____ () C:\WINDOWS\system32\netcfg-210236765.txt 2014-10-29 19:33 - 2014-10-29 19:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-210151156.txt 2014-10-29 15:32 - 2014-10-29 15:32 - 00000117 _____ () C:\WINDOWS\system32\netcfg-195703968.txt 2014-10-29 15:32 - 2014-10-29 15:32 - 00000117 _____ () C:\WINDOWS\system32\netcfg-195703640.txt 2014-10-29 00:57 - 2014-10-29 00:57 - 00000117 _____ () C:\WINDOWS\system32\netcfg-143195812.txt 2014-10-29 00:57 - 2014-10-29 00:57 - 00000117 _____ () C:\WINDOWS\system32\netcfg-143190640.txt 2014-10-28 21:31 - 2014-10-22 04:34 - 00010777 ____N () C:\WINDOWS\system32\AutoconfigV2.cab 2014-10-28 21:31 - 2014-10-22 04:33 - 00581016 ____N () C:\WINDOWS\system32\AutoUpdate.exe 2014-10-28 21:26 - 2014-10-28 21:26 - 00000117 _____ () C:\WINDOWS\system32\netcfg-130529171.txt 2014-10-28 21:26 - 2014-10-28 21:26 - 00000117 _____ () C:\WINDOWS\system32\netcfg-130529078.txt 2014-10-28 16:16 - 2014-10-28 16:16 - 00000117 _____ () C:\WINDOWS\system32\netcfg-111903562.txt 2014-10-28 16:16 - 2014-10-28 16:16 - 00000117 _____ () C:\WINDOWS\system32\netcfg-111903250.txt 2014-10-28 01:25 - 2014-10-28 01:25 - 00000247 _____ () C:\WINDOWS\system32\2014-10-28-00-25-32.069-aswFe.exe-8432.log 2014-10-28 01:23 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Resource Hacker 2014-10-28 01:23 - 2014-10-28 01:23 - 00000000 ____D () C:\Program Files (x86)\Resource Hacker 2014-10-28 01:20 - 2014-10-28 01:25 - 00000247 _____ () C:\WINDOWS\system32\2014-10-28-00-20-47.061-aswFe.exe-9184.log 2014-10-28 01:11 - 2014-10-29 20:55 - 00000197 _____ () C:\WINDOWS\system32\2014-10-28-00-11-04.088-AvastVBoxSVC.exe-1128.log 2014-10-28 00:59 - 2014-10-28 01:09 - 00000247 _____ () C:\WINDOWS\system32\2014-10-27-23-59-08.097-aswFe.exe-5636.log 2014-10-28 00:48 - 2014-10-28 00:57 - 00000247 _____ () C:\WINDOWS\system32\2014-10-27-23-48-59.099-aswFe.exe-7372.log 2014-10-28 00:48 - 2014-10-28 00:48 - 00000197 _____ () C:\WINDOWS\system32\2014-10-27-23-48-53.088-AvastVBoxSVC.exe-3524.log 2014-10-28 00:31 - 2014-11-06 19:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox 2014-10-28 00:31 - 2014-11-06 19:22 - 00000000 ____D () C:\WINDOWS\system32\vbox 2014-10-28 00:30 - 2014-11-06 19:35 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update 2014-10-28 00:30 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2014-10-28 00:30 - 2014-11-01 00:30 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys 2014-10-28 00:30 - 2014-11-01 00:30 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2014-10-28 00:30 - 2014-10-28 00:30 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-10-28 00:30 - 2014-10-28 00:30 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00001966 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2014-10-28 00:30 - 2014-10-28 00:30 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\AVAST Software 2014-10-28 00:29 - 2014-10-28 00:29 - 00000000 ____D () C:\Program Files\AVAST Software 2014-10-28 00:28 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-10-28 00:28 - 2014-10-28 00:29 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-10-28 00:28 - 2014-10-28 00:28 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2014-10-28 00:28 - 2014-10-28 00:28 - 00000000 ____D () C:\ProgramData\Sun 2014-10-28 00:28 - 2014-10-28 00:28 - 00000000 ____D () C:\ProgramData\Oracle 2014-10-28 00:27 - 2014-10-28 00:27 - 00000000 ____D () C:\Program Files (x86)\Java 2014-10-28 00:18 - 2014-11-12 22:58 - 00000000 ____D () C:\FRST 2014-10-27 22:01 - 2014-10-27 22:01 - 00000000 ____D () C:\Users\Lukas\Documents\ASUS 2014-10-27 22:01 - 2014-10-27 22:01 - 00000000 ____D () C:\ProgramData\ASUS 2014-10-27 19:55 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll 2014-10-27 19:55 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll 2014-10-27 19:55 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll 2014-10-27 19:55 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll 2014-10-27 19:55 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll 2014-10-27 19:55 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll 2014-10-27 19:55 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll 2014-10-27 19:55 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll 2014-10-27 19:55 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll 2014-10-27 19:55 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll 2014-10-27 19:55 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll 2014-10-27 19:55 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll 2014-10-27 19:55 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2014-10-27 19:55 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll 2014-10-27 19:55 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2014-10-27 19:55 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll 2014-10-27 19:55 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2014-10-27 19:55 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll 2014-10-27 19:55 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll 2014-10-27 19:55 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll 2014-10-27 19:55 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll 2014-10-27 19:55 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll 2014-10-27 19:55 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll 2014-10-27 19:55 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll 2014-10-27 19:55 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll 2014-10-27 19:55 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll 2014-10-27 19:55 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll 2014-10-27 19:55 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll 2014-10-27 19:55 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll 2014-10-27 19:55 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll 2014-10-27 19:55 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll 2014-10-27 19:55 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll 2014-10-27 19:55 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll 2014-10-27 19:55 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll 2014-10-27 19:55 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll 2014-10-27 19:55 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll 2014-10-27 19:55 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll 2014-10-27 19:55 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll 2014-10-27 19:55 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll 2014-10-27 19:55 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll 2014-10-27 19:55 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll 2014-10-27 19:55 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll 2014-10-27 19:55 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll 2014-10-27 19:55 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll 2014-10-27 19:55 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll 2014-10-27 19:55 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll 2014-10-27 19:55 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll 2014-10-27 19:55 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll 2014-10-27 19:55 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll 2014-10-27 19:55 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll 2014-10-27 19:55 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll 2014-10-27 19:55 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll 2014-10-27 19:55 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll 2014-10-27 19:55 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll 2014-10-27 19:55 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll 2014-10-27 19:55 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll 2014-10-27 19:55 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll 2014-10-27 19:55 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll 2014-10-27 19:55 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll 2014-10-27 19:55 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2014-10-27 19:55 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll 2014-10-27 19:55 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll 2014-10-27 19:55 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll 2014-10-27 19:55 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll 2014-10-27 19:55 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll 2014-10-27 19:55 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll 2014-10-27 19:55 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll 2014-10-27 19:55 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll 2014-10-27 19:55 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll 2014-10-27 19:55 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll 2014-10-27 19:55 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll 2014-10-27 19:55 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll 2014-10-27 19:55 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll 2014-10-27 19:55 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll 2014-10-27 19:54 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll 2014-10-27 19:54 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll 2014-10-27 19:54 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll 2014-10-27 19:54 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll 2014-10-27 19:54 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll 2014-10-27 19:54 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll 2014-10-27 19:54 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll 2014-10-27 19:54 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll 2014-10-27 19:54 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll 2014-10-27 19:54 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll 2014-10-27 19:54 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll 2014-10-27 19:54 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll 2014-10-27 19:54 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll 2014-10-27 19:54 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll 2014-10-27 19:54 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll 2014-10-27 19:54 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll 2014-10-27 19:54 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll 2014-10-27 19:54 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll 2014-10-27 19:54 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll 2014-10-27 19:54 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll 2014-10-27 19:54 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll 2014-10-27 19:54 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll 2014-10-27 19:54 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll 2014-10-27 19:54 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll 2014-10-27 19:54 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll 2014-10-27 19:54 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll 2014-10-27 19:54 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll 2014-10-27 19:54 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll 2014-10-27 19:54 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll 2014-10-27 18:18 - 2014-10-27 18:18 - 00000117 _____ () C:\WINDOWS\system32\netcfg-32830515.txt 2014-10-27 18:18 - 2014-10-27 18:18 - 00000117 _____ () C:\WINDOWS\system32\netcfg-32828093.txt 2014-10-27 18:17 - 2014-10-27 18:17 - 00000117 _____ () C:\WINDOWS\system32\netcfg-32821937.txt 2014-10-27 18:14 - 2014-10-27 18:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-32607250.txt 2014-10-27 16:03 - 2014-10-27 16:04 - 00000000 ____D () C:\Users\Lukas\Documents\GTA San Andreas User Files 2014-10-27 09:11 - 2014-10-27 09:11 - 00000117 _____ () C:\WINDOWS\system32\netcfg-33734.txt 2014-10-27 09:10 - 2014-10-27 09:10 - 00000117 _____ () C:\WINDOWS\system32\netcfg-82812.txt 2014-10-27 09:09 - 2014-10-27 09:09 - 00000117 _____ () C:\WINDOWS\system32\netcfg-30328.txt 2014-10-27 09:09 - 2014-10-27 09:09 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1144906.txt 2014-10-27 08:52 - 2014-10-27 08:52 - 00000136 _____ () C:\WINDOWS\system32\netcfg-130968.txt 2014-10-27 08:52 - 2014-10-27 08:52 - 00000134 _____ () C:\WINDOWS\system32\netcfg-130812.txt 2014-10-27 08:52 - 2014-10-27 08:52 - 00000134 _____ () C:\WINDOWS\system32\netcfg-130343.txt 2014-10-27 08:50 - 2014-10-27 08:50 - 00000117 _____ () C:\WINDOWS\system32\netcfg-35015.txt 2014-10-27 08:49 - 2014-10-27 08:49 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1194453.txt 2014-10-27 08:32 - 2014-11-06 17:46 - 00790022 _____ () C:\WINDOWS\system32\perfh00C.dat 2014-10-27 08:32 - 2014-11-06 17:46 - 00785550 _____ () C:\WINDOWS\system32\perfh013.dat 2014-10-27 08:32 - 2014-11-06 17:46 - 00780976 _____ () C:\WINDOWS\system32\perfh010.dat 2014-10-27 08:32 - 2014-11-06 17:46 - 00158586 _____ () C:\WINDOWS\system32\perfc013.dat 2014-10-27 08:32 - 2014-11-06 17:46 - 00155084 _____ () C:\WINDOWS\system32\perfc00C.dat 2014-10-27 08:32 - 2014-11-06 17:46 - 00152608 _____ () C:\WINDOWS\system32\perfc010.dat 2014-10-27 08:32 - 2014-10-27 08:32 - 00000136 _____ () C:\WINDOWS\system32\netcfg-186546.txt 2014-10-27 08:32 - 2014-10-27 08:32 - 00000134 _____ () C:\WINDOWS\system32\netcfg-186390.txt 2014-10-27 08:32 - 2014-10-27 08:32 - 00000134 _____ () C:\WINDOWS\system32\netcfg-184984.txt 2014-10-27 08:32 - 2014-10-27 08:10 - 00347474 _____ () C:\WINDOWS\system32\perfi013.dat 2014-10-27 08:32 - 2014-10-27 08:10 - 00045378 _____ () C:\WINDOWS\system32\perfd013.dat 2014-10-27 08:32 - 2014-10-27 08:08 - 00340806 _____ () C:\WINDOWS\system32\perfi010.dat 2014-10-27 08:32 - 2014-10-27 08:08 - 00039784 _____ () C:\WINDOWS\system32\perfd010.dat 2014-10-27 08:32 - 2014-10-27 08:06 - 00350772 _____ () C:\WINDOWS\system32\perfi00C.dat 2014-10-27 08:32 - 2014-10-27 08:06 - 00040528 _____ () C:\WINDOWS\system32\perfd00C.dat 2014-10-27 08:31 - 2014-10-27 08:31 - 00000117 _____ () C:\WINDOWS\system32\netcfg-68156.txt 2014-10-27 08:29 - 2014-10-27 08:29 - 00000117 _____ () C:\WINDOWS\system32\netcfg-3310250.txt 2014-10-27 08:27 - 2014-10-27 08:27 - 00000000 ____D () C:\WINDOWS\SysWOW64\nl 2014-10-27 08:27 - 2014-10-27 08:27 - 00000000 ____D () C:\WINDOWS\SysWOW64\0413 2014-10-27 08:26 - 2014-10-27 08:26 - 00000000 ____D () C:\WINDOWS\system32\nl 2014-10-27 08:26 - 2014-10-27 08:26 - 00000000 ____D () C:\WINDOWS\system32\0413 2014-10-27 08:25 - 2014-10-27 08:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\it 2014-10-27 08:25 - 2014-10-27 08:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\0410 2014-10-27 08:24 - 2014-10-27 08:24 - 00000000 ____D () C:\WINDOWS\system32\it 2014-10-27 08:24 - 2014-10-27 08:24 - 00000000 ____D () C:\WINDOWS\system32\0410 2014-10-27 08:23 - 2014-10-27 08:23 - 00000000 ____D () C:\WINDOWS\SysWOW64\fr 2014-10-27 08:23 - 2014-10-27 08:23 - 00000000 ____D () C:\WINDOWS\SysWOW64\040C 2014-10-27 08:22 - 2014-10-27 08:22 - 00000000 ____D () C:\WINDOWS\system32\fr 2014-10-27 08:22 - 2014-10-27 08:22 - 00000000 ____D () C:\WINDOWS\system32\040C 2014-10-27 07:37 - 2014-10-27 07:37 - 00000117 _____ () C:\WINDOWS\system32\netcfg-199109.txt 2014-10-27 07:36 - 2014-10-27 07:36 - 00000136 _____ () C:\WINDOWS\system32\netcfg-134640.txt 2014-10-27 07:36 - 2014-10-27 07:36 - 00000134 _____ () C:\WINDOWS\system32\netcfg-134515.txt 2014-10-27 07:36 - 2014-10-27 07:36 - 00000134 _____ () C:\WINDOWS\system32\netcfg-133718.txt 2014-10-27 07:34 - 2014-10-27 07:34 - 00000117 _____ () C:\WINDOWS\system32\netcfg-19679875.txt 2014-10-27 07:15 - 2014-10-27 08:26 - 00000000 ____D () C:\sources 2014-10-27 06:47 - 2014-10-28 00:18 - 00001446 _____ () C:\Users\Lukas\Desktop\SAMP.lnk 2014-10-27 06:47 - 2014-10-27 06:47 - 01199079 _____ () C:\WINDOWS\unins000.exe 2014-10-27 06:47 - 2014-10-27 06:47 - 00008115 _____ () C:\WINDOWS\unins000.dat 2014-10-27 06:46 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer 2014-10-27 06:46 - 2014-10-27 06:46 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer 2014-10-27 06:35 - 2014-11-06 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games 2014-10-27 06:35 - 2014-10-27 06:48 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games 2014-10-27 06:35 - 2014-10-27 06:35 - 00002032 _____ () C:\Users\Public\Desktop\GTA San Andreas.lnk 2014-10-27 04:53 - 2014-11-12 20:36 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-10-27 04:53 - 2014-11-12 20:34 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-10-27 03:57 - 2014-10-27 03:57 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\WinRAR 2014-10-27 03:49 - 2014-11-12 21:27 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-10-27 03:49 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-10-27 03:49 - 2014-10-27 03:49 - 00000969 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-10-27 03:26 - 2014-11-12 22:59 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Skype 2014-10-27 03:26 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-10-27 03:26 - 2014-10-30 16:40 - 00000000 ____D () C:\ProgramData\Skype 2014-10-27 03:26 - 2014-10-27 03:26 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-10-27 03:26 - 2014-10-27 03:26 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-10-27 03:26 - 2014-10-27 03:26 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Skype 2014-10-27 03:22 - 2014-11-06 19:22 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-10-27 03:22 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-10-27 03:22 - 2014-10-27 03:22 - 00000000 ____D () C:\Program Files\WinRAR 2014-10-27 03:15 - 2014-11-01 22:42 - 00000000 ____D () C:\upx 2014-10-27 03:03 - 2014-11-11 15:23 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Spotify 2014-10-27 03:03 - 2014-10-27 03:03 - 00001806 _____ () C:\Users\Lukas\Desktop\Spotify.lnk 2014-10-27 03:03 - 2014-10-27 03:03 - 00001792 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-10-27 03:02 - 2014-11-12 20:46 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Spotify 2014-10-27 03:00 - 2014-11-01 02:12 - 00000000 ____D () C:\Users\Lukas\Desktop\News Reporter 2014-10-27 02:57 - 2013-05-04 05:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs 2014-10-27 02:57 - 2013-05-04 05:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs 2014-10-27 02:52 - 2014-11-12 22:09 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\TS3Client 2014-10-27 02:51 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2014-10-27 02:51 - 2014-10-27 02:51 - 00001180 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-10-27 02:51 - 2014-10-27 02:51 - 00001168 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk 2014-10-27 02:51 - 2014-10-27 02:51 - 00000969 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-10-27 02:51 - 2014-10-27 02:51 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client 2014-10-27 02:51 - 2014-10-27 02:51 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2014-10-27 02:48 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-10-27 02:48 - 2014-10-27 02:48 - 00000824 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-10-27 02:48 - 2014-10-27 02:48 - 00000000 ____D () C:\Program Files\CCleaner 2014-10-27 02:46 - 2014-11-12 22:53 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\vlc 2014-10-27 02:45 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-10-27 02:45 - 2014-10-27 02:45 - 00001072 _____ () C:\Users\Public\Desktop\VLC Media Player.lnk 2014-10-27 02:45 - 2014-10-27 02:45 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-10-27 02:44 - 2014-10-27 02:44 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Macromedia 2014-10-27 02:40 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Alarm Clock 2014-10-27 02:40 - 2014-10-27 02:40 - 00001085 _____ () C:\Users\Lukas\Desktop\Free Alarm Clock.lnk 2014-10-27 02:40 - 2014-10-27 02:40 - 00000000 ____D () C:\Program Files (x86)\FreeAlarmClock 2014-10-27 02:34 - 2014-10-27 02:34 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\ProductData 2014-10-27 02:33 - 2014-11-07 22:00 - 00000000 ____D () C:\ProgramData\ProductData 2014-10-27 02:33 - 2014-11-07 15:45 - 00000290 _____ () C:\WINDOWS\Tasks\Uninstaller_SkipUac_Lukas.job 2014-10-27 02:33 - 2014-10-27 02:34 - 00000000 ____D () C:\ProgramData\IObit 2014-10-27 02:33 - 2014-10-27 02:33 - 00001258 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-10-27 02:33 - 2014-10-27 02:33 - 00001234 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-10-27 02:33 - 2014-10-27 02:33 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\IObit 2014-10-27 02:33 - 2014-10-27 02:33 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-10-27 02:30 - 2014-11-12 22:38 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-10-27 02:30 - 2014-11-11 20:38 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-10-27 02:18 - 2014-10-27 02:18 - 00000000 ____D () C:\ProgramData\delight software gmbh 2014-10-27 02:17 - 2014-10-27 02:17 - 00000000 ____D () C:\Users\Lukas\Desktop\Rammstein 2014-10-27 02:14 - 2014-11-12 22:47 - 02368000 ___SH () C:\Users\Lukas\Desktop\Thumbs.db 2014-10-27 02:13 - 2014-11-11 23:05 - 00000000 ____D () C:\Users\Lukas\Desktop\Ordner 2014-10-27 02:11 - 2014-10-27 02:32 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Adobe 2014-10-27 02:09 - 2014-10-27 02:09 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-10-27 02:06 - 2014-10-27 02:06 - 00000117 _____ () C:\WINDOWS\system32\netcfg-31984.txt 2014-10-27 02:05 - 2014-10-27 02:05 - 00000117 _____ () C:\WINDOWS\system32\netcfg-201515.txt 2014-10-27 02:04 - 2014-10-27 02:04 - 00003542 _____ () C:\WINDOWS\System32\Tasks\ASUS Touchpad Launcher (x64) 2014-10-27 02:03 - 2014-10-27 02:03 - 00000117 _____ () C:\WINDOWS\system32\netcfg-67656.txt 2014-10-27 02:02 - 2014-10-27 02:02 - 00000117 _____ () C:\WINDOWS\system32\netcfg-3727843.txt 2014-10-27 01:57 - 2014-11-12 22:40 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\ClassicShell 2014-10-27 01:57 - 2014-10-27 01:57 - 00000000 ____D () C:\ProgramData\ClassicShell 2014-10-27 01:56 - 2014-11-12 20:32 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3695118925-1818860434-2304311968-1002 2014-10-27 01:56 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell 2014-10-27 01:56 - 2014-10-27 01:56 - 00000000 ____D () C:\Program Files\Classic Shell 2014-10-27 01:55 - 2014-11-10 16:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-10-27 01:55 - 2014-10-27 01:56 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Mozilla 2014-10-27 01:55 - 2014-10-27 01:56 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Mozilla 2014-10-27 01:55 - 2014-10-27 01:55 - 06869696 _____ (IvoSoft) C:\Users\Lukas\Downloads\ClassicShellSetup_4_1_0-de.exe 2014-10-27 01:55 - 2014-10-27 01:55 - 06791360 _____ (IvoSoft) C:\Users\Lukas\Downloads\ClassicShellSetup_4_1_0.exe 2014-10-27 01:55 - 2014-10-27 01:55 - 00001165 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-10-27 01:55 - 2014-10-27 01:55 - 00001153 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-10-27 01:55 - 2014-10-27 01:55 - 00000000 ____D () C:\ProgramData\Mozilla 2014-10-27 01:54 - 2014-10-27 01:54 - 00244032 _____ () C:\Users\Lukas\Downloads\Firefox Setup Stub 33.0.exe 2014-10-27 01:53 - 2014-10-27 01:53 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Macromedia 2014-10-27 01:49 - 2014-10-27 01:49 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\ASUS WebStorage 2014-10-27 01:48 - 2014-10-27 01:48 - 00000408 _____ () C:\Users\Lukas\AppData\Roaming\sp_data.sys 2014-10-27 01:48 - 2014-10-27 01:48 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-10-27 01:47 - 2014-10-27 02:11 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Adobe 2014-10-27 01:47 - 2014-10-27 01:47 - 00000000 ____D () C:\ProgramData\FolderView 2014-10-27 01:46 - 2014-11-07 22:00 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Packages 2014-10-27 01:46 - 2014-10-28 01:23 - 00000000 ____D () C:\Users\Lukas\AppData\Local\VirtualStore 2014-10-27 01:46 - 2014-10-27 22:01 - 00000000 ____D () C:\Users\Lukas\AppData\Local\ASUS 2014-10-27 01:42 - 2014-10-27 01:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2561171.txt 2014-10-27 01:42 - 2014-10-27 01:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2558140.txt 2014-10-27 01:42 - 2014-10-27 01:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2558109.txt 2014-10-27 01:42 - 2014-10-27 01:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2552468.txt 2014-10-27 01:00 - 2014-11-06 19:04 - 00000000 __SHD () C:\Recovery ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-12 22:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-11-12 20:37 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2014-11-12 20:34 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-11-12 12:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-11-12 02:28 - 2014-09-24 07:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-11-12 02:28 - 2014-09-24 06:43 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat 2014-11-12 02:28 - 2014-09-24 06:43 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat 2014-11-09 17:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-11-07 22:05 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-11-07 21:59 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-11-07 21:59 - 2013-08-22 15:44 - 00338072 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-11-07 21:58 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-11-07 21:57 - 2014-09-24 08:43 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel 2014-11-07 21:57 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-11-07 21:57 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-11-07 18:08 - 2014-09-24 07:00 - 00000000 ____D () C:\WINDOWS\ShellNew 2014-11-07 15:53 - 2012-10-23 15:31 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-11-06 22:59 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-11-06 22:59 - 2013-08-22 12:22 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll 2014-11-06 22:59 - 2013-08-22 12:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe 2014-11-06 22:59 - 2013-08-22 12:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll 2014-11-06 22:59 - 2013-08-22 12:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll 2014-11-06 22:59 - 2013-08-22 12:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll 2014-11-06 22:59 - 2013-08-22 05:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll 2014-11-06 22:59 - 2013-08-22 05:03 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe 2014-11-06 22:59 - 2013-08-22 04:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll 2014-11-06 22:59 - 2013-08-22 04:56 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll 2014-11-06 22:59 - 2013-08-22 04:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe 2014-11-06 22:59 - 2013-08-22 04:51 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll 2014-11-06 22:59 - 2013-08-22 04:51 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll 2014-11-06 22:59 - 2013-08-22 04:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll 2014-11-06 22:59 - 2013-08-22 04:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll 2014-11-06 19:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-11-06 19:32 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default 2014-11-06 19:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration 2014-11-06 19:29 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media 2014-11-06 19:28 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries 2014-11-06 19:22 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-11-06 19:22 - 2012-10-23 15:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-11-06 19:22 - 2012-10-23 15:33 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-11-06 19:22 - 2012-08-17 01:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\winrm 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\slmgr 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\winrm 2014-11-06 19:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-11-06 19:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-11-06 19:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2014-11-06 19:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2014-11-06 19:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\oobe 2014-11-06 19:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism 2014-11-06 19:21 - 2012-10-23 15:40 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-11-06 19:21 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated 2014-11-06 19:20 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-11-06 19:20 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\slmgr 2014-11-06 19:20 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\Printing_Admin_Scripts 2014-11-06 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-11-06 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform 2014-11-06 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-11-06 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-11-06 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-11-06 19:20 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-11-06 19:20 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism 2014-11-06 19:19 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2014-11-06 19:19 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2014-11-06 19:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions 2014-11-06 19:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME 2014-11-06 19:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help 2014-11-06 19:19 - 2012-10-23 15:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUSDVD 2014-11-06 19:19 - 2012-08-02 14:28 - 00000000 ____D () C:\ProgramData\PRICache 2014-11-06 19:18 - 2014-09-24 07:00 - 00000000 ____D () C:\Program Files\Windows Journal 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-11-06 19:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-11-06 19:04 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-11-06 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-11-06 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-11-06 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-11-04 02:04 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent 2014-10-27 07:35 - 2012-08-17 01:53 - 00000000 ____D () C:\ProgramData\McAfee 2014-10-27 02:37 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP 2014-10-27 02:04 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files (x86)\ASUS 2014-10-27 01:47 - 2012-08-02 14:33 - 00000000 ____D () C:\WINDOWS\Log Files to move or delete: ==================== C:\ProgramData\SetStretch.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-06 19:06 ==================== End Of Log ============================ |
12.11.2014, 23:05 | #4 |
| Eventuell Skype Virus eingefangen Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2014 Ran by Lukas at 2014-11-12 22:59:38 Running from C:\Users\Lukas\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated) Adobe Reader X MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.) ASUS Instant Connect (HKLM-x32\...\{89ECB85A-D933-4CEA-9116-5CBC9C2ED95B}) (Version: 1.2.8 - ASUS) ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.2 - ASUS) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.5 - ASUS) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.1.8 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.0.4 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 1.0.35 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.03.0004 - ASUS) ASUS Tutor (HKLM-x32\...\{58172D66-2F69-4215-9AEC-ED8196023736}) (Version: 1.0.7 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.4 - ASUS) ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.9.120 - ASUS Cloud Corporation) ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4126.52 - CyberLink Corp.) ASUSDVD (x32 Version: 10.0.4126.52 - CyberLink Corp.) Hidden AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.10.168 - ASUSTEK) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0022 - ASUS) AutoHotkey 1.1.16.05 (HKLM-x32\...\AutoHotkey) (Version: 1.1.16.05 - Lexikos) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2206 - AVAST Software) Bandicam (HKLM-x32\...\Bandicam) (Version: 2.1.0.708 - Bandisoft.com) Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com) CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform) Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft) CLEO 4.3 (HKLM-x32\...\{A8F37EB0-C741-41D7-8CAB-5B40ECEEF094}_is1) (Version: 4.3 - Seemann, Deji, Alien) F.E.A.R. 3 (HKLM-x32\...\Steam App 21100) (Version: - Day 1 Studios) Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment) Free Alarm Clock 3.1.0 (HKLM-x32\...\{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1) (Version: 3.1 - Comfort Software Group) Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.0.4.30 - IObit) Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation) Kingsoft Writer (8.1.0.3198) (HKLM-x32\...\Kingsoft Writer) (Version: 8.1.0.3198 - Kingsoft Corp.) Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve) Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 33.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 en-US)) (Version: 33.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0 - Mozilla) Notepad2-mod 4.2.25.935 (HKLM\...\Notepad2-mod_is1) (Version: 4.2.25.935 - XhmikosR) NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation) NVIDIA Grafiktreiber 344.60 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.60 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6716 - Realtek Semiconductor Corp.) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.8400.27023 - Realtek Semiconductor Corp.) Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version: - ) SciTE4AutoHotkey v3.0.06.01 (HKLM-x32\...\SciTE4AutoHotkey) (Version: v3.0.06.01 - fincs) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.) Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.14.15.201410271230 - Sony Mobile Communications Inc.) Sony PC Companion 2.10.228 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.228 - Sony) Spotify (HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) Windows-Treiberpaket - ASUS (ATP) Mouse (10/29/2012 1.0.0.148) (HKLM\...\C01F56FBD9B141017E63E2A1A141E59934D4DC67) (Version: 10/29/2012 1.0.0.148 - ASUS) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.41.1 - ASUS) WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 06-11-2014 21:59:00 Windows Modules Installer 12-11-2014 19:32:35 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1E15B74B-FBE0-410F-9C14-205BAB4522F7} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2012-10-31] (AsusTek) Task: {574C9967-37C2-4AB8-8D41-F330C0985836} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS) Task: {B996C8E7-A911-4E93-8E44-4E93B064C9D2} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-10-28] (AVAST Software) Task: {D8C4D7BA-252C-4344-A51D-88EFE9B90175} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-12] (Microsoft Corporation) Task: {DA73ADCD-8D9A-4AF1-99FE-2161FD093CBB} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-07-24] (ASUSTek Computer Inc.) Task: {E9D4DC6E-2C59-4D37-B749-95324A91B8D3} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-11] (Adobe Systems Incorporated) Task: {EEEC03E8-0172-4F90-954D-182B873D4F99} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2012-07-25] (ASUSTeK Computer Inc.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Lukas.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe Task: C:\WINDOWS\Tasks\WpsUpdateTask_Lukas.job => C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\wpsupdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-10-28 00:29 - 2014-10-28 00:29 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll 2014-10-28 00:29 - 2014-10-28 00:29 - 05846160 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll 2012-08-24 17:26 - 2012-08-24 17:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll 2013-10-01 13:02 - 2013-10-01 13:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 00117064 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-02-28 10:14 - 2014-02-28 10:14 - 00173568 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll 2014-02-27 15:51 - 2014-02-27 15:51 - 01080832 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll 2014-02-27 15:51 - 2014-02-27 15:51 - 00833024 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll 2014-08-04 14:43 - 2014-08-04 14:43 - 00102344 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll 2014-08-04 14:43 - 2014-08-04 14:43 - 00108488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll 2014-02-27 15:51 - 2014-02-27 15:51 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll 2014-02-27 15:51 - 2014-02-27 15:51 - 00233984 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll 2014-08-04 14:46 - 2014-08-04 14:46 - 00563656 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll 2014-08-04 14:46 - 2014-08-04 14:46 - 00579016 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll 2014-02-27 15:51 - 2014-02-27 15:51 - 00159232 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll 2014-10-27 03:03 - 2014-10-27 03:03 - 00613944 _____ () C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe 2014-10-28 00:29 - 2014-10-28 00:29 - 04491192 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll 2014-11-12 12:21 - 2014-11-12 12:21 - 02902016 _____ () C:\Program Files\AVAST Software\Avast\defs\14111200\algo.dll 2012-10-23 15:32 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2014-10-28 00:30 - 2014-10-28 00:30 - 38561576 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00010952 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll 2014-11-10 15:34 - 2014-11-10 15:34 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-10-27 03:03 - 2014-10-27 03:03 - 36966968 _____ () C:\Users\Lukas\AppData\Roaming\Spotify\Data\libcef.dll 2014-10-27 03:03 - 2014-10-27 03:03 - 00867896 _____ () C:\Users\Lukas\AppData\Roaming\Spotify\Data\ffmpegsumo.dll 2014-10-27 03:03 - 2014-10-27 03:03 - 00886840 _____ () C:\Users\Lukas\AppData\Roaming\Spotify\Data\libglesv2.dll 2014-10-27 03:03 - 2014-10-27 03:03 - 00108600 _____ () C:\Users\Lukas\AppData\Roaming\Spotify\Data\libegl.dll 2014-10-27 03:51 - 2014-11-11 19:48 - 01171456 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll 2014-10-27 03:51 - 2014-11-11 19:48 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll 2014-10-27 03:51 - 2014-11-11 19:48 - 00442368 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll 2014-10-27 03:51 - 2014-11-11 19:47 - 00774656 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2014-10-27 03:51 - 2014-11-12 02:04 - 02227904 _____ () C:\Program Files (x86)\Steam\video.dll 2014-10-27 03:51 - 2014-11-11 19:48 - 00403968 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll 2014-10-27 03:51 - 2014-11-11 19:48 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll 2014-10-27 03:51 - 2014-11-12 02:04 - 00690880 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2014-10-27 03:51 - 2014-11-11 19:48 - 34589888 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll 2014-10-27 03:51 - 2014-11-11 19:48 - 00837824 _____ () C:\Program Files (x86)\Steam\bin\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\Lukas\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\StartupFolder: => "AsusVibeLauncher.lnk" HKLM\...\StartupApproved\StartupFolder: => "AnyDesk.lnk" HKLM\...\StartupApproved\Run: => "ACMON" HKLM\...\StartupApproved\Run: => "ShadowPlay" HKLM\...\StartupApproved\Run: => "NvBackend" HKLM\...\StartupApproved\Run32: => "RemoteControl10" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKCU\...\StartupApproved\Run: => "Spotify Web Helper" HKCU\...\StartupApproved\Run: => "Spotify" HKCU\...\StartupApproved\Run: => "CCleaner Monitoring" HKCU\...\StartupApproved\Run: => "FreeAC" HKCU\...\StartupApproved\Run: => "Sony PC Companion" ========================= Accounts: ========================== Administrator (S-1-5-21-3695118925-1818860434-2304311968-500 - Administrator - Disabled) Gast (S-1-5-21-3695118925-1818860434-2304311968-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3695118925-1818860434-2304311968-1006 - Limited - Enabled) Lukas (S-1-5-21-3695118925-1818860434-2304311968-1002 - Administrator - Enabled) => C:\Users\Lukas ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/09/2014 07:58:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: F.E.A.R. 3.exe, Version: 16.0.20.1060, Zeitstempel: 0x4e0d0b76 Name des fehlerhaften Moduls: F.E.A.R. 3.exe, Version: 16.0.20.1060, Zeitstempel: 0x4e0d0b76 Ausnahmecode: 0xc000041d Fehleroffset: 0x007fa27f ID des fehlerhaften Prozesses: 0x1a30 Startzeit der fehlerhaften Anwendung: 0xF.E.A.R. 3.exe0 Pfad der fehlerhaften Anwendung: F.E.A.R. 3.exe1 Pfad des fehlerhaften Moduls: F.E.A.R. 3.exe2 Berichtskennung: F.E.A.R. 3.exe3 Vollständiger Name des fehlerhaften Pakets: F.E.A.R. 3.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: F.E.A.R. 3.exe5 Error: (11/09/2014 07:58:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: F.E.A.R. 3.exe, Version: 16.0.20.1060, Zeitstempel: 0x4e0d0b76 Name des fehlerhaften Moduls: F.E.A.R. 3.exe, Version: 16.0.20.1060, Zeitstempel: 0x4e0d0b76 Ausnahmecode: 0xc0000005 Fehleroffset: 0x007fa27f ID des fehlerhaften Prozesses: 0x1a30 Startzeit der fehlerhaften Anwendung: 0xF.E.A.R. 3.exe0 Pfad der fehlerhaften Anwendung: F.E.A.R. 3.exe1 Pfad des fehlerhaften Moduls: F.E.A.R. 3.exe2 Berichtskennung: F.E.A.R. 3.exe3 Vollständiger Name des fehlerhaften Pakets: F.E.A.R. 3.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: F.E.A.R. 3.exe5 Error: (11/08/2014 11:23:20 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: F.E.A.R. 3.exe, Version: 16.0.20.1060, Zeitstempel: 0x4e0d0b76 Name des fehlerhaften Moduls: F.E.A.R. 3.exe, Version: 16.0.20.1060, Zeitstempel: 0x4e0d0b76 Ausnahmecode: 0xc0000005 Fehleroffset: 0x007fa27f ID des fehlerhaften Prozesses: 0xe04 Startzeit der fehlerhaften Anwendung: 0xF.E.A.R. 3.exe0 Pfad der fehlerhaften Anwendung: F.E.A.R. 3.exe1 Pfad des fehlerhaften Moduls: F.E.A.R. 3.exe2 Berichtskennung: F.E.A.R. 3.exe3 Vollständiger Name des fehlerhaften Pakets: F.E.A.R. 3.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: F.E.A.R. 3.exe5 Error: (11/07/2014 03:47:47 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: setup.exe_Sony PC Companion, Version: 17.0.0.717, Zeitstempel: 0x4cab8cfa Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x60dfc9da ID des fehlerhaften Prozesses: 0xfc0 Startzeit der fehlerhaften Anwendung: 0xsetup.exe_Sony PC Companion0 Pfad der fehlerhaften Anwendung: setup.exe_Sony PC Companion1 Pfad des fehlerhaften Moduls: setup.exe_Sony PC Companion2 Berichtskennung: setup.exe_Sony PC Companion3 Vollständiger Name des fehlerhaften Pakets: setup.exe_Sony PC Companion4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: setup.exe_Sony PC Companion5 Error: (11/07/2014 03:47:41 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: setup.exe_Sony PC Companion, Version: 17.0.0.717, Zeitstempel: 0x4cab8cfa Name des fehlerhaften Moduls: DownloadManager.dll_unloaded, Version: 1.0.0.0, Zeitstempel: 0x53be652d Ausnahmecode: 0xc0000005 Fehleroffset: 0x000146f0 ID des fehlerhaften Prozesses: 0xfc0 Startzeit der fehlerhaften Anwendung: 0xsetup.exe_Sony PC Companion0 Pfad der fehlerhaften Anwendung: setup.exe_Sony PC Companion1 Pfad des fehlerhaften Moduls: setup.exe_Sony PC Companion2 Berichtskennung: setup.exe_Sony PC Companion3 Vollständiger Name des fehlerhaften Pakets: setup.exe_Sony PC Companion4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: setup.exe_Sony PC Companion5 Error: (11/04/2014 00:48:40 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (11/04/2014 00:46:56 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (11/04/2014 00:45:00 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (11/04/2014 00:43:45 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (11/04/2014 00:41:25 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". System errors: ============= Error: (11/12/2014 09:27:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (11/12/2014 09:27:33 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (11/06/2014 07:31:53 PM) (Source: NETLOGON) (EventID: 3095) (User: ) Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser Konfiguration nicht gestartet zu sein. Error: (11/06/2014 07:31:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (11/06/2014 07:31:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (11/06/2014 07:31:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (11/06/2014 07:31:27 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (11/06/2014 07:31:27 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (11/06/2014 07:31:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (11/06/2014 07:06:57 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "IP-Hilfsdienst" wurde mit folgendem Fehler beendet: %%1058 Microsoft Office Sessions: ========================= Error: (11/09/2014 07:58:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: F.E.A.R. 3.exe16.0.20.10604e0d0b76F.E.A.R. 3.exe16.0.20.10604e0d0b76c000041d007fa27f1a3001cffc4e346d274bC:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exeC:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exe668bad37-6842-11e4-be7e-08606e016200 Error: (11/09/2014 07:58:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: F.E.A.R. 3.exe16.0.20.10604e0d0b76F.E.A.R. 3.exe16.0.20.10604e0d0b76c0000005007fa27f1a3001cffc4e346d274bC:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exeC:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exe6590f5b1-6842-11e4-be7e-08606e016200 Error: (11/08/2014 11:23:20 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: F.E.A.R. 3.exe16.0.20.10604e0d0b76F.E.A.R. 3.exe16.0.20.10604e0d0b76c0000005007fa27fe0401cffb9decb38880C:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exeC:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exed7f7eb29-6795-11e4-be7e-08606e016200 Error: (11/07/2014 03:47:47 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: setup.exe_Sony PC Companion17.0.0.7174cab8cfaunknown0.0.0.000000000c000000560dfc9dafc001cffa99712f6e53C:\Users\Lukas\AppData\Local\Temp\{936BFF87-0C44-4800-AA8E-CA6F10D1BAC4}\setup.exeunknown09d023aa-668d-11e4-be7d-08606e016200 Error: (11/07/2014 03:47:41 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: setup.exe_Sony PC Companion17.0.0.7174cab8cfaDownloadManager.dll_unloaded1.0.0.053be652dc0000005000146f0fc001cffa99712f6e53C:\Users\Lukas\AppData\Local\Temp\{936BFF87-0C44-4800-AA8E-CA6F10D1BAC4}\setup.exeDownloadManager.dll05f6d608-668d-11e4-be7d-08606e016200 Error: (11/04/2014 00:48:40 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exe Error: (11/04/2014 00:46:56 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exe Error: (11/04/2014 00:45:00 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Steam\SteamApps\common\F.E.A.R. 3\F.E.A.R. 3.exe Error: (11/04/2014 00:43:45 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exe Error: (11/04/2014 00:41:25 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Steam\steamapps\common\F.E.A.R. 3\F.E.A.R. 3.exe ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz Percentage of memory in use: 39% Total physical RAM: 8077.48 MB Available physical RAM: 4852.77 MB Total Pagefile: 9997.48 MB Available Pagefile: 6513.32 MB Total Virtual: 131072 MB Available Virtual: 131071.83 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:372.17 GB) (Free:256.26 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (DATA) (Fixed) (Total:537.89 GB) (Free:537.06 GB) NTFS Drive e: (F.E.A.R. 3) (CDROM) (Total:4.32 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: B19F8D36) Partition: GPT Partition Type. ==================== End Of Log ============================ |
12.11.2014, 23:18 | #5 |
| Eventuell Skype Virus eingefangen Schritt 1 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte Malwarebytes Anti-Malware
Schritt 3 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 4 Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan. Bitte poste mir die Inhalte der Logs von Adwarecleaner, MBAM, JRT und FRST hier in den Thread.
__________________ Proud member of Unite |
13.11.2014, 00:02 | #6 |
| Eventuell Skype Virus eingefangen Ist der AdwCleaner nicht eher für Adware? Und hast du etwas entdeckt? AdwCleanerS0.txt Code:
ATTFilter # AdwCleaner v4.101 - Bericht erstellt am 12/11/2014 um 23:27:20 # Aktualisiert 09/11/2014 von Xplode # Database : 2014-11-12.2 [Live] # Betriebssystem : Windows 8.1 (64 bits) # Benutzername : Lukas - LUKAS # Gestartet von : C:\Users\Lukas\Desktop\AdwCleaner_4.101.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094 ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17344 -\\ Mozilla Firefox v33.1 (x86 en-US) ************************* AdwCleaner[R0].txt - [985 octets] - [12/11/2014 23:25:40] AdwCleaner[S0].txt - [857 octets] - [12/11/2014 23:27:20] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [916 octets] ########## Der Rest folgt. mbam.txt Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 12.11.2014 Suchlauf-Zeit: 23:37:17 Logdatei: mwb.txt Administrator: Ja Version: 2.00.3.1025 Malware Datenbank: v2014.11.12.10 Rootkit Datenbank: v2014.11.12.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Lukas Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 319957 Verstrichene Zeit: 14 Min, 38 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 0 (Keine schädliche Elemente erkannt) Registrierungswerte: 0 (Keine schädliche Elemente erkannt) Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 0 (Keine schädliche Elemente erkannt) Dateien: 0 (Keine schädliche Elemente erkannt) Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.3.7 (11.08.2014:1) OS: Windows 8.1 x64 Ran by Lukas on 12.11.2014 at 23:58:28,83 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ FireFox Successfully deleted the following from C:\Users\Lukas\AppData\Roaming\mozilla\firefox\profiles\n7u5029c.default\prefs.js user_pref("extensions.speeddial.thumbnail-8-label", "Play Free Online Games | Pogo.com®"); user_pref("extensions.speeddial.thumbnail-8-url", "hxxp://pogo.com"); Emptied folder: C:\Users\Lukas\AppData\Roaming\mozilla\firefox\profiles\n7u5029c.default\minidumps [1 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 13.11.2014 at 0:01:19,39 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
13.11.2014, 00:05 | #7 |
| Eventuell Skype Virus eingefangen FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014 Ran by Lukas (administrator) on LUKAS on 13-11-2014 00:02:29 Running from C:\Users\Lukas\Desktop Loaded Profile: Lukas (Available profiles: Lukas) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor) HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS) HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5223016 2014-11-01] (AVAST Software) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Run: [FreeAC] => C:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe [1553688 2014-02-20] (Comfort Software Group) HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd) HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Run: [Spotify] => C:\Users\Lukas\AppData\Roaming\Spotify\Spotify.exe [6553144 2014-10-27] (Spotify Ltd) HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Run: [Spotify Web Helper] => C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-10-27] (Spotify Ltd) HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [468192 2014-09-01] (Sony) AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL File Not Found AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-10-30] (NVIDIA Corporation) AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [174856 2014-10-30] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156840 2014-10-30] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) Tcpip\Parameters: [DhcpNameServer] 192.168.11.1 FireFox: ======== FF ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default FF Homepage: chrome://speeddial/content/speeddial.xul FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml FF Extension: YouTube Downloader & Converter - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\youtube@downloader.yt [2014-10-27] FF Extension: YouTube Unblocker - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\youtubeunblocker@unblocker.yt [2014-11-07] FF Extension: WOT - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-10-27] FF Extension: Video Downloader professional - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\ffext_basicvideoext@startpage24.xpi [2014-10-27] FF Extension: MEGA - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\firefox@mega.co.nz.xpi [2014-11-06] FF Extension: Google Search by Image - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\google@hitachi.com.xpi [2014-10-27] FF Extension: Deutsch (DE) Language Pack - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-10-27] FF Extension: Secure Login - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\secureLogin@blueimp.net.xpi [2014-10-27] FF Extension: Flagfox - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-10-27] FF Extension: Speed Dial - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2014-10-27] FF Extension: RightToClick - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\{cd617375-6743-4ee8-bac4-fbf10f35729e}.xpi [2014-10-27] FF Extension: Adblock Plus - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\n7u5029c.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-27] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-28] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-10-28] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-10-28] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-28] (AVAST Software) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-10-28] (Avast Software) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation) S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-09-24] (Microsoft Corporation) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2283296 2014-10-27] (IObit) S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-09-24] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation) S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation) S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-10-28] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-01] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-10-28] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-10-28] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-01] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-10-28] (AVAST Software) S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-10-28] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-10-28] () R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation) S3 ggsomc; C:\Windows\System32\drivers\ggsomc.sys [30424 2014-11-07] (Sony Mobile Communications) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [270728 2014-10-28] (Avast Software) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-13 00:01 - 2014-11-13 00:01 - 00001034 _____ () C:\Users\Lukas\Desktop\JRT.txt 2014-11-12 23:58 - 2014-11-12 23:58 - 00000000 ____D () C:\WINDOWS\ERUNT 2014-11-12 23:57 - 2014-11-12 23:57 - 01706808 _____ (Thisisu) C:\Users\Lukas\Desktop\JRT.exe 2014-11-12 23:56 - 2014-11-12 23:56 - 00001189 _____ () C:\Users\Lukas\Desktop\mwb.txt 2014-11-12 23:36 - 2014-11-12 23:36 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-11-12 23:36 - 2014-11-12 23:36 - 00001120 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-11-12 23:36 - 2014-11-12 23:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-11-12 23:36 - 2014-11-12 23:36 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-11-12 23:36 - 2014-11-12 23:36 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-11-12 23:36 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-11-12 23:36 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2014-11-12 23:36 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-11-12 23:34 - 2014-11-12 23:35 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Lukas\Desktop\mbam-setup-2.0.3.1025.exe 2014-11-12 23:32 - 2014-11-12 23:32 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-11-12 23:32 - 2014-11-12 23:32 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-11-12 23:31 - 2014-11-12 23:31 - 00001756 _____ () C:\WINDOWS\PFRO.log 2014-11-12 23:25 - 2014-11-12 23:27 - 00000000 ____D () C:\AdwCleaner 2014-11-12 23:25 - 2014-11-12 23:25 - 02140160 _____ () C:\Users\Lukas\Desktop\AdwCleaner_4.101.exe 2014-11-12 22:59 - 2014-11-12 23:00 - 00029939 _____ () C:\Users\Lukas\Desktop\Addition.txt 2014-11-12 22:58 - 2014-11-13 00:02 - 00019134 _____ () C:\Users\Lukas\Desktop\FRST.txt 2014-11-12 22:57 - 2014-11-12 22:58 - 02116096 _____ (Farbar) C:\Users\Lukas\Desktop\FRST64.exe 2014-11-12 18:32 - 2014-11-12 22:44 - 00000162 _____ () C:\Users\Lukas\Desktop\links.txt 2014-11-12 13:20 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-11-12 13:20 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys 2014-11-12 13:20 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-11-12 13:20 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-11-12 13:20 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll 2014-11-12 13:20 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2014-11-12 13:20 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll 2014-11-12 13:20 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2014-11-12 13:20 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll 2014-11-12 13:20 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll 2014-11-12 13:20 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2014-11-12 13:20 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-11-12 13:20 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2014-11-12 13:20 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2014-11-12 13:20 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2014-11-12 13:20 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2014-11-12 13:20 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2014-11-12 13:20 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2014-11-12 13:19 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-11-12 13:19 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-11-12 13:19 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2014-11-12 13:19 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2014-11-12 13:19 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll 2014-11-12 13:19 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-11-12 13:19 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-11-12 13:19 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-11-12 13:19 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-11-12 13:19 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-11-12 13:19 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-11-12 13:19 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-11-12 13:19 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-11-12 13:19 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-11-12 13:19 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-11-12 13:19 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-11-12 13:19 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2014-11-12 13:19 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2014-11-12 13:19 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe 2014-11-12 13:19 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2014-11-12 13:19 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2014-11-12 13:19 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2014-11-12 13:19 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll 2014-11-12 13:19 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll 2014-11-12 13:19 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-11-12 13:19 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-11-12 13:19 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2014-11-12 13:19 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-11-12 13:19 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-11-12 13:19 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2014-11-12 13:18 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-11-12 13:18 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-11-12 13:18 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-11-12 13:18 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll 2014-11-12 13:18 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll 2014-11-12 13:17 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe 2014-11-12 13:17 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe 2014-11-12 13:17 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe 2014-11-12 13:17 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll 2014-11-12 13:17 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe 2014-11-12 13:17 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-11-12 13:17 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll 2014-11-12 13:17 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-11-12 13:17 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-11-12 13:17 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-11-12 13:17 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec 2014-11-12 13:17 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2014-11-12 13:17 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-11-12 13:17 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-11-12 13:17 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll 2014-11-12 13:17 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2014-11-12 13:17 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2014-11-12 13:17 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2014-11-12 13:17 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-11-12 13:17 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-11-12 13:17 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-11-12 13:17 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-11-12 13:17 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll 2014-11-12 13:17 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2014-11-12 13:17 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll 2014-11-12 13:17 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll 2014-11-12 13:17 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2014-11-12 13:17 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll 2014-11-12 13:17 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-11-12 13:17 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-11-12 13:17 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2014-11-12 13:17 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2014-11-12 13:17 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-11-12 13:17 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll 2014-11-12 13:17 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2014-11-12 13:17 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2014-11-12 13:17 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2014-11-12 13:17 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-11-12 13:17 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-11-12 13:17 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-11-12 13:17 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-11-12 13:17 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-11-12 13:17 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-11-12 13:17 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll 2014-11-12 13:17 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-11-12 13:17 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe 2014-11-12 13:17 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe 2014-11-12 13:17 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe 2014-11-12 13:17 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll 2014-11-12 13:17 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe 2014-11-12 13:17 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-11-12 13:17 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll 2014-11-12 13:17 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-11-12 13:17 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec 2014-11-12 13:17 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-11-12 13:17 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2014-11-12 13:17 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-11-12 13:17 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-11-12 13:17 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-11-12 13:17 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-11-12 13:17 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll 2014-11-12 13:17 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2014-11-12 13:17 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2014-11-12 13:17 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2014-11-12 13:17 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-11-12 13:17 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-11-12 13:17 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll 2014-11-12 13:17 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-11-12 13:17 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll 2014-11-12 13:17 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll 2014-11-12 13:17 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll 2014-11-12 13:17 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2014-11-12 13:17 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-11-12 13:17 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll 2014-11-12 13:17 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-11-12 13:17 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2014-11-12 13:17 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-11-12 13:17 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll 2014-11-12 13:17 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-11-12 13:17 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2014-11-12 13:17 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2014-11-12 13:17 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-11-12 13:17 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2014-11-12 13:17 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-11-12 13:17 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-11-12 13:17 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-11-12 13:17 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll 2014-11-12 13:17 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-11-12 13:17 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-11-12 13:17 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-11-12 13:16 - 2014-11-05 00:38 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll 2014-11-12 13:16 - 2014-11-04 01:10 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2014-11-12 13:16 - 2014-10-31 05:53 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2014-11-12 13:16 - 2014-10-31 05:49 - 00537088 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2014-11-12 13:16 - 2014-10-31 05:24 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2014-11-12 13:16 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll 2014-11-12 13:16 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll 2014-11-12 13:16 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-11-12 13:16 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-11-12 13:16 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-11-12 13:16 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-11-12 13:16 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2014-11-12 13:16 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2014-11-12 13:16 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-11-12 13:16 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2014-11-12 13:16 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-11-12 13:16 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-11-12 13:16 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-11-12 13:16 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2014-11-12 13:16 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-11-12 13:16 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-11-12 13:16 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-11-12 13:16 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2014-11-12 13:16 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-11-12 13:16 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2014-11-12 13:16 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2014-11-12 13:16 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2014-11-12 13:16 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2014-11-12 13:16 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2014-11-12 13:16 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-11-12 13:16 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-11-12 13:16 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll 2014-11-12 13:16 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll 2014-11-12 13:16 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-11-12 13:16 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll 2014-11-12 13:16 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-11-12 13:16 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-11-12 13:16 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-11-12 13:16 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2014-11-12 13:16 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-11-12 13:16 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-11-12 13:16 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-11-12 13:16 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-11-12 13:16 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-11-12 13:16 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll 2014-11-12 13:16 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll 2014-11-11 03:57 - 2014-11-12 23:54 - 00667878 _____ () C:\WINDOWS\WindowsUpdate.log 2014-11-10 15:34 - 2014-11-10 15:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-11-08 22:36 - 2014-10-30 05:53 - 31890064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 24554824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 20966504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 20922696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 19966856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 18497600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 17258696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 14029400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 13942368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 13189832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2014-11-08 22:36 - 2014-10-30 05:53 - 11395672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 11333848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 04289856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 04011840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 02849224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 01876296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434460.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 01539272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434460.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00961224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00932168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00922944 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00896144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00352016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00303600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2014-11-08 22:36 - 2014-10-30 05:53 - 00031560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2014-11-08 19:36 - 2014-11-08 19:36 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Day 1 Studios 2014-11-08 17:33 - 2014-11-08 17:33 - 00000295 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk 2014-11-07 22:00 - 2014-10-30 01:55 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-11-07 22:00 - 2014-10-30 01:55 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-11-07 21:57 - 2014-11-07 22:00 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-11-07 18:08 - 2014-11-07 18:08 - 00000386 _____ () C:\WINDOWS\Tasks\WpsUpdateTask_Lukas.job 2014-11-07 18:08 - 2014-11-07 18:08 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Kingsoft 2014-11-07 18:07 - 2014-11-07 18:07 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Kingsoft 2014-11-07 18:07 - 2014-11-07 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingsoft Writer 2014-11-07 18:07 - 2014-11-07 18:07 - 00000000 ____D () C:\ProgramData\Kingsoft 2014-11-07 18:07 - 2014-11-07 18:07 - 00000000 ____D () C:\Program Files (x86)\Kingsoft 2014-11-07 16:13 - 2014-11-07 16:13 - 00030424 _____ (Sony Mobile Communications) C:\WINDOWS\system32\Drivers\ggsomc.sys 2014-11-07 16:13 - 2014-11-07 16:13 - 00016088 _____ (Sony Mobile Communications) C:\WINDOWS\system32\Drivers\ggflt.sys 2014-11-07 15:53 - 2014-11-07 15:53 - 00002120 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk 2014-11-07 15:53 - 2014-11-07 15:53 - 00000000 ____D () C:\ProgramData\Sony 2014-11-07 15:53 - 2014-11-07 15:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony 2014-11-07 15:53 - 2014-11-07 15:53 - 00000000 ____D () C:\Program Files (x86)\Sony 2014-11-06 20:42 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys 2014-11-06 20:40 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-11-06 20:40 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-11-06 20:40 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll 2014-11-06 20:40 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll 2014-11-06 20:40 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-11-06 20:40 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-11-06 20:40 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2014-11-06 20:40 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-11-06 20:40 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-11-06 20:40 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2014-11-06 20:40 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-11-06 20:40 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll 2014-11-06 20:40 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-11-06 20:40 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2014-11-06 20:40 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll 2014-11-06 20:40 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-11-06 20:40 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll 2014-11-06 20:40 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2014-11-06 20:40 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2014-11-06 20:40 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll 2014-11-06 20:40 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-11-06 20:40 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-11-06 20:40 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-11-06 20:40 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-11-06 20:40 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-11-06 20:40 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-11-06 20:40 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-11-06 20:40 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-11-06 20:40 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-11-06 20:40 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-11-06 20:40 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-11-06 20:40 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-11-06 20:40 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-11-06 20:40 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-11-06 20:40 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-11-06 20:39 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2014-11-06 20:39 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2014-11-06 20:39 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2014-11-06 20:39 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll 2014-11-06 20:39 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2014-11-06 20:39 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2014-11-06 20:39 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2014-11-06 20:39 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2014-11-06 20:39 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll 2014-11-06 20:39 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll 2014-11-06 20:39 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll 2014-11-06 20:39 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll 2014-11-06 20:39 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll 2014-11-06 20:39 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll 2014-11-06 20:39 - 2014-05-03 00:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat 2014-11-06 20:39 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys 2014-11-06 20:39 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-11-06 20:39 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys 2014-11-06 20:39 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys 2014-11-06 20:39 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe 2014-11-06 20:39 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe 2014-11-06 20:39 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll 2014-11-06 20:39 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2014-11-06 20:39 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2014-11-06 20:39 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll 2014-11-06 20:39 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-11-06 20:39 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-11-06 20:39 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2014-11-06 20:39 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2014-11-06 20:39 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll 2014-11-06 20:39 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll 2014-11-06 20:39 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2014-11-06 20:39 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2014-11-06 20:39 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2014-11-06 20:39 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2014-11-06 20:39 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2014-11-06 20:39 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2014-11-06 20:38 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll 2014-11-06 20:38 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll 2014-11-06 20:38 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-11-06 20:38 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll 2014-11-06 20:38 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2014-11-06 20:38 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys 2014-11-06 20:38 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys 2014-11-06 20:38 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe 2014-11-06 20:38 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2014-11-06 20:38 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll 2014-11-06 20:38 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll 2014-11-06 20:38 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll 2014-11-06 19:36 - 2014-11-12 23:33 - 00000000 __RDO () C:\Users\Lukas\OneDrive 2014-11-06 19:33 - 2014-11-06 19:33 - 00001456 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-11-06 19:33 - 2014-11-06 19:33 - 00000020 ___SH () C:\Users\Lukas\ntuser.ini 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Programme 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-11-06 19:32 - 2014-11-06 19:32 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-11-06 19:31 - 2014-11-06 19:31 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-11-06 19:21 - 2014-11-06 19:21 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-11-06 19:16 - 2014-11-06 19:16 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-11-06 19:15 - 2014-11-06 19:36 - 00000000 ____D () C:\Users\Lukas 2014-11-06 19:15 - 2014-11-06 19:31 - 00020958 _____ () C:\WINDOWS\diagwrn.xml 2014-11-06 19:15 - 2014-11-06 19:31 - 00020958 _____ () C:\WINDOWS\diagerr.xml 2014-11-06 19:15 - 2014-11-06 19:16 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-11-06 19:15 - 2014-11-06 19:16 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Vorlagen 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Startmenü 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Netzwerkumgebung 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Lokale Einstellungen 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Eigene Dateien 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Druckumgebung 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Documents\Eigene Musik 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Documents\Eigene Bilder 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\AppData\Local\Verlauf 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\AppData\Local\Anwendungsdaten 2014-11-06 19:15 - 2014-11-06 19:15 - 00000000 _SHDL () C:\Users\Lukas\Anwendungsdaten 2014-11-06 19:15 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-11-06 19:15 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-11-06 19:15 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-11-06 19:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-11-06 19:08 - 2014-11-08 22:37 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-11-06 19:08 - 2014-11-06 19:08 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-11-06 19:08 - 2014-11-06 19:08 - 00000000 ____D () C:\Program Files\Realtek 2014-11-06 19:08 - 2014-10-30 03:10 - 06880968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 03533632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 02558792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 01090704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 00935232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-11-06 19:08 - 2014-10-30 03:10 - 00385352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 00061640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-11-06 19:08 - 2014-10-27 01:34 - 04066553 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-11-06 19:07 - 2014-11-06 19:19 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-11-06 19:07 - 2014-11-06 19:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-11-06 19:07 - 2014-11-06 19:18 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-11-06 19:07 - 2014-11-06 19:18 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-11-06 19:07 - 2013-10-01 13:02 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2014-11-06 19:07 - 2013-10-01 13:02 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2014-11-06 19:04 - 2014-11-11 01:19 - 00000000 ___DC () C:\WINDOWS\Panther 2014-11-06 19:03 - 2014-11-06 19:03 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-11-06 19:03 - 2014-11-06 19:03 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe 2014-11-06 19:02 - 2014-11-06 19:02 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-11-06 19:02 - 2014-11-06 19:02 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-11-06 19:02 - 2014-11-06 19:02 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-11-06 18:55 - 2014-11-06 19:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-11-06 18:55 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-11-06 18:55 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files\MSBuild 2014-11-06 18:55 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-11-06 18:55 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-11-06 18:55 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2014-11-06 18:55 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-11-06 18:55 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2014-11-06 18:55 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-11-06 17:43 - 2014-11-06 17:43 - 00000000 ____D () C:\Users\Lukas\Desktop\Left4Uncut 2014-11-06 17:28 - 2014-11-07 16:12 - 00000000 ____D () C:\ProgramData\Sony Mobile 2014-11-06 17:28 - 2014-11-07 16:12 - 00000000 ____D () C:\Program Files (x86)\Sony Mobile 2014-11-03 17:04 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll 2014-11-03 17:04 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll 2014-11-03 17:04 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll 2014-11-03 17:04 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll 2014-11-03 17:04 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll 2014-11-03 17:04 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll 2014-11-03 17:01 - 2014-11-03 17:01 - 00000000 ____D () C:\Users\Lukas\AppData\Local\FalloutNV 2014-11-03 07:10 - 2014-11-03 07:10 - 00000221 _____ () C:\Users\Lukas\Desktop\Fallout New Vegas.url 2014-11-03 04:08 - 2014-11-03 04:08 - 00000000 ____D () C:\Users\Lukas\Documents\my games 2014-11-03 00:22 - 2014-11-04 00:40 - 00000221 _____ () C:\Users\Lukas\Desktop\F.E.A.R. 3.url 2014-11-03 00:21 - 2014-11-03 00:21 - 00000219 _____ () C:\Users\Lukas\Desktop\Left 4 Dead 2.url 2014-11-01 19:55 - 2014-11-01 19:55 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-11-01 19:51 - 2014-11-06 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam 2014-11-01 19:51 - 2014-11-01 19:51 - 00000994 _____ () C:\Users\Lukas\Desktop\Bandicam.lnk 2014-11-01 19:51 - 2014-11-01 19:51 - 00000000 ____D () C:\Users\Lukas\Documents\Bandicam 2014-11-01 19:51 - 2014-11-01 19:51 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\BANDISOFT 2014-11-01 19:51 - 2014-11-01 19:51 - 00000000 ____D () C:\Program Files (x86)\BandiMPEG1 2014-11-01 19:51 - 2014-11-01 19:51 - 00000000 ____D () C:\Program Files (x86)\Bandicam 2014-11-01 15:52 - 2014-11-05 19:21 - 00000000 ____D () C:\Users\Lukas\Desktop\Terroristen 2014-11-01 15:39 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SciTE4AutoHotkey 2014-11-01 15:39 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey 2014-11-01 15:39 - 2014-11-01 15:39 - 00000000 ____D () C:\Users\Lukas\Documents\AutoHotkey 2014-11-01 15:39 - 2014-11-01 15:39 - 00000000 ____D () C:\Program Files\AutoHotkey 2014-11-01 15:27 - 2014-11-01 15:27 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\NVIDIA 2014-11-01 02:45 - 2014-11-01 15:44 - 00000000 ____D () C:\ProgramData\AnyDesk 2014-11-01 02:18 - 2014-11-01 15:44 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\AnyDesk 2014-11-01 00:35 - 2014-11-01 00:35 - 00000197 _____ () C:\WINDOWS\system32\2014-10-31-23-35-39.039-AvastVBoxSVC.exe-3720.log 2014-11-01 00:33 - 2014-11-01 00:35 - 00000197 _____ () C:\WINDOWS\system32\2014-10-31-23-33-42.000-AvastVBoxSVC.exe-8644.log 2014-11-01 00:31 - 2014-11-01 00:31 - 00000197 _____ () C:\WINDOWS\system32\2014-10-31-23-31-37.044-AvastVBoxSVC.exe-9132.log 2014-10-31 21:14 - 2014-10-31 21:14 - 00001817 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Notepad2-mod.lnk 2014-10-31 21:14 - 2014-10-31 21:14 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Notepad2 2014-10-31 21:14 - 2014-10-31 21:14 - 00000000 ____D () C:\Program Files\Notepad2 2014-10-31 19:05 - 2014-11-06 19:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe 2014-10-31 18:06 - 2014-10-31 21:11 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Notepad++ 2014-10-31 16:03 - 2014-10-31 16:04 - 00000197 _____ () C:\WINDOWS\system32\2014-10-31-15-03-37.027-AvastVBoxSVC.exe-3152.log 2014-10-31 15:56 - 2014-11-07 00:16 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense 2014-10-31 12:23 - 2014-10-31 12:23 - 00000117 _____ () C:\WINDOWS\system32\netcfg-357125296.txt 2014-10-31 12:15 - 2014-10-31 12:15 - 00000117 _____ () C:\WINDOWS\system32\netcfg-356700531.txt 2014-10-31 02:59 - 2014-10-31 02:59 - 00000117 _____ () C:\WINDOWS\system32\netcfg-323332937.txt 2014-10-31 02:59 - 2014-10-31 02:59 - 00000117 _____ () C:\WINDOWS\system32\netcfg-323332828.txt 2014-10-31 01:57 - 2014-10-31 01:57 - 00000000 ____D () C:\Users\Lukas\AppData\Local\NVIDIA Corporation 2014-10-31 01:57 - 2014-10-31 01:57 - 00000000 ____D () C:\Users\Lukas\AppData\Local\NVIDIA 2014-10-31 01:57 - 2014-10-16 17:54 - 02800296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2014-10-31 01:57 - 2014-10-16 17:54 - 02197680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2014-10-31 01:57 - 2014-10-16 17:54 - 01715224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2014-10-31 01:57 - 2014-10-16 17:54 - 01291280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2014-10-31 01:56 - 2014-10-31 01:56 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-10-31 01:54 - 2014-10-30 05:53 - 16886168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 03237528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00987008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00870112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00174856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00156840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00027024 _____ () C:\WINDOWS\system32\nvinfo.pb 2014-10-31 01:54 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434448.dll 2014-10-31 01:54 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434448.dll 2014-10-31 01:54 - 2014-10-16 17:54 - 00038048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2014-10-31 01:54 - 2014-10-16 17:54 - 00034976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2014-10-31 01:54 - 2014-10-16 17:54 - 00032416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2014-10-30 23:09 - 2014-10-30 23:09 - 00000117 _____ () C:\WINDOWS\system32\netcfg-309532078.txt 2014-10-30 23:09 - 2014-10-30 23:09 - 00000117 _____ () C:\WINDOWS\system32\netcfg-309531656.txt 2014-10-30 18:27 - 2014-10-30 18:27 - 00000117 _____ () C:\WINDOWS\system32\netcfg-292582281.txt 2014-10-30 18:27 - 2014-10-30 18:27 - 00000117 _____ () C:\WINDOWS\system32\netcfg-292581750.txt 2014-10-30 17:58 - 2014-10-30 17:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-290867093.txt 2014-10-30 17:58 - 2014-10-30 17:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-290866828.txt 2014-10-30 13:17 - 2014-10-30 13:17 - 00000117 _____ () C:\WINDOWS\system32\netcfg-273973703.txt 2014-10-30 13:17 - 2014-10-30 13:17 - 00000117 _____ () C:\WINDOWS\system32\netcfg-273973093.txt 2014-10-29 20:56 - 2014-10-29 20:56 - 00000197 _____ () C:\WINDOWS\system32\2014-10-29-19-56-36.059-AvastVBoxSVC.exe-8800.log 2014-10-29 20:50 - 2014-11-11 01:19 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\TeamViewer 2014-10-29 19:34 - 2014-10-29 19:34 - 00000117 _____ () C:\WINDOWS\system32\netcfg-210236765.txt 2014-10-29 19:33 - 2014-10-29 19:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-210151156.txt 2014-10-29 15:32 - 2014-10-29 15:32 - 00000117 _____ () C:\WINDOWS\system32\netcfg-195703968.txt 2014-10-29 15:32 - 2014-10-29 15:32 - 00000117 _____ () C:\WINDOWS\system32\netcfg-195703640.txt 2014-10-29 00:57 - 2014-10-29 00:57 - 00000117 _____ () C:\WINDOWS\system32\netcfg-143195812.txt 2014-10-29 00:57 - 2014-10-29 00:57 - 00000117 _____ () C:\WINDOWS\system32\netcfg-143190640.txt 2014-10-28 21:31 - 2014-10-22 04:34 - 00010777 ____N () C:\WINDOWS\system32\AutoconfigV2.cab 2014-10-28 21:31 - 2014-10-22 04:33 - 00581016 ____N () C:\WINDOWS\system32\AutoUpdate.exe 2014-10-28 21:26 - 2014-10-28 21:26 - 00000117 _____ () C:\WINDOWS\system32\netcfg-130529171.txt 2014-10-28 21:26 - 2014-10-28 21:26 - 00000117 _____ () C:\WINDOWS\system32\netcfg-130529078.txt 2014-10-28 16:16 - 2014-10-28 16:16 - 00000117 _____ () C:\WINDOWS\system32\netcfg-111903562.txt 2014-10-28 16:16 - 2014-10-28 16:16 - 00000117 _____ () C:\WINDOWS\system32\netcfg-111903250.txt 2014-10-28 01:25 - 2014-10-28 01:25 - 00000247 _____ () C:\WINDOWS\system32\2014-10-28-00-25-32.069-aswFe.exe-8432.log 2014-10-28 01:23 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Resource Hacker 2014-10-28 01:23 - 2014-10-28 01:23 - 00000000 ____D () C:\Program Files (x86)\Resource Hacker 2014-10-28 01:20 - 2014-10-28 01:25 - 00000247 _____ () C:\WINDOWS\system32\2014-10-28-00-20-47.061-aswFe.exe-9184.log 2014-10-28 01:11 - 2014-10-29 20:55 - 00000197 _____ () C:\WINDOWS\system32\2014-10-28-00-11-04.088-AvastVBoxSVC.exe-1128.log 2014-10-28 00:59 - 2014-10-28 01:09 - 00000247 _____ () C:\WINDOWS\system32\2014-10-27-23-59-08.097-aswFe.exe-5636.log 2014-10-28 00:48 - 2014-10-28 00:57 - 00000247 _____ () C:\WINDOWS\system32\2014-10-27-23-48-59.099-aswFe.exe-7372.log 2014-10-28 00:48 - 2014-10-28 00:48 - 00000197 _____ () C:\WINDOWS\system32\2014-10-27-23-48-53.088-AvastVBoxSVC.exe-3524.log 2014-10-28 00:31 - 2014-11-06 19:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox 2014-10-28 00:31 - 2014-11-06 19:22 - 00000000 ____D () C:\WINDOWS\system32\vbox 2014-10-28 00:30 - 2014-11-06 19:35 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update 2014-10-28 00:30 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2014-10-28 00:30 - 2014-11-01 00:30 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys 2014-10-28 00:30 - 2014-11-01 00:30 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2014-10-28 00:30 - 2014-10-28 00:30 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-10-28 00:30 - 2014-10-28 00:30 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-10-28 00:30 - 2014-10-28 00:30 - 00001966 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2014-10-28 00:30 - 2014-10-28 00:30 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\AVAST Software 2014-10-28 00:29 - 2014-10-28 00:29 - 00000000 ____D () C:\Program Files\AVAST Software 2014-10-28 00:28 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-10-28 00:28 - 2014-10-28 00:29 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-10-28 00:28 - 2014-10-28 00:28 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2014-10-28 00:28 - 2014-10-28 00:28 - 00000000 ____D () C:\ProgramData\Sun 2014-10-28 00:28 - 2014-10-28 00:28 - 00000000 ____D () C:\ProgramData\Oracle 2014-10-28 00:27 - 2014-10-28 00:27 - 00000000 ____D () C:\Program Files (x86)\Java 2014-10-28 00:18 - 2014-11-13 00:02 - 00000000 ____D () C:\FRST 2014-10-27 22:01 - 2014-10-27 22:01 - 00000000 ____D () C:\Users\Lukas\Documents\ASUS 2014-10-27 22:01 - 2014-10-27 22:01 - 00000000 ____D () C:\ProgramData\ASUS 2014-10-27 19:55 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll 2014-10-27 19:55 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll 2014-10-27 19:55 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll 2014-10-27 19:55 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll 2014-10-27 19:55 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll 2014-10-27 19:55 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll 2014-10-27 19:55 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll 2014-10-27 19:55 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll 2014-10-27 19:55 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll 2014-10-27 19:55 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll 2014-10-27 19:55 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll 2014-10-27 19:55 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll 2014-10-27 19:55 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll 2014-10-27 19:55 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll 2014-10-27 19:55 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll 2014-10-27 19:55 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll 2014-10-27 19:55 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll 2014-10-27 19:55 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll 2014-10-27 19:55 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll 2014-10-27 19:55 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2014-10-27 19:55 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll 2014-10-27 19:55 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2014-10-27 19:55 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll 2014-10-27 19:55 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2014-10-27 19:55 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll 2014-10-27 19:55 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll 2014-10-27 19:55 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll 2014-10-27 19:55 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll 2014-10-27 19:55 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll 2014-10-27 19:55 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll 2014-10-27 19:55 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll 2014-10-27 19:55 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll 2014-10-27 19:55 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll 2014-10-27 19:55 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll 2014-10-27 19:55 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll 2014-10-27 19:55 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll 2014-10-27 19:55 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll 2014-10-27 19:55 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll 2014-10-27 19:55 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll 2014-10-27 19:55 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll 2014-10-27 19:55 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll 2014-10-27 19:55 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll 2014-10-27 19:55 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll 2014-10-27 19:55 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll 2014-10-27 19:55 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll 2014-10-27 19:55 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll 2014-10-27 19:55 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll 2014-10-27 19:55 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll 2014-10-27 19:55 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll 2014-10-27 19:55 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll 2014-10-27 19:55 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll 2014-10-27 19:55 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll 2014-10-27 19:55 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll 2014-10-27 19:55 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll 2014-10-27 19:55 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll 2014-10-27 19:55 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll 2014-10-27 19:55 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll 2014-10-27 19:55 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll 2014-10-27 19:55 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll 2014-10-27 19:55 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll 2014-10-27 19:55 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll 2014-10-27 19:55 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll 2014-10-27 19:55 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll 2014-10-27 19:55 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll 2014-10-27 19:55 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll 2014-10-27 19:55 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll 2014-10-27 19:55 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll 2014-10-27 19:55 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll 2014-10-27 19:55 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll 2014-10-27 19:55 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2014-10-27 19:55 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll 2014-10-27 19:55 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll 2014-10-27 19:55 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll 2014-10-27 19:55 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll 2014-10-27 19:55 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll 2014-10-27 19:55 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll 2014-10-27 19:55 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll 2014-10-27 19:55 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll 2014-10-27 19:55 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll 2014-10-27 19:55 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll 2014-10-27 19:55 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll 2014-10-27 19:55 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll 2014-10-27 19:55 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll 2014-10-27 19:55 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll 2014-10-27 19:54 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll 2014-10-27 19:54 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll 2014-10-27 19:54 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll 2014-10-27 19:54 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll 2014-10-27 19:54 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll 2014-10-27 19:54 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll 2014-10-27 19:54 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll 2014-10-27 19:54 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll 2014-10-27 19:54 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll 2014-10-27 19:54 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll 2014-10-27 19:54 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll 2014-10-27 19:54 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll 2014-10-27 19:54 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll 2014-10-27 19:54 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll 2014-10-27 19:54 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll 2014-10-27 19:54 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll 2014-10-27 19:54 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll 2014-10-27 19:54 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll 2014-10-27 19:54 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll 2014-10-27 19:54 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll 2014-10-27 19:54 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll 2014-10-27 19:54 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll 2014-10-27 19:54 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll 2014-10-27 19:54 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll 2014-10-27 19:54 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll 2014-10-27 19:54 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll 2014-10-27 19:54 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll 2014-10-27 19:54 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll 2014-10-27 19:54 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll 2014-10-27 18:18 - 2014-10-27 18:18 - 00000117 _____ () C:\WINDOWS\system32\netcfg-32830515.txt 2014-10-27 18:18 - 2014-10-27 18:18 - 00000117 _____ () C:\WINDOWS\system32\netcfg-32828093.txt 2014-10-27 18:17 - 2014-10-27 18:17 - 00000117 _____ () C:\WINDOWS\system32\netcfg-32821937.txt 2014-10-27 18:14 - 2014-10-27 18:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-32607250.txt 2014-10-27 16:03 - 2014-10-27 16:04 - 00000000 ____D () C:\Users\Lukas\Documents\GTA San Andreas User Files 2014-10-27 09:11 - 2014-10-27 09:11 - 00000117 _____ () C:\WINDOWS\system32\netcfg-33734.txt 2014-10-27 09:10 - 2014-10-27 09:10 - 00000117 _____ () C:\WINDOWS\system32\netcfg-82812.txt 2014-10-27 09:09 - 2014-10-27 09:09 - 00000117 _____ () C:\WINDOWS\system32\netcfg-30328.txt 2014-10-27 09:09 - 2014-10-27 09:09 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1144906.txt 2014-10-27 08:52 - 2014-10-27 08:52 - 00000136 _____ () C:\WINDOWS\system32\netcfg-130968.txt 2014-10-27 08:52 - 2014-10-27 08:52 - 00000134 _____ () C:\WINDOWS\system32\netcfg-130812.txt 2014-10-27 08:52 - 2014-10-27 08:52 - 00000134 _____ () C:\WINDOWS\system32\netcfg-130343.txt 2014-10-27 08:50 - 2014-10-27 08:50 - 00000117 _____ () C:\WINDOWS\system32\netcfg-35015.txt 2014-10-27 08:49 - 2014-10-27 08:49 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1194453.txt 2014-10-27 08:32 - 2014-11-06 17:46 - 00790022 _____ () C:\WINDOWS\system32\perfh00C.dat 2014-10-27 08:32 - 2014-11-06 17:46 - 00785550 _____ () C:\WINDOWS\system32\perfh013.dat 2014-10-27 08:32 - 2014-11-06 17:46 - 00780976 _____ () C:\WINDOWS\system32\perfh010.dat 2014-10-27 08:32 - 2014-11-06 17:46 - 00158586 _____ () C:\WINDOWS\system32\perfc013.dat 2014-10-27 08:32 - 2014-11-06 17:46 - 00155084 _____ () C:\WINDOWS\system32\perfc00C.dat 2014-10-27 08:32 - 2014-11-06 17:46 - 00152608 _____ () C:\WINDOWS\system32\perfc010.dat 2014-10-27 08:32 - 2014-10-27 08:32 - 00000136 _____ () C:\WINDOWS\system32\netcfg-186546.txt 2014-10-27 08:32 - 2014-10-27 08:32 - 00000134 _____ () C:\WINDOWS\system32\netcfg-186390.txt 2014-10-27 08:32 - 2014-10-27 08:32 - 00000134 _____ () C:\WINDOWS\system32\netcfg-184984.txt 2014-10-27 08:32 - 2014-10-27 08:10 - 00347474 _____ () C:\WINDOWS\system32\perfi013.dat 2014-10-27 08:32 - 2014-10-27 08:10 - 00045378 _____ () C:\WINDOWS\system32\perfd013.dat 2014-10-27 08:32 - 2014-10-27 08:08 - 00340806 _____ () C:\WINDOWS\system32\perfi010.dat 2014-10-27 08:32 - 2014-10-27 08:08 - 00039784 _____ () C:\WINDOWS\system32\perfd010.dat 2014-10-27 08:32 - 2014-10-27 08:06 - 00350772 _____ () C:\WINDOWS\system32\perfi00C.dat 2014-10-27 08:32 - 2014-10-27 08:06 - 00040528 _____ () C:\WINDOWS\system32\perfd00C.dat 2014-10-27 08:31 - 2014-10-27 08:31 - 00000117 _____ () C:\WINDOWS\system32\netcfg-68156.txt 2014-10-27 08:29 - 2014-10-27 08:29 - 00000117 _____ () C:\WINDOWS\system32\netcfg-3310250.txt 2014-10-27 08:27 - 2014-10-27 08:27 - 00000000 ____D () C:\WINDOWS\SysWOW64\nl 2014-10-27 08:27 - 2014-10-27 08:27 - 00000000 ____D () C:\WINDOWS\SysWOW64\0413 2014-10-27 08:26 - 2014-10-27 08:26 - 00000000 ____D () C:\WINDOWS\system32\nl 2014-10-27 08:26 - 2014-10-27 08:26 - 00000000 ____D () C:\WINDOWS\system32\0413 2014-10-27 08:25 - 2014-10-27 08:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\it 2014-10-27 08:25 - 2014-10-27 08:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\0410 2014-10-27 08:24 - 2014-10-27 08:24 - 00000000 ____D () C:\WINDOWS\system32\it 2014-10-27 08:24 - 2014-10-27 08:24 - 00000000 ____D () C:\WINDOWS\system32\0410 2014-10-27 08:23 - 2014-10-27 08:23 - 00000000 ____D () C:\WINDOWS\SysWOW64\fr 2014-10-27 08:23 - 2014-10-27 08:23 - 00000000 ____D () C:\WINDOWS\SysWOW64\040C 2014-10-27 08:22 - 2014-10-27 08:22 - 00000000 ____D () C:\WINDOWS\system32\fr 2014-10-27 08:22 - 2014-10-27 08:22 - 00000000 ____D () C:\WINDOWS\system32\040C 2014-10-27 07:37 - 2014-10-27 07:37 - 00000117 _____ () C:\WINDOWS\system32\netcfg-199109.txt 2014-10-27 07:36 - 2014-10-27 07:36 - 00000136 _____ () C:\WINDOWS\system32\netcfg-134640.txt 2014-10-27 07:36 - 2014-10-27 07:36 - 00000134 _____ () C:\WINDOWS\system32\netcfg-134515.txt 2014-10-27 07:36 - 2014-10-27 07:36 - 00000134 _____ () C:\WINDOWS\system32\netcfg-133718.txt 2014-10-27 07:34 - 2014-10-27 07:34 - 00000117 _____ () C:\WINDOWS\system32\netcfg-19679875.txt 2014-10-27 07:15 - 2014-10-27 08:26 - 00000000 ____D () C:\sources 2014-10-27 06:47 - 2014-10-28 00:18 - 00001446 _____ () C:\Users\Lukas\Desktop\SAMP.lnk 2014-10-27 06:47 - 2014-10-27 06:47 - 01199079 _____ () C:\WINDOWS\unins000.exe 2014-10-27 06:47 - 2014-10-27 06:47 - 00008115 _____ () C:\WINDOWS\unins000.dat 2014-10-27 06:46 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer 2014-10-27 06:46 - 2014-10-27 06:46 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer 2014-10-27 06:35 - 2014-11-06 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games 2014-10-27 06:35 - 2014-10-27 06:48 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games 2014-10-27 06:35 - 2014-10-27 06:35 - 00002032 _____ () C:\Users\Public\Desktop\GTA San Andreas.lnk 2014-10-27 04:53 - 2014-11-12 20:36 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-10-27 04:53 - 2014-11-12 20:34 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-10-27 03:57 - 2014-10-27 03:57 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\WinRAR 2014-10-27 03:49 - 2014-11-12 21:27 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-10-27 03:49 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-10-27 03:49 - 2014-10-27 03:49 - 00000969 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-10-27 03:26 - 2014-11-12 23:11 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Skype 2014-10-27 03:26 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-10-27 03:26 - 2014-10-30 16:40 - 00000000 ____D () C:\ProgramData\Skype 2014-10-27 03:26 - 2014-10-27 03:26 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-10-27 03:26 - 2014-10-27 03:26 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-10-27 03:26 - 2014-10-27 03:26 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Skype 2014-10-27 03:22 - 2014-11-06 19:22 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-10-27 03:22 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-10-27 03:22 - 2014-10-27 03:22 - 00000000 ____D () C:\Program Files\WinRAR 2014-10-27 03:15 - 2014-11-01 22:42 - 00000000 ____D () C:\upx 2014-10-27 03:03 - 2014-11-11 15:23 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Spotify 2014-10-27 03:03 - 2014-10-27 03:03 - 00001806 _____ () C:\Users\Lukas\Desktop\Spotify.lnk 2014-10-27 03:03 - 2014-10-27 03:03 - 00001792 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-10-27 03:02 - 2014-11-12 20:46 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Spotify 2014-10-27 03:00 - 2014-11-01 02:12 - 00000000 ____D () C:\Users\Lukas\Desktop\News Reporter 2014-10-27 02:57 - 2013-05-04 05:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs 2014-10-27 02:57 - 2013-05-04 05:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs 2014-10-27 02:52 - 2014-11-12 23:07 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\TS3Client 2014-10-27 02:51 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2014-10-27 02:51 - 2014-10-27 02:51 - 00001180 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-10-27 02:51 - 2014-10-27 02:51 - 00001168 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk 2014-10-27 02:51 - 2014-10-27 02:51 - 00000969 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-10-27 02:51 - 2014-10-27 02:51 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client 2014-10-27 02:51 - 2014-10-27 02:51 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2014-10-27 02:48 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-10-27 02:48 - 2014-10-27 02:48 - 00000824 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-10-27 02:48 - 2014-10-27 02:48 - 00000000 ____D () C:\Program Files\CCleaner 2014-10-27 02:46 - 2014-11-12 22:53 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\vlc 2014-10-27 02:45 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-10-27 02:45 - 2014-10-27 02:45 - 00001072 _____ () C:\Users\Public\Desktop\VLC Media Player.lnk 2014-10-27 02:45 - 2014-10-27 02:45 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-10-27 02:44 - 2014-10-27 02:44 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Macromedia 2014-10-27 02:40 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Alarm Clock 2014-10-27 02:40 - 2014-10-27 02:40 - 00001085 _____ () C:\Users\Lukas\Desktop\Free Alarm Clock.lnk 2014-10-27 02:40 - 2014-10-27 02:40 - 00000000 ____D () C:\Program Files (x86)\FreeAlarmClock 2014-10-27 02:34 - 2014-10-27 02:34 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\ProductData 2014-10-27 02:33 - 2014-11-12 23:33 - 00000000 ____D () C:\ProgramData\ProductData 2014-10-27 02:33 - 2014-11-07 15:45 - 00000290 _____ () C:\WINDOWS\Tasks\Uninstaller_SkipUac_Lukas.job 2014-10-27 02:33 - 2014-10-27 02:34 - 00000000 ____D () C:\ProgramData\IObit 2014-10-27 02:33 - 2014-10-27 02:33 - 00001258 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-10-27 02:33 - 2014-10-27 02:33 - 00001234 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-10-27 02:33 - 2014-10-27 02:33 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\IObit 2014-10-27 02:33 - 2014-10-27 02:33 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-10-27 02:30 - 2014-11-12 23:38 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-10-27 02:30 - 2014-11-11 20:38 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-10-27 02:18 - 2014-10-27 02:18 - 00000000 ____D () C:\ProgramData\delight software gmbh 2014-10-27 02:17 - 2014-10-27 02:17 - 00000000 ____D () C:\Users\Lukas\Desktop\Rammstein 2014-10-27 02:14 - 2014-11-12 22:47 - 02368000 ___SH () C:\Users\Lukas\Desktop\Thumbs.db 2014-10-27 02:13 - 2014-11-11 23:05 - 00000000 ____D () C:\Users\Lukas\Desktop\Ordner 2014-10-27 02:11 - 2014-10-27 02:32 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Adobe 2014-10-27 02:09 - 2014-10-27 02:09 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-10-27 02:06 - 2014-10-27 02:06 - 00000117 _____ () C:\WINDOWS\system32\netcfg-31984.txt 2014-10-27 02:05 - 2014-10-27 02:05 - 00000117 _____ () C:\WINDOWS\system32\netcfg-201515.txt 2014-10-27 02:04 - 2014-10-27 02:04 - 00003542 _____ () C:\WINDOWS\System32\Tasks\ASUS Touchpad Launcher (x64) 2014-10-27 02:03 - 2014-10-27 02:03 - 00000117 _____ () C:\WINDOWS\system32\netcfg-67656.txt 2014-10-27 02:02 - 2014-10-27 02:02 - 00000117 _____ () C:\WINDOWS\system32\netcfg-3727843.txt 2014-10-27 01:57 - 2014-11-12 22:40 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\ClassicShell 2014-10-27 01:57 - 2014-10-27 01:57 - 00000000 ____D () C:\ProgramData\ClassicShell 2014-10-27 01:56 - 2014-11-12 23:42 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3695118925-1818860434-2304311968-1002 2014-10-27 01:56 - 2014-11-06 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell 2014-10-27 01:56 - 2014-10-27 01:56 - 00000000 ____D () C:\Program Files\Classic Shell 2014-10-27 01:55 - 2014-11-12 23:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-10-27 01:55 - 2014-10-27 01:56 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Mozilla 2014-10-27 01:55 - 2014-10-27 01:56 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Mozilla 2014-10-27 01:55 - 2014-10-27 01:55 - 06869696 _____ (IvoSoft) C:\Users\Lukas\Downloads\ClassicShellSetup_4_1_0-de.exe 2014-10-27 01:55 - 2014-10-27 01:55 - 06791360 _____ (IvoSoft) C:\Users\Lukas\Downloads\ClassicShellSetup_4_1_0.exe 2014-10-27 01:55 - 2014-10-27 01:55 - 00001165 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-10-27 01:55 - 2014-10-27 01:55 - 00001153 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-10-27 01:55 - 2014-10-27 01:55 - 00000000 ____D () C:\ProgramData\Mozilla 2014-10-27 01:54 - 2014-10-27 01:54 - 00244032 _____ () C:\Users\Lukas\Downloads\Firefox Setup Stub 33.0.exe 2014-10-27 01:53 - 2014-10-27 01:53 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Macromedia 2014-10-27 01:49 - 2014-10-27 01:49 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\ASUS WebStorage 2014-10-27 01:48 - 2014-10-27 01:48 - 00000408 _____ () C:\Users\Lukas\AppData\Roaming\sp_data.sys 2014-10-27 01:48 - 2014-10-27 01:48 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-10-27 01:47 - 2014-10-27 02:11 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Adobe 2014-10-27 01:47 - 2014-10-27 01:47 - 00000000 ____D () C:\ProgramData\FolderView 2014-10-27 01:46 - 2014-11-07 22:00 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Packages 2014-10-27 01:46 - 2014-10-28 01:23 - 00000000 ____D () C:\Users\Lukas\AppData\Local\VirtualStore 2014-10-27 01:46 - 2014-10-27 22:01 - 00000000 ____D () C:\Users\Lukas\AppData\Local\ASUS 2014-10-27 01:42 - 2014-10-27 01:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2561171.txt 2014-10-27 01:42 - 2014-10-27 01:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2558140.txt 2014-10-27 01:42 - 2014-10-27 01:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2558109.txt 2014-10-27 01:42 - 2014-10-27 01:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2552468.txt 2014-10-27 01:00 - 2014-11-06 19:04 - 00000000 __SHD () C:\Recovery ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-13 00:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-11-12 23:39 - 2014-09-24 07:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-11-12 23:39 - 2014-09-24 06:43 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat 2014-11-12 23:39 - 2014-09-24 06:43 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat 2014-11-12 23:32 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-11-12 23:32 - 2013-08-22 15:44 - 00338072 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-11-12 23:31 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-11-12 23:29 - 2014-09-24 08:43 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel 2014-11-12 23:29 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-11-12 23:29 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2014-11-12 23:29 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-11-12 23:29 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-11-12 23:29 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-11-12 23:29 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-11-12 20:37 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2014-11-12 20:34 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-11-12 12:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-11-09 17:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-11-07 22:05 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-11-07 21:57 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-11-07 18:08 - 2014-09-24 07:00 - 00000000 ____D () C:\WINDOWS\ShellNew 2014-11-07 15:53 - 2012-10-23 15:31 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-11-06 22:59 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-11-06 22:59 - 2013-08-22 12:22 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll 2014-11-06 22:59 - 2013-08-22 12:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe 2014-11-06 22:59 - 2013-08-22 12:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll 2014-11-06 22:59 - 2013-08-22 12:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll 2014-11-06 22:59 - 2013-08-22 12:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll 2014-11-06 22:59 - 2013-08-22 05:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll 2014-11-06 22:59 - 2013-08-22 05:03 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe 2014-11-06 22:59 - 2013-08-22 04:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll 2014-11-06 22:59 - 2013-08-22 04:56 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll 2014-11-06 22:59 - 2013-08-22 04:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe 2014-11-06 22:59 - 2013-08-22 04:51 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll 2014-11-06 22:59 - 2013-08-22 04:51 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll 2014-11-06 22:59 - 2013-08-22 04:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll 2014-11-06 22:59 - 2013-08-22 04:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll 2014-11-06 19:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-11-06 19:32 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default 2014-11-06 19:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration 2014-11-06 19:29 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media 2014-11-06 19:28 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries 2014-11-06 19:22 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-11-06 19:22 - 2012-10-23 15:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-11-06 19:22 - 2012-10-23 15:33 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-11-06 19:22 - 2012-08-17 01:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\winrm 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\slmgr 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2014-11-06 19:21 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\winrm 2014-11-06 19:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-11-06 19:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-11-06 19:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2014-11-06 19:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2014-11-06 19:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\oobe 2014-11-06 19:21 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism 2014-11-06 19:21 - 2012-10-23 15:40 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-11-06 19:21 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated 2014-11-06 19:20 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-11-06 19:20 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\slmgr 2014-11-06 19:20 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\Printing_Admin_Scripts 2014-11-06 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-11-06 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform 2014-11-06 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-11-06 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-11-06 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-11-06 19:20 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-11-06 19:20 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism 2014-11-06 19:19 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2014-11-06 19:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions 2014-11-06 19:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME 2014-11-06 19:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help 2014-11-06 19:19 - 2012-10-23 15:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUSDVD 2014-11-06 19:19 - 2012-08-02 14:28 - 00000000 ____D () C:\ProgramData\PRICache 2014-11-06 19:18 - 2014-09-24 07:00 - 00000000 ____D () C:\Program Files\Windows Journal 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-11-06 19:18 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-11-06 19:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-11-06 19:04 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-11-06 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-11-06 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-11-06 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-11-04 02:04 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent 2014-10-27 07:35 - 2012-08-17 01:53 - 00000000 ____D () C:\ProgramData\McAfee 2014-10-27 02:37 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP 2014-10-27 02:04 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files (x86)\ASUS 2014-10-27 01:47 - 2012-08-02 14:33 - 00000000 ____D () C:\WINDOWS\Log LastRegBack: 2014-11-06 19:06 ==================== End Of Log ============================ |
13.11.2014, 00:07 | #8 |
| Eventuell Skype Virus eingefangen 2. Teil von FRST.txt: Code:
ATTFilter Files to move or delete: ==================== C:\ProgramData\SetStretch.exe Some content of TEMP: ==================== C:\Users\Lukas\AppData\Local\Temp\Quarantine.exe C:\Users\Lukas\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2014 Ran by Lukas at 2014-11-13 00:03:09 Running from C:\Users\Lukas\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated) Adobe Reader X MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.) ASUS Instant Connect (HKLM-x32\...\{89ECB85A-D933-4CEA-9116-5CBC9C2ED95B}) (Version: 1.2.8 - ASUS) ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.2 - ASUS) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.5 - ASUS) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.1.8 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.0.4 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 1.0.35 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.03.0004 - ASUS) ASUS Tutor (HKLM-x32\...\{58172D66-2F69-4215-9AEC-ED8196023736}) (Version: 1.0.7 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.4 - ASUS) ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.9.120 - ASUS Cloud Corporation) ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4126.52 - CyberLink Corp.) ASUSDVD (x32 Version: 10.0.4126.52 - CyberLink Corp.) Hidden AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.10.168 - ASUSTEK) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0022 - ASUS) AutoHotkey 1.1.16.05 (HKLM-x32\...\AutoHotkey) (Version: 1.1.16.05 - Lexikos) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2206 - AVAST Software) Bandicam (HKLM-x32\...\Bandicam) (Version: 2.1.0.708 - Bandisoft.com) Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com) CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform) Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft) CLEO 4.3 (HKLM-x32\...\{A8F37EB0-C741-41D7-8CAB-5B40ECEEF094}_is1) (Version: 4.3 - Seemann, Deji, Alien) F.E.A.R. 3 (HKLM-x32\...\Steam App 21100) (Version: - Day 1 Studios) Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment) Free Alarm Clock 3.1.0 (HKLM-x32\...\{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1) (Version: 3.1 - Comfort Software Group) Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.0.4.30 - IObit) Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation) Kingsoft Writer (8.1.0.3198) (HKLM-x32\...\Kingsoft Writer) (Version: 8.1.0.3198 - Kingsoft Corp.) Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve) Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation) Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 33.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 en-US)) (Version: 33.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0 - Mozilla) Notepad2-mod 4.2.25.935 (HKLM\...\Notepad2-mod_is1) (Version: 4.2.25.935 - XhmikosR) NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation) NVIDIA Grafiktreiber 344.60 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.60 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6716 - Realtek Semiconductor Corp.) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.8400.27023 - Realtek Semiconductor Corp.) Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version: - ) SciTE4AutoHotkey v3.0.06.01 (HKLM-x32\...\SciTE4AutoHotkey) (Version: v3.0.06.01 - fincs) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.) Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.14.15.201410271230 - Sony Mobile Communications Inc.) Sony PC Companion 2.10.228 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.228 - Sony) Spotify (HKU\S-1-5-21-3695118925-1818860434-2304311968-1002\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) Windows-Treiberpaket - ASUS (ATP) Mouse (10/29/2012 1.0.0.148) (HKLM\...\C01F56FBD9B141017E63E2A1A141E59934D4DC67) (Version: 10/29/2012 1.0.0.148 - ASUS) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.41.1 - ASUS) WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 06-11-2014 21:59:00 Windows Modules Installer 12-11-2014 19:32:35 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1E15B74B-FBE0-410F-9C14-205BAB4522F7} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2012-10-31] (AsusTek) Task: {574C9967-37C2-4AB8-8D41-F330C0985836} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS) Task: {B996C8E7-A911-4E93-8E44-4E93B064C9D2} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-10-28] (AVAST Software) Task: {D8C4D7BA-252C-4344-A51D-88EFE9B90175} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-12] (Microsoft Corporation) Task: {DA73ADCD-8D9A-4AF1-99FE-2161FD093CBB} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-07-24] (ASUSTek Computer Inc.) Task: {E9D4DC6E-2C59-4D37-B749-95324A91B8D3} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-11] (Adobe Systems Incorporated) Task: {EEEC03E8-0172-4F90-954D-182B873D4F99} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2012-07-25] (ASUSTeK Computer Inc.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Lukas.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe Task: C:\WINDOWS\Tasks\WpsUpdateTask_Lukas.job => C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\wpsupdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-10-31 01:54 - 2014-10-30 05:53 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll 2014-11-06 19:08 - 2014-10-30 03:10 - 00117064 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-10-28 00:29 - 2014-10-28 00:29 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll 2014-10-28 00:29 - 2014-10-28 00:29 - 05846160 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll 2012-08-24 17:26 - 2012-08-24 17:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll 2013-10-01 13:02 - 2013-10-01 13:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-11-12 12:21 - 2014-11-12 12:21 - 02902016 _____ () C:\Program Files\AVAST Software\Avast\defs\14111200\algo.dll 2014-10-28 00:29 - 2014-10-28 00:29 - 04491192 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll 2014-10-28 00:30 - 2014-10-28 00:30 - 38561576 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-10-31 01:54 - 2014-10-30 05:53 - 00010952 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll 2012-10-23 15:32 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2014-11-10 15:34 - 2014-11-10 15:34 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\Lukas\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\StartupFolder: => "AsusVibeLauncher.lnk" HKLM\...\StartupApproved\StartupFolder: => "AnyDesk.lnk" HKLM\...\StartupApproved\Run: => "ACMON" HKLM\...\StartupApproved\Run: => "ShadowPlay" HKLM\...\StartupApproved\Run: => "NvBackend" HKLM\...\StartupApproved\Run32: => "RemoteControl10" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKCU\...\StartupApproved\Run: => "Spotify Web Helper" HKCU\...\StartupApproved\Run: => "Spotify" HKCU\...\StartupApproved\Run: => "CCleaner Monitoring" HKCU\...\StartupApproved\Run: => "FreeAC" HKCU\...\StartupApproved\Run: => "Sony PC Companion" ========================= Accounts: ========================== Administrator (S-1-5-21-3695118925-1818860434-2304311968-500 - Administrator - Disabled) Gast (S-1-5-21-3695118925-1818860434-2304311968-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3695118925-1818860434-2304311968-1006 - Limited - Enabled) Lukas (S-1-5-21-3695118925-1818860434-2304311968-1002 - Administrator - Enabled) => C:\Users\Lukas ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Microsoft Office Sessions: ========================= ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz Percentage of memory in use: 22% Total physical RAM: 8077.48 MB Available physical RAM: 6287.25 MB Total Pagefile: 9357.48 MB Available Pagefile: 7607.25 MB Total Virtual: 131072 MB Available Virtual: 131071.84 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:372.17 GB) (Free:256.92 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (DATA) (Fixed) (Total:537.89 GB) (Free:537.06 GB) NTFS Drive e: (F.E.A.R. 3) (CDROM) (Total:4.32 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: B19F8D36) Partition: GPT Partition Type. ==================== End Of Log ============================ |
13.11.2014, 20:23 | #9 |
| Eventuell Skype Virus eingefangen Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL File Not Found FF Homepage: chrome://speeddial/content/speeddial.xul C:\ProgramData\SetStretch.exe C:\Users\Lukas\AppData\Local\Temp\Quarantine.exe C:\Users\Lukas\AppData\Local\Temp\sqlite3.dll EmptyTemp: Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Proud member of Unite |
14.11.2014, 00:18 | #10 |
| Eventuell Skype Virus eingefangen Fixlog.txt Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-11-2014 02 Ran by Lukas at 2014-11-14 00:10:55 Run:1 Running from C:\Users\Lukas\Desktop Loaded Profile: Lukas (Available profiles: Lukas) Boot Mode: Normal ============================================== Content of fixlist: ***************** AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL File Not Found FF Homepage: chrome://speeddial/content/speeddial.xul C:\ProgramData\SetStretch.exe C:\Users\Lukas\AppData\Local\Temp\Quarantine.exe C:\Users\Lukas\AppData\Local\Temp\sqlite3.dll EmptyTemp: ***************** "C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL" => Value Data removed successfully. Firefox homepage deleted successfully. C:\ProgramData\SetStretch.exe => Moved successfully. C:\Users\Lukas\AppData\Local\Temp\Quarantine.exe => Moved successfully. C:\Users\Lukas\AppData\Local\Temp\sqlite3.dll => Moved successfully. EmptyTemp: => Removed 422.6 MB temporary data. The system needed a reboot. ==== End of Fixlog ==== Darf ich fragen was das für 2 .exe-Dateien sind und was das für eine .dll-Datei ist? Der Name der .dll sagt mir irgendwie was, oder es kommt mir nur so vor. |
14.11.2014, 14:06 | #11 | |
| Eventuell Skype Virus eingefangenZitat:
SetStretch.exe = gehört wohl zu Malware ESET Online Scanner
__________________ Proud member of Unite |
14.11.2014, 18:54 | #12 |
| Eventuell Skype Virus eingefangen logfile.txt Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=b0c768a89909d74caa065fa230f9036f # engine=21095 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-11-14 05:46:43 # local_time=2014-11-14 06:46:43 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='avast! Antivirus' # compatibility_mode=783 16777213 71 94 928563 1538283 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 155820 75493314 0 0 # scanned=220217 # found=0 # cleaned=0 # scan_time=4398 |
14.11.2014, 19:06 | #13 |
| Eventuell Skype Virus eingefangen Wie läuft das System?
__________________ Proud member of Unite |
14.11.2014, 19:26 | #14 |
| Eventuell Skype Virus eingefangen So wie immer denke ich. |
14.11.2014, 19:28 | #15 |
| Eventuell Skype Virus eingefangen Hallo, nach meiner Erkenntnis, ist Dein PC soweit sauber. Die Reihenfolge ist hier entscheidend.
Falls Du mir Feedback geben willst, kannst Du es hier gerne tun: Lob, Kritik und Wünsche - Trojaner-Board Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Sicheres Browsen
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ Proud member of Unite |
Themen zu Eventuell Skype Virus eingefangen |
abbrechen, angeboten, angeklickt, datei, eingefangen, entfern, gefangen, geklickt, gen, hintergrund, image, installier, installiert, kontakte, link, link angeklickt, nachricht, seite, skype, skype virus, speicher, speichern, virus, virus eingefangen |