|
Plagegeister aller Art und deren Bekämpfung: AVG wirklich Trojaner entfernt (WIRKLICH DRINGEND!)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
15.01.2015, 22:24 | #16 |
/// TB-Ausbilder /// Anleitungs-Guru | AVG wirklich Trojaner entfernt (WIRKLICH DRINGEND!) OK, kannst Zoek weglassen und FRST direkt posten.
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
16.01.2015, 00:01 | #17 |
| AVG wirklich Trojaner entfernt (WIRKLICH DRINGEND!) Nur was ich bereits noch gesagt hatte das es bei der Liste der installierten Programme nicht weiter macht nachdem ich das Kästchen Addition.txt ankreuzen sollte. Habe es sogar 4-6 Stunden durchlaufen lassen.
__________________ |
16.01.2015, 00:15 | #18 |
/// TB-Ausbilder /// Anleitungs-Guru | AVG wirklich Trojaner entfernt (WIRKLICH DRINGEND!) Da stimmt was nicht, die ersten FRST-Logs haben doch gut geklappt oder?
__________________Bitte die vorhandene FRST.exe löschen und hier neu laden. Dann nochmal versuchen.
__________________ |
16.01.2015, 15:24 | #19 |
| AVG wirklich Trojaner entfernt (WIRKLICH DRINGEND!) Hier die Logs FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2015 01 Ran by User (administrator) on USER-PC on 16-01-2015 15:19:24 Running from C:\Users\User\Downloads Loaded Profiles: User (Available profiles: User) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 8 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe () C:\Program Files\Atomic Alarm Clock\timeserv.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (cFos Software GmbH) C:\Program Files\Topos\cFosSpeed\cfosspeed.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe (cFos Software GmbH) C:\Program Files\Topos\cFosSpeed\spd.exe () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Game Inc.) C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe (Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe (ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe (Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe (Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7634648 2014-08-14] (Realtek Semiconductor) HKLM\...\Run: [cFosSpeed] => C:\Program Files\Topos\cFosSpeed\cFosSpeed.exe [1225432 2009-02-11] (cFos Software GmbH) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3667472 2014-12-18] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2014-12-08] (Raptr, Inc) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-01-07] (Adobe Systems Incorporated) HKLM-x32\...\Run: [GamingKeyboard] => C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe [1803264 2012-06-07] (Game Inc.) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3838800 2014-12-13] (LogMeIn Inc.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKU\S-1-5-21-798746062-960158335-3196871331-1000\...\Run: [AtomicAlarmClock6] => C:\Program Files\Atomic Alarm Clock\AtomicAlarmClock.exe [1597440 2009-03-13] () HKU\S-1-5-21-798746062-960158335-3196871331-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-798746062-960158335-3196871331-1000\...\MountPoints2: {35769eed-6fcb-11e4-a747-806e6f6e6963} - E:\Setup.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe () ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) FireFox: ======== FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\86i2h2k4.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin HKU\S-1-5-21-798746062-960158335-3196871331-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\86i2h2k4.default\searchplugins\google-images.xml FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\86i2h2k4.default\searchplugins\google-maps.xml FF Extension: Cliqz Beta - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\86i2h2k4.default\Extensions\cliqz@cliqz.com [2015-01-01] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14] FF HKU\S-1-5-21-798746062-960158335-3196871331-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\86i2h2k4.default\extensions\cliqz@cliqz.com FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\86i2h2k4.default\extensions\faststartff@gmail.com [Not Found] Chrome: ======= CHR HomePage: Default -> hxxp://isearch.omiga-plus.com/?type=hp&ts=1420148299&from=amt&uid=HitachiXHUA721010KLA330_GTF002PBJXG6YFJXG6YFX CHR StartupUrls: Default -> "https://www.google.de/?gws_rd=ssl" CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-01] CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-01] CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-01] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-01] CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-01] CHR Extension: (Google-Suche) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-01] CHR Extension: (Google Tabellen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-01] CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-01] CHR Extension: (Google Mail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-01] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed] R2 AtomicAlarmClock; C:\Program Files\Atomic Alarm Clock\timeserv.exe [2007040 2013-04-24] () [File not signed] R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3432976 2014-12-18] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [298080 2014-12-18] (AVG Technologies CZ, s.r.o.) R2 cFosSpeedS; C:\Program Files\Topos\cFosSpeed\spd.exe [560344 2009-02-11] (cFos Software GmbH) S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [182304 2015-01-01] (EasyAntiCheat Ltd) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2014-12-02] (LogMeIn, Inc.) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2012-12-04] (Advanced Micro Devices Inc.) R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [260888 2014-12-08] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [313624 2014-07-18] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [124184 2014-10-05] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [274200 2014-10-10] (AVG Technologies CZ, s.r.o.) R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-11-18] (AVG Technologies) R3 cFosSpeed; C:\Windows\System32\DRIVERS\cfosspeed.sys [1090264 2009-02-11] (cFos Software GmbH) R3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2014-11-03] (REALiX(tm)) R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions) R3 Serenum; C:\Windows\System32\DRIVERS\nuvserenum.sys [23552 2014-01-12] (Windows (R) Win 7 DDK provider) R3 Serial; C:\Windows\System32\DRIVERS\nuvserial.sys [86016 2014-01-12] (Nuvoton Technology Corp.) S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-12-01 20:46 - 2015-12-01 20:46 - 01294088 _____ (Mojang) C:\Users\User\Downloads\Minecraft (1).exe 2015-12-01 20:46 - 2015-01-16 00:06 - 00000000 ____D () C:\Users\User\AppData\Roaming\.minecraft 2015-12-01 20:17 - 2015-12-01 20:17 - 00000000 ____D () C:\Users\User\AppData\Roaming\Apple Computer 2015-11-01 14:24 - 2015-11-01 14:26 - 00732993 _____ () C:\Users\User\Downloads\DS4Tool 1.2.zip 2015-11-01 14:21 - 2015-11-01 14:21 - 00000000 ____D () C:\Users\User\Documents\My Games 2015-11-01 14:20 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2015-11-01 14:20 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2015-11-01 14:20 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2015-11-01 14:20 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-11-01 14:20 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2015-11-01 14:20 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2015-11-01 14:20 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2015-11-01 14:20 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2015-11-01 14:20 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2015-11-01 14:20 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2015-11-01 14:20 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-11-01 14:20 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2015-11-01 14:20 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2015-11-01 14:20 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2015-11-01 14:20 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2015-11-01 14:20 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2015-11-01 14:20 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-11-01 14:20 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-11-01 14:20 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-11-01 14:20 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-11-01 14:20 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-11-01 14:20 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-11-01 14:19 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-11-01 14:19 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-11-01 14:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-11-01 14:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2015-11-01 14:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2015-11-01 14:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-11-01 14:19 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-11-01 14:19 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2015-11-01 14:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-11-01 14:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2015-11-01 14:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-11-01 14:19 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-11-01 14:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2015-11-01 14:19 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2015-11-01 14:19 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2015-11-01 14:19 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2015-11-01 14:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-11-01 14:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2015-11-01 14:19 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-11-01 14:19 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2015-11-01 14:19 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2015-11-01 14:19 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-11-01 14:19 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-11-01 14:19 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2015-11-01 14:19 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-11-01 14:19 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2015-11-01 14:19 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-11-01 14:19 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2015-11-01 14:19 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-11-01 14:19 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2015-11-01 14:19 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-11-01 14:19 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-11-01 14:19 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-11-01 14:19 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-11-01 14:19 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-11-01 14:19 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-11-01 14:19 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-11-01 14:19 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-11-01 14:19 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-11-01 14:19 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2015-11-01 14:19 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-11-01 14:19 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2015-11-01 14:19 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-11-01 14:19 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2015-11-01 14:19 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-11-01 14:19 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-11-01 14:19 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-11-01 14:19 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-11-01 14:19 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-11-01 14:19 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-11-01 14:19 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-11-01 14:19 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-11-01 14:19 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-11-01 14:19 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-11-01 14:19 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-11-01 14:19 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-11-01 14:19 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-11-01 14:19 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2015-11-01 14:19 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2015-11-01 14:19 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-11-01 14:19 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-11-01 14:19 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2015-11-01 14:19 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2015-11-01 14:19 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-11-01 14:19 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-11-01 14:19 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2015-11-01 14:19 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-11-01 14:19 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2015-11-01 14:19 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-11-01 14:19 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2015-11-01 14:19 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-11-01 14:19 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2015-11-01 14:19 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2015-11-01 14:19 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-11-01 14:19 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-11-01 14:19 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2015-11-01 14:19 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-11-01 14:19 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2015-11-01 14:19 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-11-01 14:19 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2015-11-01 14:19 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-11-01 14:19 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2015-11-01 14:19 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-11-01 14:19 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2015-11-01 14:19 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-11-01 14:19 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2015-11-01 14:19 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-11-01 14:19 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2015-11-01 14:19 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-11-01 14:19 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2015-11-01 14:19 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-11-01 14:19 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2015-11-01 14:19 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-11-01 14:19 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2015-11-01 14:19 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-11-01 14:19 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2015-11-01 14:19 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-11-01 14:19 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2015-11-01 14:19 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-11-01 14:19 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2015-11-01 14:19 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-11-01 14:19 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2015-11-01 14:19 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-11-01 14:19 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2015-11-01 14:19 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-11-01 14:19 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2015-11-01 14:19 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-11-01 14:19 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2015-11-01 14:19 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-11-01 14:19 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2015-11-01 14:19 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-11-01 14:19 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2015-11-01 14:19 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-11-01 14:19 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2015-11-01 14:19 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-11-01 14:19 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2015-11-01 14:19 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-11-01 14:19 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2015-11-01 14:19 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-11-01 14:19 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2015-11-01 14:19 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2015-11-01 14:19 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-11-01 14:19 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2015-11-01 14:19 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2015-11-01 14:19 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-11-01 14:19 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2015-11-01 14:19 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-11-01 14:19 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2015-11-01 14:19 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2015-11-01 14:19 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-11-01 14:19 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-11-01 14:19 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-11-01 14:19 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2015-11-01 14:19 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2015-11-01 14:19 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2015-11-01 14:19 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-11-01 14:19 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-11-01 14:19 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2015-11-01 14:19 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-11-01 14:19 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2015-11-01 14:19 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-11-01 14:19 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2015-11-01 14:19 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-11-01 14:19 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2015-11-01 14:19 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-11-01 14:19 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2015-11-01 14:19 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-11-01 14:19 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2015-11-01 14:19 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-11-01 14:19 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2015-11-01 14:19 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-11-01 14:19 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2015-11-01 14:18 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-11-01 14:18 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2015-11-01 14:18 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-11-01 14:18 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2015-11-01 14:18 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-11-01 14:18 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2015-11-01 12:36 - 2015-11-01 12:36 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2015-11-01 12:36 - 2015-11-01 12:36 - 00000000 _____ () C:\Windows\setuperr.log 2015-11-01 12:36 - 2015-01-16 15:16 - 00002672 _____ () C:\Windows\setupact.log 2015-11-01 12:34 - 2015-11-01 14:19 - 00046367 _____ () C:\Windows\DirectX.log 2015-11-01 12:34 - 2015-11-01 12:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2015-11-01 12:34 - 2015-11-01 12:34 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2015-11-01 12:32 - 2015-11-01 12:33 - 07886712 _____ (Microsoft Corporation) C:\Users\User\Downloads\Xbox360_64Deu.exe 2015-01-16 15:19 - 2015-01-16 15:19 - 00019248 _____ () C:\Users\User\Downloads\FRST.txt 2015-01-16 15:19 - 2015-01-16 15:19 - 00000000 ____D () C:\FRST 2015-01-16 15:18 - 2015-01-16 15:18 - 02125312 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe 2015-01-16 14:59 - 2015-01-16 15:02 - 122418480 _____ (Apple Inc.) C:\Users\User\Downloads\iTunes64Setup.exe 2015-01-15 22:56 - 2015-01-15 22:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAGIX 2015-01-15 22:56 - 2015-01-15 22:56 - 00001063 _____ () C:\Users\Public\Desktop\MAGIX Video Pro X6.lnk 2015-01-15 22:56 - 2015-01-15 22:56 - 00000000 ____D () C:\Users\User\Documents\MAGIX_MusicEditor 2015-01-15 22:56 - 2015-01-15 22:56 - 00000000 ____D () C:\Users\User\AppData\Local\Xara 2015-01-15 22:56 - 2015-01-15 22:56 - 00000000 ____D () C:\Users\User\AppData\Local\Magix 2015-01-15 22:56 - 2015-01-15 22:56 - 00000000 ____D () C:\Users\Public\Documents\MAGIX 2015-01-15 22:56 - 2015-01-15 22:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX 2015-01-15 22:56 - 2015-01-15 22:56 - 00000000 ____D () C:\Program Files\Common Files\MAGIX Shared 2015-01-15 22:54 - 2015-01-15 22:58 - 00000000 ___RD () C:\Users\User\Documents\MAGIX 2015-01-15 22:54 - 2015-01-15 22:58 - 00000000 ____D () C:\ProgramData\MAGIX 2015-01-15 22:54 - 2015-01-15 22:54 - 00000000 ____D () C:\Program Files\MAGIX 2015-01-15 22:54 - 2015-01-15 22:54 - 00000000 ____D () C:\Program Files\Common Files\MAGIX Services 2015-01-15 22:54 - 2015-01-15 22:54 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2015-01-15 22:54 - 2015-01-15 22:54 - 00000000 ____D () C:\Program Files (x86)\MAGIX 2015-01-15 22:50 - 2015-01-15 22:46 - 23240470 _____ () C:\Users\User\Desktop\{crack} magix video pro x6 13.0.4.2 [emily mabel].rar 2015-01-15 22:39 - 2015-01-15 22:48 - 343155512 _____ (MAGIX AG) C:\Users\User\Downloads\Video_Pro_X6_en-US_13.0.3.24.exe 2015-01-15 22:39 - 2015-01-15 22:46 - 23240470 _____ () C:\Users\User\Downloads\{crack} magix video pro x6 13.0.4.2 [emily mabel].rar 2015-01-15 22:33 - 2015-01-15 22:36 - 08672414 _____ () C:\Users\User\Downloads\#M.V.P.X6.C#.rar 2015-01-15 22:33 - 2015-01-15 22:33 - 02849152 _____ (MAGIX AG) C:\Users\User\Downloads\trial_videoprox6_dlm.exe 2015-01-15 20:27 - 2015-01-15 20:28 - 02633688 _____ () C:\Users\User\Downloads\Adobe Photoshop CC 14.2 x86-x64 Crack only [FILETIE.COM].rar 2015-01-15 20:26 - 2015-01-15 20:26 - 01228288 _____ () C:\Users\User\Downloads\Adobe Photoshop CC 2014 [32 64 Bit] X-Force Keygen Crack Patch.exe 2015-01-14 23:05 - 2015-01-14 23:05 - 00000913 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2015-01-14 23:05 - 2015-01-14 23:05 - 00000000 ____D () C:\Program Files\GIMP 2 2015-01-14 22:43 - 2015-01-14 22:43 - 00000000 ____D () C:\adobeTemp 2015-01-14 22:42 - 2015-01-14 22:42 - 00000000 ____D () C:\Users\User\AppData\Roaming\PDAppFlex 2015-01-14 22:38 - 2015-01-14 22:38 - 00001059 _____ () C:\Users\User\Desktop\Adobe Photoshop CC 2014.lnk 2015-01-14 22:34 - 2015-01-14 22:45 - 91931728 _____ (The GIMP Team ) C:\Users\User\Downloads\gimp-2.8.14-setup-1.exe 2015-01-14 22:26 - 2015-01-14 22:26 - 00037034 _____ () C:\Users\User\Downloads\WearMC-1.7.10g.zip 2015-01-14 22:03 - 2015-01-14 22:03 - 00009127 _____ () C:\Users\User\Downloads\gimp-2.8.14-setup-1.exe.torrent 2015-01-14 21:51 - 2015-01-14 21:51 - 00001334 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk 2015-01-14 21:51 - 2015-01-14 21:51 - 00001322 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2015-01-14 21:40 - 2015-01-14 21:16 - 00000415 _____ () C:\zoek-results2015-01-14-201657.log 2015-01-14 21:38 - 2015-01-14 21:38 - 01295360 _____ () C:\Users\User\Downloads\zoek.exe 2015-01-14 21:31 - 2015-01-14 21:32 - 04279080 _____ () C:\Users\User\Downloads\zoek.rar 2015-01-14 21:16 - 2015-01-14 19:13 - 00000367 _____ () C:\zoek-results2015-01-14-181353.log 2015-01-14 19:13 - 2015-01-14 19:05 - 00000402 _____ () C:\zoek-results2015-01-14-180525.log 2015-01-14 19:05 - 2015-01-14 21:40 - 00000470 _____ () C:\zoek-results.log 2015-01-14 19:04 - 2015-01-14 21:40 - 00000400 _____ () C:\runcheck.txt 2015-01-14 19:04 - 2015-01-14 19:04 - 00000000 ____D () C:\zoek_backup 2015-01-14 18:52 - 2015-01-14 18:54 - 00000000 ____D () C:\AdwCleaner 2015-01-14 18:51 - 2015-01-14 18:52 - 02191360 _____ () C:\Users\User\Downloads\AdwCleaner_4.107.exe 2015-01-14 18:48 - 2015-01-14 18:49 - 00000000 ____D () C:\Users\User\Downloads\RevoUninstallerPortable 2015-01-14 18:48 - 2015-01-14 18:48 - 02785665 _____ (PortableApps.com) C:\Users\User\Downloads\RevoUninstallerPortable_1.95_Rev_2.paf.exe 2015-01-14 18:05 - 2015-01-15 17:31 - 00000870 _____ () C:\Users\User\Downloads\Addition.txt 2015-01-14 16:26 - 2015-01-15 15:15 - 00020430 _____ () C:\Windows\PFRO.log 2015-01-14 16:15 - 2015-01-14 16:16 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-2-0-3-1025.exe 2015-01-13 23:28 - 2015-01-13 23:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\HandBrake 2015-01-13 23:05 - 2015-01-13 23:06 - 02381541 _____ () C:\Users\User\Documents\Ohne Titel.wmv 2015-01-13 14:24 - 2015-01-13 14:25 - 25239492 _____ () C:\Users\User\Downloads\Sphax PureBDcraft 128x MC18.zip 2015-01-12 21:41 - 2015-01-12 21:42 - 00878207 _____ () C:\Users\User\Downloads\OptiFine_1.8.0_HD_U_B6.jar 2015-01-11 22:52 - 2015-01-11 22:52 - 00000000 ____D () C:\Users\User\AppData\Roaming\Publish Providers 2015-01-11 22:36 - 2015-01-11 22:45 - 388133021 _____ () C:\Users\User\Downloads\Sony Vegas 13.0.290 - xGerTutorial.rar 2015-01-11 22:20 - 2015-01-11 22:21 - 00000000 ____D () C:\Users\User\AppData\Local\Sony 2015-01-11 22:20 - 2015-01-11 22:20 - 00001057 _____ () C:\Users\Public\Desktop\Vegas Pro 13.0 (64-bit).lnk 2015-01-11 22:20 - 2015-01-11 22:20 - 00000000 ____D () C:\ProgramData\Sony 2015-01-11 22:20 - 2015-01-11 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony 2015-01-11 22:20 - 2015-01-11 22:20 - 00000000 ____D () C:\Program Files\Sony 2015-01-11 22:20 - 2015-01-11 22:20 - 00000000 ____D () C:\Program Files (x86)\Sony 2015-01-11 22:19 - 2015-01-13 23:05 - 00000000 ____D () C:\Users\User\AppData\Roaming\Sony 2015-01-11 22:06 - 2015-01-11 22:17 - 411058696 _____ (Sony Creative Software Inc.) C:\Users\User\Downloads\vegaspro13.0.373_64bit.exe 2015-01-11 22:03 - 2015-01-11 22:03 - 00001870 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2015-01-11 22:03 - 2015-01-11 22:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2015-01-11 22:03 - 2015-01-11 22:03 - 00000000 ____D () C:\ProgramData\Apple Computer 2015-01-11 22:03 - 2015-01-11 22:03 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2015-01-11 22:02 - 2015-01-16 15:19 - 00000000 ____D () C:\ProgramData\Apple 2015-01-11 22:02 - 2015-01-11 22:02 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2015-01-11 22:02 - 2015-01-11 22:02 - 00000000 ____D () C:\Users\User\AppData\Local\Apple 2015-01-11 22:02 - 2015-01-11 22:02 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2015-01-11 22:00 - 2015-01-11 22:01 - 42096984 _____ (Apple Inc.) C:\Users\User\Downloads\QuickTimeInstaller.exe 2015-01-11 21:09 - 2015-01-11 21:17 - 35715583 _____ () C:\Users\User\Downloads\Yogbox Sphax.zip 2015-01-11 20:39 - 2015-01-11 20:41 - 60160626 _____ () C:\Users\User\Downloads\Sphax Big Dig 128x.zip 2015-01-10 20:07 - 2015-01-10 20:07 - 00000222 _____ () C:\Users\User\Desktop\Chivalry Medieval Warfare.url 2015-01-10 16:01 - 2015-01-10 16:01 - 00000000 ____D () C:\Users\User\Downloads\runtime 2015-01-10 15:26 - 2015-01-10 16:02 - 00000000 ____D () C:\Users\User\Downloads\game 2015-01-10 15:00 - 2015-01-10 15:00 - 00000000 ____D () C:\Users\User\Downloads\AfterEffects.CC.2014 2015-01-10 14:57 - 2015-01-10 14:58 - 1020041459 _____ () C:\Users\User\Downloads\AfterEffects.CC.2014.rar 2015-01-10 14:56 - 2015-01-10 14:56 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url 2015-01-10 12:58 - 2015-01-10 12:59 - 01294088 _____ (Mojang) C:\Users\User\Downloads\Minecraft.exe 2015-01-07 19:12 - 2015-01-14 22:42 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe 2015-01-06 22:23 - 2015-01-14 22:39 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2015-01-06 22:23 - 2015-01-14 22:39 - 00000000 ____D () C:\Program Files\Adobe 2015-01-06 16:17 - 2015-01-06 16:17 - 00000000 ____D () C:\Users\User\AppData\Roaming\WindSolutions 2015-01-06 16:16 - 2015-01-06 16:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2015-01-06 16:15 - 2015-01-06 16:15 - 00000000 ____D () C:\ProgramData\WindSolutions 2015-01-01 23:36 - 2015-01-01 23:34 - 00182304 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe 2015-01-01 22:41 - 2015-01-01 22:41 - 01085345 _____ () C:\Users\User\Downloads\Robocraft_Hack_Tool.zip 2015-01-01 19:18 - 2015-01-01 07:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-01-01 19:16 - 2015-01-01 19:18 - 00000000 ____D () C:\Users\User\AppData\Local\Google 2015-01-01 19:16 - 2015-01-01 19:18 - 00000000 ____D () C:\Program Files (x86)\Google 2015-01-01 19:13 - 2015-01-01 19:13 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono 2015-01-01 18:52 - 2015-01-01 18:52 - 00000000 ____D () C:\Users\User\AppData\Local\LogMeIn 2015-01-01 18:52 - 2015-01-01 18:52 - 00000000 ____D () C:\ProgramData\LogMeIn 2015-01-01 18:51 - 2015-01-01 07:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2015-01-01 18:51 - 2015-01-01 07:48 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2015-01-01 18:50 - 2015-01-01 18:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cliqz 2015-01-01 18:50 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll 2015-01-01 18:50 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll 2015-01-01 18:47 - 2015-01-01 18:47 - 01174352 _____ () C:\Users\User\Downloads\LogMeIn Hamachi - CHIP-Installer.exe 2015-01-01 18:45 - 2015-01-01 18:45 - 00000222 _____ () C:\Users\User\Desktop\Robocraft.url 2015-01-01 18:30 - 2015-01-01 23:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 2015-01-01 18:29 - 2015-01-01 18:29 - 02782320 _____ (Beepa Pty Ltd) C:\Users\User\Downloads\setup(1).exe 2015-01-01 07:51 - 2015-01-16 14:47 - 00000000 ____D () C:\Users\User\AppData\Local\LogMeIn Hamachi 2015-01-01 07:48 - 2015-01-01 07:48 - 00000951 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2015-01-01 07:47 - 2015-01-01 07:47 - 08536064 _____ () C:\Users\User\Downloads\hamachi.msi 2015-01-01 07:45 - 2009-03-18 17:35 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys 2015-01-01 07:42 - 2015-01-01 07:42 - 08536064 _____ () C:\Users\User\Downloads\hamachi291.msi 2015-01-01 07:25 - 2015-01-01 07:31 - 183984764 _____ () C:\Users\User\Downloads\Pixelmon-1.7.10-3.3.7-universal.jar 2015-01-01 07:25 - 2015-01-01 07:25 - 03090909 _____ () C:\Users\User\Downloads\forge-1.7.10-10.13.2.1277-installer.jar 2015-01-01 07:25 - 2015-01-01 07:25 - 03090909 _____ () C:\Users\User\Downloads\forge-1.7.10-10.13.2.1277-installer (1).jar 2015-01-01 07:21 - 2015-01-01 07:21 - 00002272 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-01-01 07:19 - 2015-01-16 14:44 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-01-01 07:19 - 2015-01-16 01:25 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-01-01 07:19 - 2015-01-01 07:19 - 00880784 _____ (Google Inc.) C:\Users\User\Downloads\ChromeSetup.exe 2015-01-01 07:19 - 2015-01-01 07:19 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-01-01 07:19 - 2015-01-01 07:19 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-12-25 11:53 - 2014-12-25 11:53 - 00000000 ____D () C:\Program Files (x86)\unuisales 2014-12-25 11:53 - 2014-12-25 11:53 - 00000000 ____D () C:\Program Files (x86)\uanIIsAilees 2014-12-25 11:52 - 2014-12-25 11:52 - 17930928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-12-25 11:37 - 2014-12-25 11:37 - 00000000 ___RD () C:\Users\User\Creative Cloud Files 2014-12-25 11:33 - 2015-01-10 13:31 - 00000000 ____D () C:\ProgramData\Adobe 2014-12-25 11:31 - 2015-01-14 21:49 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-12-25 11:26 - 2015-01-16 14:46 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe 2014-12-25 11:26 - 2014-12-25 11:26 - 00672432 _____ (Adobe Systems Incorporated) C:\Users\User\Downloads\CreativeCloudSet-Up.exe 2014-12-24 23:28 - 2014-12-24 23:29 - 05933836 _____ () C:\Users\User\Downloads\Huzuni 3.3.2.zip 2014-12-24 23:22 - 2015-01-15 22:23 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype 2014-12-24 23:22 - 2015-01-01 23:23 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-12-24 23:22 - 2015-01-01 23:23 - 00000000 ____D () C:\ProgramData\Skype 2014-12-24 23:22 - 2015-01-01 23:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-12-24 23:22 - 2014-12-24 23:22 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-12-24 23:22 - 2014-12-24 23:22 - 00000000 ____D () C:\Users\User\AppData\Local\Skype 2014-12-24 23:05 - 2015-01-01 23:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Handbrake 2014-12-24 23:05 - 2014-12-24 23:05 - 00000843 _____ () C:\Users\User\Desktop\Handbrake.lnk 2014-12-24 23:05 - 2014-12-24 23:05 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake 2014-12-24 23:05 - 2014-12-24 23:05 - 00000000 ____D () C:\Program Files\Handbrake 2014-12-24 22:57 - 2014-12-24 22:58 - 01548384 _____ (Skype Technologies S.A.) C:\Users\User\Downloads\SkypeSetup.exe 2014-12-24 22:54 - 2014-12-24 23:02 - 16724942 _____ () C:\Users\User\Downloads\HandBrake-0.10.0-x86_64-Win_GUI.exe 2014-12-24 22:43 - 2015-01-10 20:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-12-24 22:43 - 2014-12-24 22:43 - 00000220 _____ () C:\Users\User\Desktop\Garry's Mod.url 2014-12-24 22:32 - 2015-01-13 15:44 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-12-24 22:32 - 2015-01-01 23:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-12-24 22:32 - 2014-12-24 22:32 - 00000988 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-12-24 22:27 - 2015-01-01 23:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved 2014-12-24 22:27 - 2014-12-24 22:27 - 00000000 ____D () C:\Users\User\AppData\Roaming\library_dir 2014-12-24 22:27 - 2014-12-24 22:27 - 00000000 ____D () C:\ProgramData\ATI 2014-12-24 22:25 - 2015-01-16 14:46 - 00000000 ____D () C:\Users\User\AppData\Roaming\Raptr 2014-12-24 22:25 - 2014-12-24 22:27 - 00000000 ____D () C:\Program Files (x86)\Raptr 2014-12-24 22:25 - 2014-12-24 22:25 - 00058610 _____ () C:\Windows\SysWOW64\CCCInstall_201412242225085979.log 2014-12-24 22:25 - 2014-12-24 22:25 - 00000000 ____D () C:\Program Files (x86)\AMD AVT 2014-12-24 22:24 - 2015-01-01 23:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2014-12-24 22:21 - 2014-12-24 22:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\AMD 2014-12-24 22:18 - 2014-12-24 22:18 - 00000000 ____D () C:\Users\User\Desktop\game 2014-12-24 22:18 - 2014-12-24 22:18 - 00000000 ____D () C:\AMD 2014-12-24 22:13 - 2015-01-01 18:39 - 22764192 _____ () C:\Users\User\Desktop\TechnicLauncher.exe 2014-12-24 22:13 - 2015-01-01 18:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\.technic 2014-12-24 22:13 - 2014-12-24 22:14 - 00863507 _____ () C:\Users\User\Downloads\OptiFine_1.7.10_HD_U_B1.jar 2014-12-24 22:11 - 2014-12-24 22:11 - 00000000 ____D () C:\Users\User\AppData\Roaming\WinRAR 2014-12-24 22:11 - 2014-12-24 22:11 - 00000000 ____D () C:\Users\User\AppData\Roaming\java 2014-12-24 22:08 - 2014-12-24 22:09 - 01142392 _____ () C:\Users\User\Downloads\SteamSetup.exe 2014-12-24 22:06 - 2015-01-12 21:00 - 00000000 ____D () C:\Fraps 2014-12-24 22:06 - 2015-01-01 18:30 - 00000587 _____ () C:\Users\Public\Desktop\Fraps.lnk 2014-12-24 22:05 - 2014-12-24 22:05 - 02326976 _____ (Beepa Pty Ltd) C:\Users\User\Downloads\setup.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-12-01 20:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2015-01-16 14:52 - 2009-07-14 05:45 - 00020672 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-16 14:52 - 2009-07-14 05:45 - 00020672 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-16 14:51 - 2013-04-27 23:13 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-16 14:49 - 2014-11-03 13:13 - 00000000 ____D () C:\ProgramData\MFAData 2015-01-16 14:47 - 2013-04-27 23:23 - 00194605 _____ () C:\Windows\WindowsUpdate.log 2015-01-16 14:46 - 2014-11-03 13:37 - 00159040 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT 2015-01-16 14:46 - 2009-07-14 05:45 - 05188704 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-01-16 14:44 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-01-14 22:42 - 2014-11-03 12:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\Adobe 2015-01-14 21:51 - 2013-04-27 23:57 - 00000000 ____D () C:\ProgramData\Package Cache 2015-01-14 18:51 - 2014-11-03 12:43 - 00000000 ____D () C:\ProgramData\TuneUp Software 2015-01-14 17:11 - 2009-07-14 18:58 - 00698688 _____ () C:\Windows\system32\perfh007.dat 2015-01-14 17:11 - 2009-07-14 18:58 - 00148828 _____ () C:\Windows\system32\perfc007.dat 2015-01-14 17:11 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-01-14 16:26 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\Performance 2015-01-10 15:33 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2015-01-01 23:24 - 2014-11-03 13:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-01-01 23:24 - 2014-11-03 13:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer 2015-01-01 23:24 - 2014-11-03 12:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2015-01-01 23:24 - 2013-04-28 00:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK 2015-01-01 23:24 - 2013-04-27 23:54 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander 2015-01-01 23:24 - 2013-04-27 23:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atomic Alarm Clock 2015-01-01 23:24 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-01-01 23:23 - 2014-11-03 13:14 - 00000000 ____D () C:\ProgramData\AVG2015 2015-01-01 23:23 - 2014-11-03 13:12 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\X Codec Pack 2.6.8 2015-01-01 23:23 - 2014-11-03 13:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64 2015-01-01 23:23 - 2014-11-03 12:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint 2015-01-01 23:23 - 2014-11-03 12:42 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-01-01 23:23 - 2014-11-03 12:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-01-01 23:23 - 2014-11-03 12:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-01-01 23:23 - 2014-11-03 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Topos 2015-01-01 23:23 - 2013-04-28 00:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SHARKOON Skiller 2015-01-01 23:23 - 2013-04-27 23:41 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-01-01 23:23 - 2013-04-27 23:41 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-01-01 23:23 - 2013-04-27 23:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-01-01 23:23 - 2013-04-27 23:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-01-01 23:23 - 2009-07-14 19:18 - 00000000 ___RD () C:\Users\Public\Recorded TV 2015-01-01 23:23 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-01-01 23:23 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-01-01 23:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-12-25 11:52 - 2013-04-27 23:13 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-12-25 11:52 - 2013-04-27 23:13 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-12-25 11:52 - 2013-04-27 23:13 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-12-24 22:25 - 2013-04-28 00:01 - 00000000 ____D () C:\ProgramData\AMD 2014-12-24 22:24 - 2013-04-28 00:01 - 00000000 ____D () C:\Program Files\AMD 2014-12-24 22:22 - 2013-04-27 23:56 - 00000000 ____D () C:\Program Files\ATI Technologies 2014-12-24 22:20 - 2013-04-28 00:02 - 00000000 ____D () C:\Program Files (x86)\AMD Some content of TEMP: ==================== C:\Users\User\AppData\Local\Temp\7za.exe C:\Users\User\AppData\Local\Temp\hijackthis.exe C:\Users\User\AppData\Local\Temp\NirCmd.exe C:\Users\User\AppData\Local\Temp\PEVZ.EXE C:\Users\User\AppData\Local\Temp\Quarantine.exe C:\Users\User\AppData\Local\Temp\remove.exe C:\Users\User\AppData\Local\Temp\sed.exe C:\Users\User\AppData\Local\Temp\shortcut.exe C:\Users\User\AppData\Local\Temp\sqlite3.dll C:\Users\User\AppData\Local\Temp\swreg.exe C:\Users\User\AppData\Local\Temp\swxcacls.exe C:\Users\User\AppData\Local\Temp\wget.exe C:\Users\User\AppData\Local\Temp\zoek-delete.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-11-01 14:13 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-01-2015 01 Ran by User at 2015-01-16 15:20:19 Running from C:\Users\User\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.0.465 - Adobe Systems Incorporated) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated) Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\{755DDD59-9690-4F1A-BE9C-D39BDCFA77C9}) (Version: 12.1.3.153 - Adobe Systems, Inc) Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.8 - Sereby Corporation) AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Atomic Alarm Clock 6.262 (HKLM\...\Atomic Alarm Clock_is1) (Version: - Drive Software Company) AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5645 - AVG Technologies) AVG 2015 (Version: 15.0.4260 - AVG Technologies) Hidden AVG 2015 (Version: 15.0.5645 - AVG Technologies) Hidden AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.0.0.19 - AVG Technologies) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform) cFosSpeed v4.50 (HKLM\...\cFosSpeed) (Version: 4.50 - cFos Software GmbH, Bonn) Chivalry: Medieval Warfare (HKLM-x32\...\Steam App 219640) (Version: - Torn Banner Studios) Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.53 - Cliqz.com) DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios) GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden HandBrake 0.10.0 (HKLM-x32\...\HandBrake) (Version: 0.10.0 - ) HWiNFO64 Version 4.46 (HKLM\...\HWiNFO64_is1) (Version: 4.46 - Martin Malík - REALiX) Java 8 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418020F0}) (Version: 8.0.200 - Oracle Corporation) Java 8 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218020F0}) (Version: 8.0.200 - Oracle Corporation) LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.291 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.291 - LogMeIn, Inc.) Hidden MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{DBBE07F1-62BC-4E71-B8A0-D2B3BC4D4198}) (Version: 7.0.1.27 - MAGIX AG) MAGIX Speed burnR (MSI) (Version: 7.0.1.27 - MAGIX AG) Hidden MAGIX Video Pro X6 (HKLM\...\MX.{91CDE5CC-4855-4863-AE4C-7F0568699907}) (Version: 13.0.3.24 - MAGIX AG) MAGIX Video Pro X6 (Version: 13.0.3.24 - MAGIX AG) Hidden MAGIX Video Pro X6 64 bit Update (Version: 13.0.4.2 - MAGIX AG) Hidden Microsoft .NET Framework 4.5.2 (HKLM\...\{26784146-6E05-3FF9-9335-786C7C0FB5BE}) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft) Mozilla Firefox 33.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.2 (x86 de)) (Version: 33.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.308.1 - Tracker Software Products Ltd) QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Raptr (HKLM-x32\...\Raptr) (Version: - ) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7324 - Realtek Semiconductor Corp.) Robocraft (HKLM-x32\...\Steam App 301520) (Version: - Freejam) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden SHARKOON Skiller (HKLM-x32\...\{91C25547-9534-41A5-823A-1E54BA16EA3F}) (Version: 1.00.0000 - ) Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve) Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH) TP-LINK TL-WN951N Driver (HKLM-x32\...\{FDA7E907-6539-42C1-9721-0239C281B336}) (Version: 1.3.1 - TP-LINK) TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK) Vegas Pro 13.0 (64-bit) (HKLM\...\{386F5740-091D-11E4-B13E-F04DA23A5C58}) (Version: 13.0.373 - Sony) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) X Codec Pack (HKLM\...\X Codec Pack) (Version: 2.6.8 - X Codec Pack team) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 11-01-2015 22:02:54 Installed QuickTime 7 14-01-2015 18:50:18 Revo Uninstaller's restore point - TuneUp Utilities 14-01-2015 18:50:40 TuneUp Utilities wird entfernt 14-01-2015 18:51:07 TuneUp Utilities Language Pack (de-DE) wird entfernt 14-01-2015 18:52:58 Revo Uninstaller's restore point - TuneUp Utilities 14-01-2015 19:05:10 zoek.exe restore point 14-01-2015 21:50:07 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 14-01-2015 21:50:27 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 14-01-2015 21:50:46 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 14-01-2015 21:51:00 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 14-01-2015 21:51:16 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 14-01-2015 21:51:31 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 14-01-2015 22:36:31 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 14-01-2015 22:36:48 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 14-01-2015 22:43:33 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 14-01-2015 22:43:51 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 01-11-2015 14:17:52 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 01-11-2015 14:18:06 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 01-11-2015 14:18:23 DirectX wurde installiert 01-11-2015 14:25:40 Gerätetreiber-Paketinstallation: Scarlet.Crush Productions Systemgeräte ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {48E6975F-9352-41F7-ABAC-64A2D6C74F14} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-01] (Google Inc.) Task: {6A1438CB-DE71-4B9E-A8A4-F16FC0FB5E32} - System32\Tasks\AdobeAAMUpdater-1.0-User-PC-User => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-10-14] (Adobe Systems Incorporated) Task: {781614F4-4EE1-4526-9E08-69D086D880B3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-25] (Adobe Systems Incorporated) Task: {841AD1E8-932A-4153-AFDB-25E3241FE8D1} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-30] (Oracle Corporation) Task: {895C3716-DEF3-4C8D-B586-B83B46C0ECF9} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {A1BB123C-85F1-41A0-88DF-CFA0744FEDC8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd) Task: {DACF1F90-27EA-4D3B-88EE-15EFFBFCBA75} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => C:\Program Files (x86)\TuneUp Utilities 2010\OneClick.exe Task: {E667CE9D-6699-4294-ACF5-5A7262ADD1A8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-01] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-12-19 15:57 - 2014-12-19 15:57 - 01039008 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll 2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\office.odf 2014-11-20 21:23 - 2014-11-20 21:23 - 00214528 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll 2014-02-11 06:08 - 2014-02-11 06:08 - 00817152 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Device.dll 2014-02-11 06:08 - 2014-02-11 06:08 - 03650560 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Platform.dll 2014-11-20 21:23 - 2014-11-20 21:23 - 00127488 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.Wlan.dll 2013-04-27 23:18 - 2013-04-24 17:20 - 02007040 _____ () C:\Program Files\Atomic Alarm Clock\timeserv.exe 2013-04-28 00:13 - 2013-04-09 10:05 - 00846848 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe 2014-11-20 21:23 - 2014-11-20 21:23 - 00102400 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2014-12-19 15:57 - 2014-12-19 15:57 - 05979808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe 2013-04-28 00:13 - 2013-01-22 13:40 - 01411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll 2013-04-28 00:13 - 2013-04-02 12:41 - 00193024 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll 2013-04-28 00:13 - 2013-05-07 10:16 - 00138752 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF.dll 2013-04-28 00:13 - 2013-05-07 10:16 - 00115712 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF_WPS_WIN7.DLL 2014-11-18 08:45 - 2014-11-18 08:45 - 01685528 _____ () C:\Program Files (x86)\AVG Web TuneUp\TBAPI.dll 2015-01-07 21:27 - 2015-01-07 21:27 - 36730032 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll 2010-11-22 23:56 - 2010-11-22 23:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd 2014-05-14 00:26 - 2014-05-14 00:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd 2014-05-14 00:26 - 2014-05-14 00:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd 2014-05-14 00:26 - 2014-05-14 00:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd 2014-05-14 00:26 - 2014-05-14 00:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd 2010-11-22 23:57 - 2010-11-22 23:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll 2010-11-22 23:56 - 2010-11-22 23:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd 2010-11-22 23:57 - 2010-11-22 23:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd 2010-11-22 23:57 - 2010-11-22 23:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd 2011-02-15 19:17 - 2011-02-15 19:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll 2010-11-22 23:57 - 2010-11-22 23:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd 2014-05-14 00:26 - 2014-05-14 00:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll 2010-11-22 23:57 - 2010-11-22 23:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd 2014-08-14 01:37 - 2014-08-14 01:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll 2014-08-14 01:37 - 2014-08-14 01:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll 2010-11-22 23:56 - 2010-11-22 23:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd 2010-11-22 23:57 - 2010-11-22 23:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd 2010-11-22 23:56 - 2010-11-22 23:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd 2013-11-21 01:05 - 2013-11-21 01:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll 2010-11-22 23:57 - 2010-11-22 23:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd 2014-06-18 01:56 - 2014-06-18 01:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd 2011-02-15 19:17 - 2011-02-15 19:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll 2010-11-23 00:06 - 2010-11-23 00:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll 2013-05-10 00:52 - 2013-05-10 00:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll 2013-05-10 00:52 - 2013-05-10 00:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll 2013-05-10 00:52 - 2013-05-10 00:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll 2013-05-03 19:56 - 2013-05-03 19:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll 2013-05-03 19:56 - 2013-05-03 19:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll 2013-05-03 19:56 - 2013-05-03 19:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll 2013-05-03 19:57 - 2013-05-03 19:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll 2015-01-07 21:27 - 2015-01-07 21:27 - 00746160 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libglesv2.dll 2015-01-07 21:27 - 2015-01-07 21:27 - 00136368 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libegl.dll 2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-798746062-960158335-3196871331-500 - Administrator - Disabled) Gast (S-1-5-21-798746062-960158335-3196871331-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-798746062-960158335-3196871331-1003 - Limited - Enabled) User (S-1-5-21-798746062-960158335-3196871331-1000 - Administrator - Enabled) => C:\Users\User ==================== Faulty Device Manager Devices ============= Name: PnP-Monitor (Standard) Description: PnP-Monitor (Standard) Class Guid: {4d36e96e-e325-11ce-bfc1-08002be10318} Manufacturer: (Standardmonitortypen) Service: monitor Problem: : Windows cannot load the device driver for this hardware because a previous instance of the device driver is still in memory. (Code 38) Resolution: The driver could not be loaded because a previous instance is still loaded. Restart the computer. ==================== Event log errors: ========================= Application errors: ================== Error: (01/14/2015 04:31:59 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe, Version: 9.0.4500.26, Zeitstempel: 0x4c644a73 Name des fehlerhaften Moduls: TuneUpUtilitiesService64.exe, Version: 9.0.4500.26, Zeitstempel: 0x4c644a73 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000015d21 ID des fehlerhaften Prozesses: 0x928 Startzeit der fehlerhaften Anwendung: 0xTuneUpUtilitiesService64.exe0 Pfad der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe1 Pfad des fehlerhaften Moduls: TuneUpUtilitiesService64.exe2 Berichtskennung: TuneUpUtilitiesService64.exe3 Error: (01/14/2015 03:48:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe, Version: 9.0.4500.26, Zeitstempel: 0x4c644a73 Name des fehlerhaften Moduls: TuneUpUtilitiesService64.exe, Version: 9.0.4500.26, Zeitstempel: 0x4c644a73 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000015d21 ID des fehlerhaften Prozesses: 0xa44 Startzeit der fehlerhaften Anwendung: 0xTuneUpUtilitiesService64.exe0 Pfad der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe1 Pfad des fehlerhaften Moduls: TuneUpUtilitiesService64.exe2 Berichtskennung: TuneUpUtilitiesService64.exe3 Error: (01/13/2015 08:34:46 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe, Version: 9.0.4500.26, Zeitstempel: 0x4c644a73 Name des fehlerhaften Moduls: TuneUpUtilitiesService64.exe, Version: 9.0.4500.26, Zeitstempel: 0x4c644a73 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000015d21 ID des fehlerhaften Prozesses: 0x7c0 Startzeit der fehlerhaften Anwendung: 0xTuneUpUtilitiesService64.exe0 Pfad der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe1 Pfad des fehlerhaften Moduls: TuneUpUtilitiesService64.exe2 Berichtskennung: TuneUpUtilitiesService64.exe3 Error: (01/13/2015 02:24:55 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe, Version: 9.0.4500.26, Zeitstempel: 0x4c644a73 Name des fehlerhaften Moduls: TuneUpUtilitiesService64.exe, Version: 9.0.4500.26, Zeitstempel: 0x4c644a73 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000015d21 ID des fehlerhaften Prozesses: 0x784 Startzeit der fehlerhaften Anwendung: 0xTuneUpUtilitiesService64.exe0 Pfad der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe1 Pfad des fehlerhaften Moduls: TuneUpUtilitiesService64.exe2 Berichtskennung: TuneUpUtilitiesService64.exe3 Error: (01/12/2015 09:42:50 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm javaw.exe, Version 8.0.25.18 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 19e0 Startzeit: 01d02ea84d4412f1 Endzeit: 16 Anwendungspfad: C:\Users\User\Downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe Berichts-ID: 90ebe541-9a9b-11e4-8fa4-8c89a5595e3b Error: (01/12/2015 08:55:57 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe, Version: 9.0.4500.26, Zeitstempel: 0x4c644a73 Name des fehlerhaften Moduls: TuneUpUtilitiesService64.exe, Version: 9.0.4500.26, Zeitstempel: 0x4c644a73 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000015d21 ID des fehlerhaften Prozesses: 0x5ac Startzeit der fehlerhaften Anwendung: 0xTuneUpUtilitiesService64.exe0 Pfad der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe1 Pfad des fehlerhaften Moduls: TuneUpUtilitiesService64.exe2 Berichtskennung: TuneUpUtilitiesService64.exe3 Error: (12/01/2015 08:54:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (12/01/2015 08:53:21 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (12/01/2015 08:52:56 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (12/01/2015 08:52:45 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . System errors: ============= Error: (01/16/2015 02:44:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (01/16/2015 02:44:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht. Error: (01/16/2015 02:43:51 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 16.01.2015 um 01:40:07 unerwartet heruntergefahren. Error: (01/15/2015 08:23:28 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {CC957078-B838-47C4-A7CF-626E7A82FC58} Error: (01/14/2015 11:11:16 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} Error: (01/14/2015 07:09:49 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} Error: (01/14/2015 06:54:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "LogMeIn Hamachi Tunneling Engine" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (01/14/2015 06:54:49 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts. Error: (01/14/2015 06:54:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Volumeschattenkopie" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (01/14/2015 06:54:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Office Software Protection Platform" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Microsoft Office Sessions: ========================= Error: (01/14/2015 04:31:59 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: TuneUpUtilitiesService64.exe9.0.4500.264c644a73TuneUpUtilitiesService64.exe9.0.4500.264c644a73c00000050000000000015d2192801d0300e882f0c90C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exeC:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe7a99670c-9c02-11e4-9e39-8c89a5595e3b Error: (01/14/2015 03:48:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: TuneUpUtilitiesService64.exe9.0.4500.264c644a73TuneUpUtilitiesService64.exe9.0.4500.264c644a73c00000050000000000015d21a4401d0300874ca8198C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exeC:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe68fffd9d-9bfc-11e4-90a3-8c89a5595e3b Error: (01/13/2015 08:34:46 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: TuneUpUtilitiesService64.exe9.0.4500.264c644a73TuneUpUtilitiesService64.exe9.0.4500.264c644a73c00000050000000000015d217c001d02f6745bd33cfC:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exeC:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe3a8d306c-9b5b-11e4-b307-8c89a5595e3b Error: (01/13/2015 02:24:55 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: TuneUpUtilitiesService64.exe9.0.4500.264c644a73TuneUpUtilitiesService64.exe9.0.4500.264c644a73c00000050000000000015d2178401d02f339b71418bC:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exeC:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe8fb59246-9b27-11e4-abac-8c89a5595e3b Error: (01/12/2015 09:42:50 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: javaw.exe8.0.25.1819e001d02ea84d4412f116C:\Users\User\Downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe90ebe541-9a9b-11e4-8fa4-8c89a5595e3b Error: (01/12/2015 08:55:57 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: TuneUpUtilitiesService64.exe9.0.4500.264c644a73TuneUpUtilitiesService64.exe9.0.4500.264c644a73c00000050000000000015d215ac01d12c7193422b0fC:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exeC:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe057c5396-9a95-11e4-8fa4-8c89a5595e3b Error: (12/01/2015 08:54:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (12/01/2015 08:53:21 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (12/01/2015 08:52:56 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (12/01/2015 08:52:45 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. ==================== Memory info =========================== Processor: AMD FX(tm)-4100 Quad-Core Processor Percentage of memory in use: 30% Total physical RAM: 8191.18 MB Available physical RAM: 5701.05 MB Total Pagefile: 16380.56 MB Available Pagefile: 13805.79 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (SYSTEM_WIN7_x64) (Fixed) (Total:195.21 GB) (Free:89.37 GB) NTFS Drive d: (DATEN) (Fixed) (Total:736.2 GB) (Free:722.97 GB) NTFS Drive e: (SHARKOON Skiller) (CDROM) (Total:0.04 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 92CDA8A4) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=195.2 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=736.2 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
16.01.2015, 15:31 | #20 |
/// TB-Ausbilder /// Anleitungs-Guru | AVG wirklich Trojaner entfernt (WIRKLICH DRINGEND!)
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
Themen zu AVG wirklich Trojaner entfernt (WIRKLICH DRINGEND!) |
anti-malware, avg, bildschirm, bildschirm schwarz, computer, dateien, dringend, funktioniert, gesendet, hohe, internet, malwarebytes, namen, neu, panik, problem, programm, rechner, scan, schnell, sekunden, sicherheit, sound, telekom, trojaner |