| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stopptWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
11.06.2014, 11:38
| #1 |
| |  Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Guten Tag, Ich habe mehrere Probleme mit meinem Rechner, bei denen ich mir nicht sicher bin, ob die zusammenhängen (Virus?). Ich benutze den Internetbrowser Opera (Version: 22.0.1471.50) und seit kurzem stürzt dieser bzw. die geöffneten Webseiten öfters ab. Wenn die Webseiten abstürzen, muss ich diese nur neu laden, damit die gewünschten Webseiten erscheinen. Des weiteren hängen sich meine Spiele öfters auf. Ich habe deren Grafikeinstellungen schon auf das Minimum gesetzt, da ich dachte, dass mein Rechner möglicherweise zu alt für diese Spiele ist (Wobei das Problem bei manchen Spielen früher nicht aufgetreten ist). Zudem hängt sich bei manchen Spielen der ganze Computer auf, d.h. der Bildschirm wird schwarz (bzw. schaltet sich automatisch ab, da dieser keine Verbindung zum Computer mehr erkennt) und die Soundausgabe (Boxen oder Headset) gibt nur noch ein lautes Rauschen von sich. Wenn dieses Problem auftretet muss ich die Stromzufuhr zum Rechner unterbrechen und neu hochfahren. Da ich in erster Linie einen Virus vermutet habe, habe ich mein Antivirus Program (Norton 360 Online [Version 21.3.0.12]) mein Computer scannen lassen, dieser hat aber keine Viren gefunden bzw. oben genannten Probleme treten weiterhin auf. Können Sie mir bei diesem Problem weiterhelfen? LogDateien: FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-06-2014
Ran by Ankhang (administrator) on ANKHANG-PC on 11-06-2014 11:44:28
Running from C:\Users\Ankhang\Downloads\Trojanerboard
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Spotify Ltd) C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
() C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2353880 2013-11-01] (Microsoft Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-802949540-198687548-912749210-1000\...\Run: [Spotify Web Helper] => C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-04] (Spotify Ltd)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://9gag.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF [2014-02-17]
==================== Services (Whitelisted) =================
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.)
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [265040 2014-05-11] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-05-31] ()
S2 SkypeUpdate; D:\Khang Hoang\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [549008 2014-05-12] (Cherished Technololgy LIMITED)
==================== Drivers (Whitelisted) ====================
S3 1394hub; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140606.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-11] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-11] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140610.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140610.019\ENG64.SYS [126040 2014-06-10] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140610.019\EX64.SYS [2099288 2014-06-10] (Symantec Corporation)
R0 SMR410; C:\Windows\System32\drivers\SMR410.SYS [96856 2014-06-11] (Symantec Corporation)
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1503000.00C\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-16] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-11 11:44 - 2014-06-11 11:44 - 00000000 ____D () C:\FRST
2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule
2014-06-11 11:40 - 2014-06-11 11:44 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard
2014-06-11 11:40 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins
2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable
2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp
2014-06-11 10:25 - 2014-06-11 10:25 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS
2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp
2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE
2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM
2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk
2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk
2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-06 12:03 - 2014-06-10 21:17 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk
2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine
2014-06-06 11:19 - 2014-06-06 12:03 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare
2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk
2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft
2014-06-04 09:33 - 2014-06-04 09:36 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc
2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-04 09:05 - 2014-06-06 10:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify
2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk
2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-04 09:04 - 2014-06-07 16:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify
2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url
2014-06-03 23:01 - 2014-06-03 23:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim
2014-06-03 22:56 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\Documents\my games
2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089
2014-06-03 10:55 - 2014-06-09 15:03 - 00000000 ____D () C:\Program Files (x86)\SEGA
2014-06-03 09:41 - 2014-06-03 11:00 - 00000360 _____ () C:\console.log
2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk
2014-06-02 22:17 - 2014-06-03 11:04 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA
2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet
2014-06-02 18:00 - 2014-06-02 18:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite
2014-05-31 17:17 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe
2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core
2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk
2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2014-05-31 17:06 - 2014-06-07 19:02 - 00115581 _____ () C:\Windows\DirectX.log
2014-05-31 17:06 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-05-31 17:06 - 2014-06-01 14:25 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-31 17:06 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-05-31 17:06 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-05-31 17:06 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-05-31 17:06 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-05-31 17:06 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-05-31 17:06 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-05-31 17:06 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-05-31 17:06 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-05-31 17:06 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-05-31 17:06 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-05-31 17:06 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-05-31 17:06 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-05-31 17:06 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-05-31 17:06 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-05-31 17:06 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-05-31 17:06 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-05-31 17:06 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-05-31 17:06 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-05-31 17:06 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-05-31 17:06 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-05-31 17:06 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-05-31 17:06 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-05-31 17:06 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-05-31 17:06 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-05-31 17:06 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-05-31 17:06 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-05-31 17:06 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-05-31 17:06 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-05-31 17:06 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-05-31 17:06 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-05-31 17:06 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-05-31 17:06 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-05-31 17:06 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-05-31 17:06 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-05-31 17:06 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-05-31 17:06 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-05-31 17:06 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-05-31 17:06 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-05-31 17:06 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-05-31 17:06 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-05-31 17:06 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-05-31 17:06 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-05-31 17:06 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-05-31 17:06 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-05-31 17:06 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-05-31 17:06 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-05-31 17:06 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-05-31 17:06 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-05-31 17:06 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-05-31 17:06 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-05-31 17:06 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-05-31 17:06 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-05-31 17:06 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-05-31 17:06 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-05-31 17:06 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-05-31 17:06 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-05-31 17:06 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-05-31 17:06 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-05-31 17:06 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-05-31 17:06 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-05-31 17:06 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-05-31 17:06 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-05-31 17:06 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-05-31 17:06 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-05-31 17:06 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-05-31 17:06 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-05-31 17:06 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-05-31 17:06 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-05-31 17:06 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-05-31 17:06 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-05-31 17:06 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-05-31 17:06 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-05-31 17:06 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-05-31 17:06 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-05-31 17:06 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-05-31 17:06 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-05-31 17:06 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-05-31 17:06 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-05-31 16:00 - 2014-06-09 15:04 - 00000000 ____D () C:\Spiele
2014-05-31 15:56 - 2014-06-01 14:08 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin
2014-05-31 15:56 - 2014-05-31 17:12 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin
2014-05-31 15:54 - 2014-06-10 21:13 - 00000000 ____D () C:\ProgramData\Origin
2014-05-31 15:54 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp
2014-05-24 11:32 - 2014-05-24 11:32 - 00001532 _____ () C:\ProgramData\SMRResults410.dat
2014-05-23 18:25 - 2014-05-31 10:31 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk
2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10}
2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp
2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp
2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp
2014-05-18 10:30 - 2014-05-18 10:30 - 00000000 ____D () C:\IePluginService
2014-05-15 08:23 - 2014-05-15 08:23 - 00994160 _____ () C:\Users\Ankhang\Downloads\setup.exe
2014-05-13 20:04 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-13 20:04 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-13 20:04 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-13 20:04 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-13 20:04 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-13 20:04 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-13 19:59 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-13 19:59 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-13 19:59 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-13 19:59 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-13 19:59 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-13 19:59 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-13 19:59 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-13 19:59 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-13 19:59 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-13 19:59 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-13 19:59 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-13 19:59 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-13 19:59 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-13 19:59 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-13 19:59 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-13 19:59 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-13 19:58 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-13 19:58 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-13 19:58 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-13 19:58 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NCSOFT
2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NCSOFT
2014-05-12 16:26 - 2014-05-12 16:28 - 00000000 ____D () C:\ProgramData\IePluginService
2014-05-12 16:26 - 2014-05-12 16:27 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SupTab
2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\WPM
2014-05-12 16:25 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\Downloads\Wildstar
2014-05-12 16:23 - 2014-06-06 21:35 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NVIDIA
==================== One Month Modified Files and Folders =======
2014-06-11 11:44 - 2014-06-11 11:44 - 00000000 ____D () C:\FRST
2014-06-11 11:44 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard
2014-06-11 11:44 - 2014-02-16 19:39 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Temp
2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule
2014-06-11 11:42 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins
2014-06-11 11:41 - 2014-03-04 13:35 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\uTorrent
2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable
2014-06-11 11:39 - 2014-02-16 19:39 - 00000000 ____D () C:\Users\Ankhang
2014-06-11 11:31 - 2014-05-08 15:21 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NPE
2014-06-11 11:24 - 2014-02-19 17:51 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-11 11:24 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-11 11:24 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-11 11:21 - 2014-02-16 19:34 - 01724277 _____ () C:\Windows\WindowsUpdate.log
2014-06-11 11:15 - 2014-05-08 20:49 - 00000000 ____D () C:\NPE
2014-06-11 11:15 - 2014-02-16 22:12 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-06-11 11:15 - 2010-11-21 05:47 - 00100398 _____ () C:\Windows\PFRO.log
2014-06-11 11:15 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-11 11:15 - 2009-07-14 06:51 - 00058858 _____ () C:\Windows\setupact.log
2014-06-11 11:00 - 2014-03-05 18:54 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\CrashDumps
2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp
2014-06-11 10:31 - 2014-04-15 19:27 - 450936029 _____ () C:\Windows\MEMORY.DMP
2014-06-11 10:31 - 2014-04-15 19:27 - 00000000 ____D () C:\Windows\Minidump
2014-06-11 10:25 - 2014-06-11 10:25 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS
2014-06-11 09:51 - 2014-02-17 19:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Skype
2014-06-10 21:17 - 2014-06-06 12:03 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk
2014-06-10 21:13 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Origin
2014-06-09 15:04 - 2014-05-31 16:00 - 00000000 ____D () C:\Spiele
2014-06-09 15:04 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-09 15:03 - 2014-06-03 10:55 - 00000000 ____D () C:\Program Files (x86)\SEGA
2014-06-09 14:47 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp
2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE
2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM
2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk
2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk
2014-06-07 19:02 - 2014-05-31 17:06 - 00115581 _____ () C:\Windows\DirectX.log
2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-07 16:16 - 2014-06-04 09:04 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify
2014-06-06 21:35 - 2014-05-12 16:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NVIDIA
2014-06-06 12:03 - 2014-06-06 11:19 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare
2014-06-06 12:02 - 2014-02-16 22:11 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine
2014-06-06 11:41 - 2014-06-03 22:56 - 00000000 ____D () C:\Users\Ankhang\Documents\my games
2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk
2014-06-06 10:23 - 2014-06-04 09:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify
2014-06-05 08:09 - 2014-02-17 19:50 - 00000000 ____D () C:\ProgramData\Skype
2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft
2014-06-04 09:43 - 2014-02-17 04:29 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-06-04 09:43 - 2014-02-17 04:29 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-06-04 09:43 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-04 09:36 - 2014-06-04 09:33 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc
2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk
2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url
2014-06-03 23:16 - 2014-06-03 23:01 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim
2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089
2014-06-03 15:49 - 2014-05-08 19:27 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-06-03 11:04 - 2014-06-02 22:17 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA
2014-06-03 11:00 - 2014-06-03 09:41 - 00000360 _____ () C:\console.log
2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk
2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet
2014-06-02 18:05 - 2014-06-02 18:00 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite
2014-06-02 12:16 - 2014-05-31 17:17 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-06-02 12:16 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-06-01 14:25 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-06-01 14:08 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe
2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core
2014-05-31 17:12 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin
2014-05-31 17:12 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk
2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-31 15:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-31 10:31 - 2014-05-23 18:25 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk
2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp
2014-05-24 11:32 - 2014-05-24 11:32 - 00001532 _____ () C:\ProgramData\SMRResults410.dat
2014-05-23 18:26 - 2014-04-06 13:50 - 00000059 _____ () C:\Windows\JQHApp.dat
2014-05-23 18:25 - 2014-04-06 13:49 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MKJogo
2014-05-22 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10}
2014-05-22 16:22 - 2009-07-14 01:59 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\msdtc.exe
2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-05-22 15:51 - 2014-02-16 23:28 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-22 15:51 - 2014-02-16 23:28 - 00002319 _____ () C:\Users\Public\Desktop\Norton 360.lnk
2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64
2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp
2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp
2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp
2014-05-18 10:30 - 2014-05-18 10:30 - 00000000 ____D () C:\IePluginService
2014-05-16 17:14 - 2014-03-24 16:42 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-15 08:23 - 2014-05-15 08:23 - 00994160 _____ () C:\Users\Ankhang\Downloads\setup.exe
2014-05-14 20:24 - 2014-02-19 17:51 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 20:24 - 2014-02-19 17:51 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 20:24 - 2014-02-19 17:51 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-13 20:37 - 2014-05-01 00:40 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-13 20:03 - 2014-02-16 22:03 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-13 20:02 - 2014-02-16 22:03 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-13 18:41 - 2014-02-19 17:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Adobe
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NCSOFT
2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NCSOFT
2014-05-12 16:28 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\IePluginService
2014-05-12 16:27 - 2014-05-12 16:26 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SupTab
2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\WPM
2014-05-12 16:26 - 2014-05-12 16:25 - 00000000 ____D () C:\Users\Ankhang\Downloads\Wildstar
2014-05-12 16:26 - 2014-02-16 19:40 - 00001635 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Files to move or delete:
====================
C:\ProgramData\SMRResults410.dat
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-05-09 06:51
==================== End Of Log ============================
--- --- --- Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-06-2014
Ran by Ankhang at 2014-06-11 11:45:15
Running from C:\Users\Ankhang\Downloads\Trojanerboard
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Norton 360 Online (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton 360 Online (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton 360 Online (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
==================== Installed Programs ======================
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.347.0 - Microsoft Corporation)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts)
Dragon Age™ II (HKLM-x32\...\{E1EB9F56-AFE2-4204-B28F-AD8DA793B9F4}) (Version: 1.04.8524.0 - Electronic Arts)
Internet Explorer (Enable DEP) (HKLM\...\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb) (Version: - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Small Business Edition 2003 (HKLM-x32\...\{91CA0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MKLOL (HKCU\...\MKLOL) (Version: - )
Norton 360 (HKLM-x32\...\N360) (Version: 21.3.0.12 - Symantec Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
Opera Stable 22.0.1471.50 (HKLM-x32\...\Opera 22.0.1471.50) (Version: 22.0.1471.50 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Pointofix (HKLM-x32\...\Pointofix_is1) (Version: - Amerigomedia)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WPM18.8.0.304 (HKLM-x32\...\WPM) (Version: 18.8.0.304 - Cherished Technololgy LIMITED) <==== ATTENTION
==================== Restore Points =========================
07-06-2014 17:01:04 DirectX wurde installiert
09-06-2014 13:05:56 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {43E67C9A-557E-4E5B-A808-79F9B8BCE1C1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {985EBFEE-C4E0-4265-9F16-55908D468A89} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {A87828C2-F008-44AE-86D9-66C975704767} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation)
Task: {C6245414-7C62-4989-9F52-CAF330FF2C67} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {C96F1BA6-3444-432A-9549-DABE511AC317} - System32\Tasks\{D65FF839-151E-45D9-BB4F-8F8B982E3852} => C:\Program Files (x86)\Skype\Phone\Skype.exe
Task: {E2821676-D67F-46C1-AC1A-FD2225325605} - System32\Tasks\Opera scheduled Autoupdate 1399999089 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-27] (Opera Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-02-16 22:12 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-06-03 15:49 - 2014-06-03 15:49 - 01396344 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe
2014-06-03 15:49 - 2014-06-03 15:48 - 00877176 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\libglesv2.dll
2014-06-03 15:49 - 2014-06-03 15:48 - 00135800 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\libegl.dll
2014-06-03 15:49 - 2014-06-03 15:48 - 00957048 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/11/2014 11:31:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000003fefeb33480
ID des fehlerhaften Prozesses: 0xeb0
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3
Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=3800} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/11/2014 11:21:32 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows (2144) Windows: Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 22970368 (0x00000000015e8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [29cd29cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1], die tatsächliche Prüfsumme [11cd11cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.
Error: (06/11/2014 11:17:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/11/2014 11:13:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001d821
ID des fehlerhaften Prozesses: 0xb34
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
Error: (06/11/2014 11:13:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0015e235
ID des fehlerhaften Prozesses: 0xb34
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
Error: (06/11/2014 11:12:56 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001d821
ID des fehlerhaften Prozesses: 0x914
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
Error: (06/11/2014 11:12:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0015e235
ID des fehlerhaften Prozesses: 0x914
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
Error: (06/11/2014 11:12:12 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001d821
ID des fehlerhaften Prozesses: 0xcd0
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
System errors:
=============
Error: (06/11/2014 11:31:11 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/11/2014 11:16:43 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (06/11/2014 11:14:20 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/11/2014 10:37:26 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (06/11/2014 10:35:15 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/11/2014 10:33:09 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (06/11/2014 10:31:30 AM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x0000001a (0x0000000000005003, 0xfffff70001080000, 0x00000000000029d5, 0x0000000001294069)C:\Windows\MEMORY.DMP061114-24008-01
Error: (06/11/2014 10:31:29 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 11.06.2014 um 10:29:44 unerwartet heruntergefahren.
Error: (06/11/2014 10:29:07 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (06/11/2014 10:25:48 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Microsoft Office Sessions:
=========================
Error: (06/11/2014 11:31:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bunknown0.0.0.000000000c0000005000003fefeb33480eb001cf85566749cf5dC:\Windows\servicing\TrustedInstaller.exeunknown1d0b485e-f14b-11e3-8b77-002511a293a5
Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt
Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
3800
Error: (06/11/2014 11:21:32 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows2144Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb22970368 (0x00000000015e8000)32768 (0x00008000)-1018 (0xfffffc06)[29cd29cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1][11cd11cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1]700 (0x2BC)
Error: (06/11/2014 11:17:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/11/2014 11:13:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d821b3401cf855556fdf305C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLLab9937b7-f148-11e3-897e-002511a293a5
Error: (06/11/2014 11:13:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819SporeApp.exe1.1.0.3384897d819c00000050015e235b3401cf855556fdf305C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\SporeApp.exeaa6769fc-f148-11e3-897e-002511a293a5
Error: (06/11/2014 11:12:56 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d82191401cf85553c708c93C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLL92997da8-f148-11e3-897e-002511a293a5
Error: (06/11/2014 11:12:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819SporeApp.exe1.1.0.3384897d819c00000050015e23591401cf85553c708c93C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\SporeApp.exe8fc9d85f-f148-11e3-897e-002511a293a5
Error: (06/11/2014 11:12:12 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d821cd001cf85538e7ab96eC:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLL786cdd16-f148-11e3-897e-002511a293a5
CodeIntegrity Errors:
===================================
Date: 2014-05-08 20:58:05.725
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:58:05.665
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:59.459
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:59.334
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:53.156
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:53.032
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:46.760
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:46.698
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:40.524
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:40.478
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 23%
Total physical RAM: 8191.14 MB
Available physical RAM: 6273.25 MB
Total Pagefile: 16380.46 MB
Available Pagefile: 14240.18 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:456.26 GB) (Free:311.37 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (VOLUME) (Fixed) (Total:18.55 GB) (Free:1.97 GB) NTFS
Drive e: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive f: () (Fixed) (Total:456.6 GB) (Free:456.44 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: B200EA93)
Partition 1: (Not Active) - (Size=19 GB) - (Type=OF Extended)
Partition 2: (Not Active) - (Size=99 MB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
11.06.2014, 11:50
| #2 |
| /// TB-Ausbilder   | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Alle Tools auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind. Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen. |
|
11.06.2014, 11:56
| #3 |
| | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hallo Matthias
__________________Vielen Dank für die schnelle Antwort. Wie muss ich nun vorgehen, um das Problem zu beheben? |
|
11.06.2014, 12:00
| #4 |
| /// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Servus, naja, wie ich geschrieben habe... erst mal FRST.exe auf den Desktop verschieben (dort belassen) und FRST erneut ausführen:
Selbiges gilt für alle zukünftigen Tools, die wir verwenden. |
|
11.06.2014, 12:08
| #5 |
| | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hallo nochmals, Bitte verzeiht mir meine Inkompetenz oben. Ich habe dafür keine Erklärung, außer das meine Fähigkeit zu lesen, ausgesetzt hat. FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-06-2014
Ran by Ankhang (administrator) on ANKHANG-PC on 11-06-2014 13:03:42
Running from C:\Users\Ankhang\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Spotify Ltd) C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
() C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Spotify Ltd) C:\Users\Ankhang\AppData\Roaming\Spotify\spotify.exe
() C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
() C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2353880 2013-11-01] (Microsoft Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-802949540-198687548-912749210-1000\...\Run: [Spotify Web Helper] => C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-04] (Spotify Ltd)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://9gag.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF [2014-02-17]
==================== Services (Whitelisted) =================
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.)
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [265040 2014-05-11] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-05-31] ()
S2 SkypeUpdate; D:\Khang Hoang\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [549008 2014-05-12] (Cherished Technololgy LIMITED)
==================== Drivers (Whitelisted) ====================
S3 1394hub; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140606.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-11] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-11] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140610.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140610.019\ENG64.SYS [126040 2014-06-10] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140610.019\EX64.SYS [2099288 2014-06-10] (Symantec Corporation)
R0 SMR410; C:\Windows\System32\drivers\SMR410.SYS [96856 2014-06-11] (Symantec Corporation)
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1503000.00C\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-16] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
U3 uxriqfow; \??\C:\Users\Ankhang\AppData\Local\Temp\uxriqfow.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-11 12:26 - 2014-06-11 12:31 - 00001283 _____ () C:\Users\Ankhang\Desktop\trojanerboard.txt
2014-06-11 12:01 - 2014-06-11 12:01 - 00012682 _____ () C:\Users\Ankhang\Desktop\gmer.log
2014-06-11 11:47 - 2014-06-11 11:47 - 00380416 _____ () C:\Users\Ankhang\Desktop\Gmer-19357.exe
2014-06-11 11:45 - 2014-06-11 11:46 - 00027736 _____ () C:\Users\Ankhang\Desktop\Addition.txt
2014-06-11 11:44 - 2014-06-11 13:03 - 00013129 _____ () C:\Users\Ankhang\Desktop\FRST.txt
2014-06-11 11:44 - 2014-06-11 13:03 - 00000000 ____D () C:\FRST
2014-06-11 11:43 - 2014-06-11 11:43 - 02081792 _____ (Farbar) C:\Users\Ankhang\Desktop\FRST64.exe
2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule
2014-06-11 11:40 - 2014-06-11 12:54 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard
2014-06-11 11:40 - 2014-06-11 12:52 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins
2014-06-11 11:39 - 2014-06-11 11:39 - 00000476 _____ () C:\Users\Ankhang\Desktop\defogger_disable.log
2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable
2014-06-11 11:38 - 2014-06-11 11:38 - 00050477 _____ () C:\Users\Ankhang\Desktop\Defogger.exe
2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp
2014-06-11 10:25 - 2014-06-11 10:25 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS
2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp
2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE
2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM
2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk
2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk
2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-06 12:03 - 2014-06-10 21:17 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk
2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine
2014-06-06 11:19 - 2014-06-06 12:03 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare
2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk
2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft
2014-06-04 09:33 - 2014-06-04 09:36 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc
2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-04 09:05 - 2014-06-06 10:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify
2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk
2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-04 09:04 - 2014-06-11 12:44 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify
2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url
2014-06-03 23:01 - 2014-06-03 23:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim
2014-06-03 22:56 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\Documents\my games
2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089
2014-06-03 10:55 - 2014-06-09 15:03 - 00000000 ____D () C:\Program Files (x86)\SEGA
2014-06-03 09:41 - 2014-06-03 11:00 - 00000360 _____ () C:\console.log
2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk
2014-06-02 22:17 - 2014-06-03 11:04 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA
2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet
2014-06-02 18:00 - 2014-06-02 18:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite
2014-05-31 17:17 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe
2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core
2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk
2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2014-05-31 17:06 - 2014-06-07 19:02 - 00115581 _____ () C:\Windows\DirectX.log
2014-05-31 17:06 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-05-31 17:06 - 2014-06-01 14:25 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-31 17:06 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-05-31 17:06 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-05-31 17:06 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-05-31 17:06 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-05-31 17:06 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-05-31 17:06 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-05-31 17:06 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-05-31 17:06 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-05-31 17:06 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-05-31 17:06 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-05-31 17:06 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-05-31 17:06 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-05-31 17:06 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-05-31 17:06 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-05-31 17:06 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-05-31 17:06 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-05-31 17:06 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-05-31 17:06 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-05-31 17:06 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-05-31 17:06 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-05-31 17:06 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-05-31 17:06 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-05-31 17:06 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-05-31 17:06 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-05-31 17:06 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-05-31 17:06 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-05-31 17:06 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-05-31 17:06 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-05-31 17:06 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-05-31 17:06 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-05-31 17:06 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-05-31 17:06 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-05-31 17:06 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-05-31 17:06 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-05-31 17:06 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-05-31 17:06 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-05-31 17:06 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-05-31 17:06 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-05-31 17:06 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-05-31 17:06 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-05-31 17:06 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-05-31 17:06 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-05-31 17:06 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-05-31 17:06 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-05-31 17:06 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-05-31 17:06 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-05-31 17:06 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-05-31 17:06 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-05-31 17:06 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-05-31 17:06 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-05-31 17:06 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-05-31 17:06 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-05-31 17:06 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-05-31 17:06 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-05-31 17:06 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-05-31 17:06 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-05-31 17:06 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-05-31 17:06 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-05-31 17:06 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-05-31 17:06 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-05-31 17:06 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-05-31 17:06 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-05-31 17:06 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-05-31 17:06 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-05-31 17:06 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-05-31 17:06 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-05-31 17:06 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-05-31 17:06 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-05-31 17:06 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-05-31 17:06 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-05-31 17:06 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-05-31 17:06 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-05-31 17:06 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-05-31 17:06 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-05-31 17:06 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-05-31 17:06 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-05-31 17:06 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-05-31 17:06 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-05-31 16:00 - 2014-06-09 15:04 - 00000000 ____D () C:\Spiele
2014-05-31 15:56 - 2014-06-01 14:08 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin
2014-05-31 15:56 - 2014-05-31 17:12 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin
2014-05-31 15:54 - 2014-06-10 21:13 - 00000000 ____D () C:\ProgramData\Origin
2014-05-31 15:54 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp
2014-05-24 11:32 - 2014-05-24 11:32 - 00001532 _____ () C:\ProgramData\SMRResults410.dat
2014-05-23 18:25 - 2014-05-31 10:31 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk
2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10}
2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp
2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp
2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp
2014-05-18 10:30 - 2014-05-18 10:30 - 00000000 ____D () C:\IePluginService
2014-05-15 08:23 - 2014-05-15 08:23 - 00994160 _____ () C:\Users\Ankhang\Downloads\setup.exe
2014-05-13 20:04 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-13 20:04 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-13 20:04 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-13 20:04 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-13 20:04 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-13 20:04 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-13 19:59 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-13 19:59 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-13 19:59 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-13 19:59 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-13 19:59 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-13 19:59 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-13 19:59 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-13 19:59 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-13 19:59 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-13 19:59 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-13 19:59 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-13 19:59 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-13 19:59 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-13 19:59 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-13 19:59 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-13 19:59 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-13 19:58 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-13 19:58 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-13 19:58 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-13 19:58 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NCSOFT
2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NCSOFT
2014-05-12 16:26 - 2014-05-12 16:28 - 00000000 ____D () C:\ProgramData\IePluginService
2014-05-12 16:26 - 2014-05-12 16:27 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SupTab
2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\WPM
2014-05-12 16:25 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\Downloads\Wildstar
2014-05-12 16:23 - 2014-06-06 21:35 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NVIDIA
==================== One Month Modified Files and Folders =======
2014-06-11 13:03 - 2014-06-11 11:44 - 00013129 _____ () C:\Users\Ankhang\Desktop\FRST.txt
2014-06-11 13:03 - 2014-06-11 11:44 - 00000000 ____D () C:\FRST
2014-06-11 13:03 - 2014-02-16 19:39 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Temp
2014-06-11 12:59 - 2014-03-05 18:54 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\CrashDumps
2014-06-11 12:54 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard
2014-06-11 12:52 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins
2014-06-11 12:44 - 2014-06-04 09:04 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify
2014-06-11 12:31 - 2014-06-11 12:26 - 00001283 _____ () C:\Users\Ankhang\Desktop\trojanerboard.txt
2014-06-11 12:30 - 2014-02-16 19:34 - 01731668 _____ () C:\Windows\WindowsUpdate.log
2014-06-11 12:24 - 2014-02-19 17:51 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-11 12:01 - 2014-06-11 12:01 - 00012682 _____ () C:\Users\Ankhang\Desktop\gmer.log
2014-06-11 11:47 - 2014-06-11 11:47 - 00380416 _____ () C:\Users\Ankhang\Desktop\Gmer-19357.exe
2014-06-11 11:47 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-11 11:47 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-11 11:46 - 2014-06-11 11:45 - 00027736 _____ () C:\Users\Ankhang\Desktop\Addition.txt
2014-06-11 11:43 - 2014-06-11 11:43 - 02081792 _____ (Farbar) C:\Users\Ankhang\Desktop\FRST64.exe
2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule
2014-06-11 11:41 - 2014-03-04 13:35 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\uTorrent
2014-06-11 11:39 - 2014-06-11 11:39 - 00000476 _____ () C:\Users\Ankhang\Desktop\defogger_disable.log
2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable
2014-06-11 11:39 - 2014-02-16 19:39 - 00000000 ____D () C:\Users\Ankhang
2014-06-11 11:38 - 2014-06-11 11:38 - 00050477 _____ () C:\Users\Ankhang\Desktop\Defogger.exe
2014-06-11 11:31 - 2014-05-08 15:21 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NPE
2014-06-11 11:15 - 2014-05-08 20:49 - 00000000 ____D () C:\NPE
2014-06-11 11:15 - 2014-02-16 22:12 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-06-11 11:15 - 2010-11-21 05:47 - 00100398 _____ () C:\Windows\PFRO.log
2014-06-11 11:15 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-11 11:15 - 2009-07-14 06:51 - 00058858 _____ () C:\Windows\setupact.log
2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp
2014-06-11 10:31 - 2014-04-15 19:27 - 450936029 _____ () C:\Windows\MEMORY.DMP
2014-06-11 10:31 - 2014-04-15 19:27 - 00000000 ____D () C:\Windows\Minidump
2014-06-11 10:25 - 2014-06-11 10:25 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS
2014-06-11 09:51 - 2014-02-17 19:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Skype
2014-06-10 21:17 - 2014-06-06 12:03 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk
2014-06-10 21:13 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Origin
2014-06-09 15:04 - 2014-05-31 16:00 - 00000000 ____D () C:\Spiele
2014-06-09 15:04 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-09 15:03 - 2014-06-03 10:55 - 00000000 ____D () C:\Program Files (x86)\SEGA
2014-06-09 14:47 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp
2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE
2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM
2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk
2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk
2014-06-07 19:02 - 2014-05-31 17:06 - 00115581 _____ () C:\Windows\DirectX.log
2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-06 21:35 - 2014-05-12 16:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NVIDIA
2014-06-06 12:03 - 2014-06-06 11:19 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare
2014-06-06 12:02 - 2014-02-16 22:11 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine
2014-06-06 11:41 - 2014-06-03 22:56 - 00000000 ____D () C:\Users\Ankhang\Documents\my games
2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk
2014-06-06 10:23 - 2014-06-04 09:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify
2014-06-05 08:09 - 2014-02-17 19:50 - 00000000 ____D () C:\ProgramData\Skype
2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft
2014-06-04 09:43 - 2014-02-17 04:29 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-06-04 09:43 - 2014-02-17 04:29 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-06-04 09:43 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-04 09:36 - 2014-06-04 09:33 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc
2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk
2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url
2014-06-03 23:16 - 2014-06-03 23:01 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim
2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089
2014-06-03 15:49 - 2014-05-08 19:27 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-06-03 11:04 - 2014-06-02 22:17 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA
2014-06-03 11:00 - 2014-06-03 09:41 - 00000360 _____ () C:\console.log
2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk
2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet
2014-06-02 18:05 - 2014-06-02 18:00 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite
2014-06-02 12:16 - 2014-05-31 17:17 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-06-02 12:16 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-06-01 14:25 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-06-01 14:08 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe
2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core
2014-05-31 17:12 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin
2014-05-31 17:12 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk
2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-31 15:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-31 10:31 - 2014-05-23 18:25 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk
2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp
2014-05-24 11:32 - 2014-05-24 11:32 - 00001532 _____ () C:\ProgramData\SMRResults410.dat
2014-05-23 18:26 - 2014-04-06 13:50 - 00000059 _____ () C:\Windows\JQHApp.dat
2014-05-23 18:25 - 2014-04-06 13:49 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MKJogo
2014-05-22 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10}
2014-05-22 16:22 - 2009-07-14 01:59 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\msdtc.exe
2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-05-22 15:51 - 2014-02-16 23:28 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-22 15:51 - 2014-02-16 23:28 - 00002319 _____ () C:\Users\Public\Desktop\Norton 360.lnk
2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64
2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp
2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp
2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp
2014-05-18 10:30 - 2014-05-18 10:30 - 00000000 ____D () C:\IePluginService
2014-05-16 17:14 - 2014-03-24 16:42 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-15 08:23 - 2014-05-15 08:23 - 00994160 _____ () C:\Users\Ankhang\Downloads\setup.exe
2014-05-14 20:24 - 2014-02-19 17:51 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 20:24 - 2014-02-19 17:51 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 20:24 - 2014-02-19 17:51 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-13 20:37 - 2014-05-01 00:40 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-13 20:03 - 2014-02-16 22:03 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-13 20:02 - 2014-02-16 22:03 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-13 18:41 - 2014-02-19 17:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Adobe
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NCSOFT
2014-05-12 16:29 - 2014-05-12 16:29 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NCSOFT
2014-05-12 16:28 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\IePluginService
2014-05-12 16:27 - 2014-05-12 16:26 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SupTab
2014-05-12 16:26 - 2014-05-12 16:26 - 00000000 ____D () C:\ProgramData\WPM
2014-05-12 16:26 - 2014-05-12 16:25 - 00000000 ____D () C:\Users\Ankhang\Downloads\Wildstar
2014-05-12 16:26 - 2014-02-16 19:40 - 00001635 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Files to move or delete:
====================
C:\ProgramData\SMRResults410.dat
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-05-09 06:51
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-06-2014
Ran by Ankhang at 2014-06-11 13:04:05
Running from C:\Users\Ankhang\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Norton 360 Online (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton 360 Online (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton 360 Online (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
==================== Installed Programs ======================
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.347.0 - Microsoft Corporation)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts)
Dragon Age™ II (HKLM-x32\...\{E1EB9F56-AFE2-4204-B28F-AD8DA793B9F4}) (Version: 1.04.8524.0 - Electronic Arts)
Internet Explorer (Enable DEP) (HKLM\...\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb) (Version: - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Small Business Edition 2003 (HKLM-x32\...\{91CA0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MKLOL (HKCU\...\MKLOL) (Version: - )
Norton 360 (HKLM-x32\...\N360) (Version: 21.3.0.12 - Symantec Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
Opera Stable 22.0.1471.50 (HKLM-x32\...\Opera 22.0.1471.50) (Version: 22.0.1471.50 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Pointofix (HKLM-x32\...\Pointofix_is1) (Version: - Amerigomedia)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WPM18.8.0.304 (HKLM-x32\...\WPM) (Version: 18.8.0.304 - Cherished Technololgy LIMITED) <==== ATTENTION
==================== Restore Points =========================
07-06-2014 17:01:04 DirectX wurde installiert
09-06-2014 13:05:56 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {43E67C9A-557E-4E5B-A808-79F9B8BCE1C1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {985EBFEE-C4E0-4265-9F16-55908D468A89} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {A87828C2-F008-44AE-86D9-66C975704767} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation)
Task: {C6245414-7C62-4989-9F52-CAF330FF2C67} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {C96F1BA6-3444-432A-9549-DABE511AC317} - System32\Tasks\{D65FF839-151E-45D9-BB4F-8F8B982E3852} => C:\Program Files (x86)\Skype\Phone\Skype.exe
Task: {E2821676-D67F-46C1-AC1A-FD2225325605} - System32\Tasks\Opera scheduled Autoupdate 1399999089 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-27] (Opera Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-02-16 22:12 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-06-03 15:49 - 2014-06-03 15:49 - 01396344 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe
2014-06-04 09:05 - 2014-06-04 09:05 - 00598072 _____ () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2014-06-03 15:49 - 2014-06-03 15:48 - 00877176 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\libglesv2.dll
2014-06-03 15:49 - 2014-06-03 15:48 - 00135800 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\libegl.dll
2014-06-03 15:49 - 2014-06-03 15:48 - 00957048 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\ffmpegsumo.dll
2014-06-04 09:05 - 2014-06-04 09:05 - 36966968 _____ () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\libcef.dll
2014-06-04 09:05 - 2014-06-04 09:05 - 00886840 _____ () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-06-04 09:05 - 2014-06-04 09:05 - 00108600 _____ () C:\Users\Ankhang\AppData\Roaming\Spotify\Data\libegl.dll
2014-05-13 18:41 - 2014-05-13 18:41 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: L:\
Description: SM/xD-Picture
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
Name: J:\
Description: microSD
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
Name: K:\
Description: MS/MS-PRO
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
Name: I:\
Description: SD/MMC
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/11/2014 00:59:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyHelper.exe, Version: 0.0.0.0, Zeitstempel: 0x53709048
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x009cfba0
ID des fehlerhaften Prozesses: 0x12a4
Startzeit der fehlerhaften Anwendung: 0xSpotifyHelper.exe0
Pfad der fehlerhaften Anwendung: SpotifyHelper.exe1
Pfad des fehlerhaften Moduls: SpotifyHelper.exe2
Berichtskennung: SpotifyHelper.exe3
Error: (06/11/2014 11:31:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000003fefeb33480
ID des fehlerhaften Prozesses: 0xeb0
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3
Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=3800} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/11/2014 11:21:32 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows (2144) Windows: Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 22970368 (0x00000000015e8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [29cd29cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1], die tatsächliche Prüfsumme [11cd11cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.
Error: (06/11/2014 11:17:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/11/2014 11:13:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001d821
ID des fehlerhaften Prozesses: 0xb34
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
Error: (06/11/2014 11:13:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0015e235
ID des fehlerhaften Prozesses: 0xb34
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
Error: (06/11/2014 11:12:56 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001d821
ID des fehlerhaften Prozesses: 0x914
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
Error: (06/11/2014 11:12:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0015e235
ID des fehlerhaften Prozesses: 0x914
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
System errors:
=============
Error: (06/11/2014 11:31:11 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/11/2014 11:16:43 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (06/11/2014 11:14:20 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/11/2014 10:37:26 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (06/11/2014 10:35:15 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/11/2014 10:33:09 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (06/11/2014 10:31:30 AM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x0000001a (0x0000000000005003, 0xfffff70001080000, 0x00000000000029d5, 0x0000000001294069)C:\Windows\MEMORY.DMP061114-24008-01
Error: (06/11/2014 10:31:29 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 11.06.2014 um 10:29:44 unerwartet heruntergefahren.
Error: (06/11/2014 10:29:07 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (06/11/2014 10:25:48 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Microsoft Office Sessions:
=========================
Error: (06/11/2014 00:59:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: SpotifyHelper.exe0.0.0.053709048unknown0.0.0.000000000c0000005009cfba012a401cf8562135dbc6bC:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyHelper.exeunknown6495528a-f157-11e3-8b77-002511a293a5
Error: (06/11/2014 11:31:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bunknown0.0.0.000000000c0000005000003fefeb33480eb001cf85566749cf5dC:\Windows\servicing\TrustedInstaller.exeunknown1d0b485e-f14b-11e3-8b77-002511a293a5
Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt
Error: (06/11/2014 11:21:32 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
3800
Error: (06/11/2014 11:21:32 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows2144Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb22970368 (0x00000000015e8000)32768 (0x00008000)-1018 (0xfffffc06)[29cd29cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1][11cd11cd1fe5738f:69ee961164f0d4cf:aab3aab3110d8ad1:395a395a3ef502b1]700 (0x2BC)
Error: (06/11/2014 11:17:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/11/2014 11:13:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d821b3401cf855556fdf305C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLLab9937b7-f148-11e3-897e-002511a293a5
Error: (06/11/2014 11:13:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819SporeApp.exe1.1.0.3384897d819c00000050015e235b3401cf855556fdf305C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\SporeApp.exeaa6769fc-f148-11e3-897e-002511a293a5
Error: (06/11/2014 11:12:56 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d82191401cf85553c708c93C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLL92997da8-f148-11e3-897e-002511a293a5
Error: (06/11/2014 11:12:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819SporeApp.exe1.1.0.3384897d819c00000050015e23591401cf85553c708c93C:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\SporeApp.exe8fc9d85f-f148-11e3-897e-002511a293a5
CodeIntegrity Errors:
===================================
Date: 2014-05-08 20:58:05.725
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:58:05.665
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:59.459
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:59.334
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:53.156
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:53.032
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:46.760
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:46.698
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:40.524
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:40.478
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 28%
Total physical RAM: 8191.14 MB
Available physical RAM: 5870.09 MB
Total Pagefile: 16380.46 MB
Available Pagefile: 13823.63 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:456.26 GB) (Free:311.04 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (VOLUME) (Fixed) (Total:18.55 GB) (Free:1.97 GB) NTFS
Drive e: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive f: () (Fixed) (Total:456.6 GB) (Free:456.44 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: B200EA93)
Partition 1: (Not Active) - (Size=19 GB) - (Type=OF Extended)
Partition 2: (Not Active) - (Size=99 MB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
11.06.2014, 13:09
| #6 |
| /// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Servus, wir beginnen erst mal so: Scan mit Combofix
|
|
11.06.2014, 14:30
| #7 |
| | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hi, Ich habe Combofix heruntergeladen und auf den Desktop gezogen. Nachdem ich meine Antivirensoftware deaktiviert habe, führte ich Combofix aus. Es kam die Meldung, das meine Antivirensoftware immer noch aktiv war. Während Combofix lief, bekam ich dreimal die Meldung "grep.3XE funktioniert nicht mehr" und einmal "pev.3XE funktioniert nicht mehr" (Ich habe die Maus bewegt, um diese Meldungen zu schließen). Nachdem Combofix fertig war und die Log Datei erstellte, startete ich den PC neu. Während der Rechner lange brauchte, um herunterzufahren, bekam ich ein Bluescreen und der Computer fuhr daraufhin neu hoch. Code:
ATTFilter ComboFix 14-06-10.01 - Ankhang 11.06.2014 14:46:10.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8191.6136 [GMT 2:00]
ausgeführt von:: c:\users\Ankhang\Desktop\ComboFix.exe
AV: Norton 360 Online *Disabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
FW: Norton 360 Online *Disabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
SP: Norton 360 Online *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-05-11 bis 2014-06-11 ))))))))))))))))))))))))))))))
.
.
2014-06-11 12:56 . 2014-06-11 12:56 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2014-06-11 12:56 . 2014-06-11 12:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-06-11 09:44 . 2014-06-11 11:04 -------- d-----w- C:\FRST
2014-06-11 08:25 . 2014-06-11 08:25 96856 ----a-w- c:\windows\system32\drivers\SMR410.SYS
2014-06-09 13:06 . 2014-05-19 23:18 10702536 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3E17EA1B-F0E6-4377-A1B8-09F436528A85}\mpengine.dll
2014-06-07 20:27 . 2014-06-07 20:27 -------- d-----w- c:\users\Ankhang\AppData\Roaming\SPORE
2014-06-07 20:26 . 2014-06-07 20:26 -------- d--h--r- c:\users\Ankhang\AppData\Roaming\SecuROM
2014-06-07 16:30 . 2014-06-07 16:30 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2014-06-06 09:41 . 2014-06-06 09:41 -------- d-----w- c:\users\Ankhang\AppData\Local\BigHugeEngine
2014-06-05 06:09 . 2014-06-05 06:09 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-06-04 13:22 . 2014-06-04 13:22 -------- d-----w- c:\users\Ankhang\AppData\Local\Ubisoft
2014-06-04 07:33 . 2014-06-04 07:36 -------- d-----w- c:\users\Ankhang\AppData\Roaming\vlc
2014-06-04 07:31 . 2014-06-04 07:31 -------- d-----w- c:\program files (x86)\VideoLAN
2014-06-04 07:05 . 2014-06-06 08:23 -------- d-----w- c:\users\Ankhang\AppData\Local\Spotify
2014-06-04 07:04 . 2014-06-11 12:11 -------- d-----w- c:\users\Ankhang\AppData\Roaming\Spotify
2014-06-03 21:01 . 2014-06-03 21:16 -------- d-----w- c:\users\Ankhang\AppData\Local\Skyrim
2014-06-03 20:13 . 2014-06-03 21:06 -------- d-----w- c:\program files (x86)\Common Files\Steam
2014-06-03 08:55 . 2014-06-09 13:03 -------- d-----w- c:\program files (x86)\SEGA
2014-06-02 16:22 . 2014-06-02 16:22 -------- d-----w- C:\Downloads
2014-06-02 16:22 . 2014-06-02 16:22 -------- d-----w- c:\users\Ankhang\AppData\Roaming\BitComet
2014-05-31 15:17 . 2014-06-02 10:16 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2014-05-31 15:17 . 2014-05-31 15:17 -------- d-----w- c:\users\Ankhang\AppData\Local\PunkBuster
2014-05-31 15:16 . 2014-05-31 15:16 -------- d-----w- c:\users\Ankhang\AppData\Local\ESN
2014-05-31 15:16 . 2014-05-31 15:16 -------- d-----w- c:\program files (x86)\Battlelog Web Plugins
2014-05-31 15:12 . 2014-05-31 15:12 -------- d-----w- c:\programdata\EA Core
2014-05-31 15:12 . 2014-05-31 15:19 -------- d-----w- c:\programdata\EA Logs
2014-05-31 15:07 . 2014-06-07 17:03 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
2014-05-31 14:00 . 2014-06-09 13:04 -------- d-----w- C:\Spiele
2014-05-31 13:56 . 2014-06-01 12:08 -------- d-----w- c:\users\Ankhang\AppData\Roaming\Origin
2014-05-31 13:56 . 2014-05-31 15:12 -------- d-----w- c:\users\Ankhang\AppData\Local\Origin
2014-05-31 13:54 . 2014-06-10 19:13 -------- d-----w- c:\programdata\Origin
2014-05-31 13:54 . 2014-05-31 15:12 -------- d-----w- c:\programdata\Electronic Arts
2014-05-19 12:56 . 2014-06-06 06:49 -------- d-----w- c:\windows\system32\drivers\N360x64\1503000.00C
2014-05-18 08:30 . 2014-05-18 08:30 -------- d-----w- C:\IePluginService
2014-05-13 18:04 . 2014-05-06 04:40 23544320 ----a-w- c:\windows\system32\mshtml.dll
2014-05-13 18:04 . 2014-05-06 03:00 84992 ----a-w- c:\windows\system32\mshtmled.dll
2014-05-13 18:04 . 2014-05-06 04:17 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-05-13 18:04 . 2014-05-06 03:07 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-05-13 17:58 . 2014-03-25 02:43 14175744 ----a-w- c:\windows\system32\shell32.dll
2014-05-13 17:58 . 2014-05-09 06:14 477184 ----a-w- c:\windows\system32\aepdu.dll
2014-05-13 17:58 . 2014-05-09 06:11 424448 ----a-w- c:\windows\system32\aeinv.dll
2014-05-12 14:29 . 2014-05-12 14:29 -------- d-----w- c:\users\Ankhang\AppData\Roaming\NCSOFT
2014-05-12 14:29 . 2014-05-12 14:29 -------- d-----w- c:\users\Ankhang\AppData\Local\NCSOFT
2014-05-12 14:26 . 2014-05-12 14:28 -------- d-----w- c:\programdata\IePluginService
2014-05-12 14:26 . 2014-05-12 14:27 -------- d-----w- c:\program files (x86)\SupTab
2014-05-12 14:26 . 2014-05-12 14:26 -------- d-----w- c:\users\Ankhang\AppData\Roaming\SupTab
2014-05-12 14:26 . 2014-05-12 14:26 -------- d-----w- c:\programdata\WPM
2014-05-12 14:23 . 2014-06-06 19:35 -------- d-----w- c:\users\Ankhang\AppData\Roaming\NVIDIA
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-22 14:22 . 2009-07-13 23:59 141824 ----a-w- c:\windows\system32\msdtc.exe
2014-05-14 18:24 . 2014-02-19 15:51 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-05-14 18:24 . 2014-02-19 15:51 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-05-13 18:02 . 2014-02-16 20:03 93223848 ----a-w- c:\windows\system32\MRT.exe
2014-03-31 07:35 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
2014-03-20 21:03 . 2014-02-16 20:11 62408 ----a-w- c:\windows\system32\OpenCL.dll
2014-03-20 21:03 . 2014-02-16 20:11 54216 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-03-20 21:03 . 2014-03-20 21:03 15783992 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2014-03-20 21:03 . 2013-10-27 08:12 18302384 ----a-w- c:\windows\system32\nvwgf2umx.dll
2014-03-20 21:03 . 2014-03-20 21:03 832936 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2014-03-20 21:03 . 2013-10-27 08:12 947808 ----a-w- c:\windows\system32\nvumdshimx.dll
2014-03-20 21:03 . 2014-03-20 21:03 9690424 ----a-w- c:\windows\SysWow64\nvopencl.dll
2014-03-20 21:03 . 2014-03-20 21:03 11589272 ----a-w- c:\windows\system32\nvopencl.dll
2014-03-20 21:02 . 2014-03-20 21:02 31474976 ----a-w- c:\windows\system32\nvoglv64.dll
2014-03-20 21:02 . 2014-03-20 21:02 353504 ----a-w- c:\windows\system32\nvoglshim64.dll
2014-03-20 21:02 . 2014-03-20 21:02 305600 ----a-w- c:\windows\SysWow64\nvoglshim32.dll
2014-03-20 21:02 . 2014-03-20 21:02 23716640 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2014-03-20 21:02 . 2014-03-20 21:02 12708128 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2014-03-20 21:02 . 2014-03-20 21:02 892704 ----a-w- c:\windows\system32\NvIFR64.dll
2014-03-20 21:02 . 2014-03-20 21:02 863064 ----a-w- c:\windows\SysWow64\NvIFR.dll
2014-03-20 21:02 . 2014-03-20 21:02 174296 ----a-w- c:\windows\system32\nvinitx.dll
2014-03-20 21:02 . 2014-03-20 21:02 148016 ----a-w- c:\windows\SysWow64\nvinit.dll
2014-03-20 21:02 . 2014-03-20 21:02 877856 ----a-w- c:\windows\system32\NvFBC64.dll
2014-03-20 21:02 . 2014-03-20 21:02 846168 ----a-w- c:\windows\SysWow64\NvFBC.dll
2014-03-20 21:02 . 2014-03-20 21:02 1885472 ----a-w- c:\windows\system32\nvdispco6433523.dll
2014-03-20 21:02 . 2014-03-20 21:02 1516488 ----a-w- c:\windows\system32\nvdispgenco6433523.dll
2014-03-20 21:02 . 2014-03-20 21:02 3143456 ----a-w- c:\windows\system32\nvcuvid.dll
2014-03-20 21:02 . 2014-03-20 21:02 17755424 ----a-w- c:\windows\system32\nvd3dumx.dll
2014-03-20 21:02 . 2014-03-20 21:02 14709720 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-03-20 21:02 . 2014-03-20 21:02 9728064 ----a-w- c:\windows\SysWow64\nvcuda.dll
2014-03-20 21:02 . 2014-03-20 21:02 2958792 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2014-03-20 21:02 . 2014-03-20 21:02 2783008 ----a-w- c:\windows\system32\nvcuvenc.dll
2014-03-20 21:02 . 2014-03-20 21:02 2411976 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2014-03-20 21:02 . 2014-03-20 21:02 11636176 ----a-w- c:\windows\system32\nvcuda.dll
2014-03-20 21:02 . 2014-03-20 21:02 17561544 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2014-03-20 21:02 . 2014-03-20 21:02 25255256 ----a-w- c:\windows\system32\nvcompiler.dll
2014-03-20 21:02 . 2013-10-27 08:12 3093280 ----a-w- c:\windows\system32\nvapi64.dll
2014-03-20 21:02 . 2014-03-20 21:02 2715264 ----a-w- c:\windows\SysWow64\nvapi.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
2014-04-11 02:05 513648 ----a-w- c:\program files (x86)\SupTab\SupTab.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-06-04 1176632]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BingDesktop"="c:\program files (x86)\Microsoft\BingDesktop\BingDesktop.exe" [2013-11-01 2353880]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;d:\khang hoang\Skype\Updater\Updater.exe;d:\khang hoang\Skype\Updater\Updater.exe [x]
R3 1394hub;1394 Enabled Hub;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys;c:\windows\SYSNATIVE\drivers\nusb3hub.sys [x]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys;c:\windows\SYSNATIVE\drivers\nusb3xhc.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
S0 SMR410;Symantec SMR Utility Service 4.1.0;c:\windows\System32\drivers\SMR410.SYS;c:\windows\SYSNATIVE\drivers\SMR410.SYS [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1503000.00C\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1503000.00C\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1503000.00C\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1503000.00C\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140606.001\BHDrvx64.sys;c:\program files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140606.001\BHDrvx64.sys [x]
S1 ccSet_N360;N360 Settings Manager;c:\windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\N360x64\1503000.00C\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\program files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140610.001\IDSvia64.sys;c:\program files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140610.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1503000.00C\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\N360x64\1503000.00C\SYMNETS.SYS [x]
S2 BingDesktopUpdate;Bing Desktop Update service;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [x]
S2 IePluginService;IePlugin Service;c:\programdata\IePluginService\PluginService.exe;c:\programdata\IePluginService\PluginService.exe [x]
S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\21.3.0.12\N360.exe;c:\program files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 Wpm;Wpm Service;c:\programdata\WPM\wprotectmanager.exe;c:\programdata\WPM\wprotectmanager.exe [x]
S3 e1yexpress;Intel(R) Gigabit-Netzwerkverbindungstreiber;c:\windows\system32\DRIVERS\e1y60x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1y60x64.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192su.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - UXRIQFOW
*Deregistered* - uxriqfow
.
Inhalt des "geplante Tasks" Ordners
.
2014-06-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-19 18:24]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-03-20 1797064]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://9gag.com/
mDefault_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
mDefault_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665
mStart Page = hxxp://www.sweet-page.com/?type=hp&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1399904734&from=wld&uid=WDCXWD10EADS-22M2B0_WD-WCAV5205466554665&q={searchTerms}
TCP: DhcpNameServer = 192.168.2.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-MKLOL - d:\khang hoang\Neuer Ordner\MKJogo\MKLOL\MKuInst.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\21.3.0.12\N360.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\21.3.0.12\diMaster.dll\" /prefetch:1"
"ImagePath"="\SystemRoot\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS"
"TrustedImagePaths"="c:\program files (x86)\Norton 360\Engine\21.3.0.12;c:\program files (x86)\Norton 360\Engine64\21.3.0.12"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-802949540-198687548-912749210-1000\Software\SecuROM\License information*]
"datasecu"=hex:25,51,aa,67,77,e6,50,e5,b6,73,04,8d,42,3c,cd,f4,84,d0,3f,5c,1d,
9a,ee,6a,93,bb,90,13,38,c2,d2,b8,76,2f,0f,8e,69,a6,25,2d,e9,73,f8,4a,5b,03,\
"rkeysecu"=hex:cb,bd,f2,61,5a,4e,c6,95,f2,29,8b,82,ba,6b,3d,44
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.13"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-06-11 15:06:38
ComboFix-quarantined-files.txt 2014-06-11 13:06
.
Vor Suchlauf: 15 Verzeichnis(se), 332.810.182.656 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 332.806.844.416 Bytes frei
.
- - End Of File - - 84B669412323C57288B8BE7EC0AD6555
A36C5E4F47E84449FF07ED3517B43A31
|
|
12.06.2014, 09:07
| #8 |
| /// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Schritt 1 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 3 Bitte deaktiviere dein Anti-Viren-Programm, da es das Ergebnis beeinflussen oder ggf. die Bereinigung stören kann. Bitte lade dir zoek.exe von hier: http://hijackthis.nl/smeenk/ und speichere die Datei auf deinem Desktop.
Schritt 4
Bitte poste mit deiner nächsten Antwort
|
|
12.06.2014, 10:40
| #9 |
| | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hier die angeforderten Log Dateien: AdwCleaner: Code:
ATTFilter # AdwCleaner v3.212 - Bericht erstellt am 12/06/2014 um 10:53:36
# Aktualisiert 05/06/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Ankhang - ANKHANG-PC
# Gestartet von : C:\Users\Ankhang\Desktop\adwcleaner_3.212.exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : IePluginService
Dienst Gelöscht : Wpm
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\IePluginService
Ordner Gelöscht : C:\ProgramData\IePluginService
Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\Program Files (x86)\SupTab
Ordner Gelöscht : C:\Users\Ankhang\AppData\Roaming\SupTab
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\Ankhang\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\Software\SupTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\sweet-pageSoftware
Schlüssel Gelöscht : HKLM\Software\Wpm
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wpm
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17041
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
*************************
AdwCleaner[R0].txt - [3871 octets] - [12/06/2014 10:53:02]
AdwCleaner[S0].txt - [2829 octets] - [12/06/2014 10:53:36]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2889 octets] ##########
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 12.06.2014 Suchlauf-Zeit: 11:02:58 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.06.12.04 Rootkit Datenbank: v2014.06.02.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Ankhang Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 311676 Verstrichene Zeit: 5 Min, 48 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 1 PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[eea6aacd205b3cfad8c296dd3dc72bd5] Ordner: 0 (No malicious items detected) Dateien: 1 PUP.Optional.OutBrowse, C:\Users\Ankhang\Downloads\setup.exe, In Quarantäne, [f3a165127b007eb8799dc8b5f20f29d7], Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter Zoek.exe v5.0.0.0 Updated 02-June-2014
Tool run by Ankhang on 12.06.2014 at 11:18:00,72.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Ankhang\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
12.06.2014 11:19:08 Zoek.exe System Restore Point Created Succesfully.
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-802949540-198687548-912749210-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} deleted successfully
HKEY_USERS\S-1-5-21-802949540-198687548-912749210-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\PROGRA~3\SMRResults410.dat deleted
C:\Windows\SysWow64\AI_RecycleBin deleted
"C:\Users\Ankhang\AppData\Roaming\mresreg" deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{BBDA0591-3099-440a-AA10-41764D9DB4DB}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF" [18.03.2014 17:57]
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\Exts\Chrome.crx[28.04.2014 14:52]
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://9gag.com/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="hxxp://www.google.com"
"Default_Page_URL"="hxxp://www.google.com"
"Start Page"="hxxp://www.google.com"
"Search Page"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="hxxp://www.google.com"
"Default_Page_URL"="hxxp://www.google.com"
"Start Page"="hxxp://www.google.com"
"Search Page"="hxxp://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://9gag.com/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
==== Reset Google Chrome ======================
Nothing found to reset
==== Reset IE Proxy ======================
Value(s) before fix:
"ProxyEnable"=dword:00000000
Value(s) after fix:
"ProxyEnable"=dword:00000000
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Ankhang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Ankhang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
No Chrome User Data found
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
No Java Cache Found
==== C:\zoek_backup content ======================
C:\zoek_backup (files=2 folders=13 1773 bytes)
==== Empty Temp Folders ======================
C:\Users\Ankhang\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\dub_cm_auto\AppData\Local\temp emptied successfully
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Users\UpdatusUser\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Ankhang\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on 12.06.2014 at 11:29:27,53 ======================
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-06-2014
Ran by Ankhang (administrator) on ANKHANG-PC on 12-06-2014 11:30:40
Running from C:\Users\Ankhang\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe
(Skype Technologies) D:\Khang Hoang\Skype\Updater\Updater.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Spotify Ltd) C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2353880 2013-11-01] (Microsoft Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-802949540-198687548-912749210-1000\...\Run: [Spotify Web Helper] => C:\Users\Ankhang\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-04] (Spotify Ltd)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://9gag.com/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.1.3\IPSFF [2014-02-17]
==================== Services (Whitelisted) =================
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [265040 2014-05-11] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-05-31] ()
R2 SkypeUpdate; D:\Khang Hoang\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies)
==================== Drivers (Whitelisted) ====================
S3 1394hub; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140606.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-11] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-11] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140611.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140611.032\ENG64.SYS [126040 2014-06-12] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140611.032\EX64.SYS [2099288 2014-06-12] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\N360x64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1503000.00C\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-16] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-12 11:27 - 2014-06-12 11:31 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Temp
2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\temp
2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\dub_cm_auto\AppData\Local\temp
2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-12 11:27 - 2014-06-12 11:17 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-12 11:18 - 2014-06-12 11:29 - 00006396 _____ () C:\zoek-results.log
2014-06-12 11:17 - 2014-06-12 11:26 - 00000000 ____D () C:\zoek_backup
2014-06-12 11:00 - 2014-06-12 11:00 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-12 11:00 - 2014-06-12 11:00 - 00001098 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-06-12 11:00 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-12 11:00 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-12 11:00 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-12 10:52 - 2014-06-12 10:53 - 00000000 ____D () C:\AdwCleaner
2014-06-12 10:38 - 2014-06-12 10:38 - 01285120 _____ () C:\Users\Ankhang\Desktop\zoek.exe
2014-06-12 10:21 - 2014-06-12 10:21 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Ankhang\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-12 10:20 - 2014-06-12 10:20 - 01333465 _____ () C:\Users\Ankhang\Desktop\adwcleaner_3.212.exe
2014-06-11 21:02 - 2014-06-11 21:02 - 00291896 _____ () C:\Windows\Minidump\061114-32432-01.dmp
2014-06-11 16:26 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-11 16:26 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-11 16:26 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 16:26 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-11 15:19 - 2014-06-11 15:19 - 00536528 _____ () C:\Windows\Minidump\061114-25833-01.dmp
2014-06-11 15:06 - 2014-06-11 15:06 - 00020982 _____ () C:\Users\Ankhang\Desktop\ComboFix.txt
2014-06-11 14:19 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-06-11 14:19 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-06-11 14:19 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-06-11 14:19 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-06-11 14:19 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-06-11 14:19 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-06-11 14:19 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-06-11 14:19 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-06-11 14:15 - 2014-06-11 15:07 - 00000000 ____D () C:\Qoobox
2014-06-11 14:14 - 2014-06-11 15:03 - 00000000 ____D () C:\Windows\erdnt
2014-06-11 14:10 - 2014-06-11 14:10 - 05205915 ____R (Swearware) C:\Users\Ankhang\Desktop\ComboFix.exe
2014-06-11 12:26 - 2014-06-11 12:31 - 00001283 _____ () C:\Users\Ankhang\Desktop\trojanerboard.txt
2014-06-11 12:01 - 2014-06-11 12:01 - 00012682 _____ () C:\Users\Ankhang\Desktop\gmer.log
2014-06-11 11:47 - 2014-06-11 11:47 - 00380416 _____ () C:\Users\Ankhang\Desktop\Gmer-19357.exe
2014-06-11 11:45 - 2014-06-11 13:04 - 00030040 _____ () C:\Users\Ankhang\Desktop\Addition.txt
2014-06-11 11:44 - 2014-06-12 11:31 - 00009837 _____ () C:\Users\Ankhang\Desktop\FRST.txt
2014-06-11 11:44 - 2014-06-12 11:30 - 00000000 ____D () C:\FRST
2014-06-11 11:43 - 2014-06-11 11:43 - 02081792 _____ (Farbar) C:\Users\Ankhang\Desktop\FRST64.exe
2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule
2014-06-11 11:40 - 2014-06-11 12:54 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard
2014-06-11 11:40 - 2014-06-11 12:52 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins
2014-06-11 11:39 - 2014-06-11 11:39 - 00000476 _____ () C:\Users\Ankhang\Desktop\defogger_disable.log
2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable
2014-06-11 11:38 - 2014-06-11 11:38 - 00050477 _____ () C:\Users\Ankhang\Desktop\Defogger.exe
2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp
2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp
2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE
2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM
2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk
2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk
2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-06 12:03 - 2014-06-10 21:17 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk
2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine
2014-06-06 11:19 - 2014-06-06 12:03 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare
2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk
2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft
2014-06-04 09:33 - 2014-06-04 09:36 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc
2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-04 09:05 - 2014-06-06 10:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify
2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk
2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-04 09:04 - 2014-06-11 18:57 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify
2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url
2014-06-03 23:01 - 2014-06-03 23:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim
2014-06-03 22:56 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\Documents\my games
2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089
2014-06-03 10:55 - 2014-06-09 15:03 - 00000000 ____D () C:\Program Files (x86)\SEGA
2014-06-03 09:41 - 2014-06-03 11:00 - 00000360 _____ () C:\console.log
2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk
2014-06-02 22:17 - 2014-06-03 11:04 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA
2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet
2014-06-02 18:00 - 2014-06-02 18:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite
2014-05-31 17:17 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe
2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core
2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk
2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2014-05-31 17:06 - 2014-06-07 19:02 - 00115581 _____ () C:\Windows\DirectX.log
2014-05-31 17:06 - 2014-06-02 12:16 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-05-31 17:06 - 2014-06-01 14:25 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-31 17:06 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-05-31 17:06 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-05-31 17:06 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-05-31 17:06 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-05-31 17:06 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-05-31 17:06 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-05-31 17:06 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-05-31 17:06 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-05-31 17:06 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-05-31 17:06 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-05-31 17:06 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-05-31 17:06 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-05-31 17:06 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-05-31 17:06 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-05-31 17:06 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-05-31 17:06 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-05-31 17:06 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-05-31 17:06 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-05-31 17:06 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-05-31 17:06 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-05-31 17:06 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-05-31 17:06 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-05-31 17:06 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-05-31 17:06 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-05-31 17:06 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-05-31 17:06 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-05-31 17:06 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-05-31 17:06 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-05-31 17:06 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-05-31 17:06 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-05-31 17:06 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-05-31 17:06 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-05-31 17:06 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-05-31 17:06 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-05-31 17:06 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-05-31 17:06 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-05-31 17:06 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-05-31 17:06 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-05-31 17:06 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-05-31 17:06 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-05-31 17:06 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-05-31 17:06 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-05-31 17:06 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-05-31 17:06 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-05-31 17:06 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-05-31 17:06 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-05-31 17:06 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-05-31 17:06 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-05-31 17:06 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-05-31 17:06 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-05-31 17:06 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-05-31 17:06 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-05-31 17:06 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-05-31 17:06 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-05-31 17:06 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-05-31 17:06 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-05-31 17:06 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-05-31 17:06 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-05-31 17:06 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-05-31 17:06 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-05-31 17:06 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-05-31 17:06 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-05-31 17:06 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-05-31 17:06 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-05-31 17:06 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-05-31 17:06 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-05-31 17:06 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-05-31 17:06 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-05-31 17:06 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-05-31 17:06 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-05-31 17:06 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-05-31 17:06 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-05-31 17:06 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-05-31 17:06 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-05-31 17:06 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-05-31 17:06 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-05-31 17:06 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-05-31 17:06 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-05-31 17:06 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-05-31 17:06 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-05-31 17:06 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-05-31 17:06 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-05-31 17:06 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-05-31 17:06 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-05-31 17:06 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-05-31 17:06 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-05-31 17:06 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-05-31 17:06 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-05-31 17:06 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-05-31 17:06 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-05-31 17:06 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-05-31 17:06 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-05-31 17:06 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-05-31 17:06 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-05-31 16:00 - 2014-06-09 15:04 - 00000000 ____D () C:\Spiele
2014-05-31 15:56 - 2014-06-01 14:08 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin
2014-05-31 15:56 - 2014-05-31 17:12 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin
2014-05-31 15:54 - 2014-06-10 21:13 - 00000000 ____D () C:\ProgramData\Origin
2014-05-31 15:54 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp
2014-05-23 18:25 - 2014-05-31 10:31 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk
2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10}
2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp
2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp
2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp
2014-05-13 20:04 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-13 20:04 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-13 20:04 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-13 20:04 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-13 20:04 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-13 20:04 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-13 19:59 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-13 19:59 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-13 19:59 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-13 19:59 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-13 19:59 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-13 19:59 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-13 19:59 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-13 19:59 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-13 19:59 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-13 19:59 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-13 19:59 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-13 19:59 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-13 19:59 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-13 19:59 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-13 19:59 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-13 19:59 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-13 19:59 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-13 19:59 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-13 19:59 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-13 19:58 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-13 19:58 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
==================== One Month Modified Files and Folders =======
2014-06-12 11:31 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Temp
2014-06-12 11:31 - 2014-06-11 11:44 - 00009837 _____ () C:\Users\Ankhang\Desktop\FRST.txt
2014-06-12 11:30 - 2014-06-11 11:44 - 00000000 ____D () C:\FRST
2014-06-12 11:29 - 2014-06-12 11:18 - 00006396 _____ () C:\zoek-results.log
2014-06-12 11:29 - 2014-02-16 22:12 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-06-12 11:29 - 2010-11-21 05:47 - 00103574 _____ () C:\Windows\PFRO.log
2014-06-12 11:29 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-12 11:29 - 2009-07-14 06:51 - 00059250 _____ () C:\Windows\setupact.log
2014-06-12 11:28 - 2014-02-16 19:34 - 01954375 _____ () C:\Windows\WindowsUpdate.log
2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\temp
2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\dub_cm_auto\AppData\Local\temp
2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-12 11:27 - 2014-06-12 11:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-12 11:26 - 2014-06-12 11:17 - 00000000 ____D () C:\zoek_backup
2014-06-12 11:24 - 2014-02-19 17:51 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-12 11:20 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-12 11:20 - 2009-07-14 06:45 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-12 11:17 - 2014-06-12 11:27 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-12 11:00 - 2014-06-12 11:00 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-12 11:00 - 2014-06-12 11:00 - 00001098 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-12 11:00 - 2014-06-12 11:00 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-06-12 10:53 - 2014-06-12 10:52 - 00000000 ____D () C:\AdwCleaner
2014-06-12 10:53 - 2014-02-16 19:40 - 00000999 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-12 10:38 - 2014-06-12 10:38 - 01285120 _____ () C:\Users\Ankhang\Desktop\zoek.exe
2014-06-12 10:21 - 2014-06-12 10:21 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Ankhang\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-12 10:20 - 2014-06-12 10:20 - 01333465 _____ () C:\Users\Ankhang\Desktop\adwcleaner_3.212.exe
2014-06-12 09:33 - 2014-03-05 18:54 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\CrashDumps
2014-06-11 21:02 - 2014-06-11 21:02 - 00291896 _____ () C:\Windows\Minidump\061114-32432-01.dmp
2014-06-11 21:02 - 2014-04-15 19:27 - 750144861 _____ () C:\Windows\MEMORY.DMP
2014-06-11 21:02 - 2014-04-15 19:27 - 00000000 ____D () C:\Windows\Minidump
2014-06-11 20:45 - 2014-02-16 22:03 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-11 20:43 - 2014-05-01 00:40 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-11 20:43 - 2014-02-16 22:03 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-11 20:42 - 2014-02-17 19:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Skype
2014-06-11 18:57 - 2014-06-04 09:04 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Spotify
2014-06-11 15:19 - 2014-06-11 15:19 - 00536528 _____ () C:\Windows\Minidump\061114-25833-01.dmp
2014-06-11 15:07 - 2014-06-11 14:15 - 00000000 ____D () C:\Qoobox
2014-06-11 15:07 - 2014-04-23 07:00 - 00000000 ____D () C:\Users\dub_cm_auto
2014-06-11 15:06 - 2014-06-11 15:06 - 00020982 _____ () C:\Users\Ankhang\Desktop\ComboFix.txt
2014-06-11 15:03 - 2014-06-11 14:14 - 00000000 ____D () C:\Windows\erdnt
2014-06-11 14:56 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-06-11 14:10 - 2014-06-11 14:10 - 05205915 ____R (Swearware) C:\Users\Ankhang\Desktop\ComboFix.exe
2014-06-11 13:04 - 2014-06-11 11:45 - 00030040 _____ () C:\Users\Ankhang\Desktop\Addition.txt
2014-06-11 12:54 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Trojanerboard
2014-06-11 12:52 - 2014-06-11 11:40 - 00000000 ____D () C:\Users\Ankhang\Downloads\Meins
2014-06-11 12:31 - 2014-06-11 12:26 - 00001283 _____ () C:\Users\Ankhang\Desktop\trojanerboard.txt
2014-06-11 12:01 - 2014-06-11 12:01 - 00012682 _____ () C:\Users\Ankhang\Desktop\gmer.log
2014-06-11 11:47 - 2014-06-11 11:47 - 00380416 _____ () C:\Users\Ankhang\Desktop\Gmer-19357.exe
2014-06-11 11:43 - 2014-06-11 11:43 - 02081792 _____ (Farbar) C:\Users\Ankhang\Desktop\FRST64.exe
2014-06-11 11:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Users\Ankhang\Downloads\Schule
2014-06-11 11:41 - 2014-03-04 13:35 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\uTorrent
2014-06-11 11:39 - 2014-06-11 11:39 - 00000476 _____ () C:\Users\Ankhang\Desktop\defogger_disable.log
2014-06-11 11:39 - 2014-06-11 11:39 - 00000000 _____ () C:\Users\Ankhang\defogger_reenable
2014-06-11 11:39 - 2014-02-16 19:39 - 00000000 ____D () C:\Users\Ankhang
2014-06-11 11:38 - 2014-06-11 11:38 - 00050477 _____ () C:\Users\Ankhang\Desktop\Defogger.exe
2014-06-11 11:31 - 2014-05-08 15:21 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\NPE
2014-06-11 11:15 - 2014-05-08 20:49 - 00000000 ____D () C:\NPE
2014-06-11 10:31 - 2014-06-11 10:31 - 00289288 _____ () C:\Windows\Minidump\061114-24008-01.dmp
2014-06-10 21:17 - 2014-06-06 12:03 - 00000919 _____ () C:\Users\Public\Desktop\Dragon Age Origins.lnk
2014-06-10 21:13 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Origin
2014-06-09 15:04 - 2014-05-31 16:00 - 00000000 ____D () C:\Spiele
2014-06-09 15:04 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-09 15:03 - 2014-06-03 10:55 - 00000000 ____D () C:\Program Files (x86)\SEGA
2014-06-09 14:47 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-09 13:16 - 2014-06-09 13:16 - 00291928 _____ () C:\Windows\Minidump\060914-25490-01.dmp
2014-06-08 13:08 - 2014-06-08 13:08 - 00288424 _____ () C:\Windows\Minidump\060814-24492-01.dmp
2014-06-08 11:13 - 2014-06-11 16:26 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-11 16:26 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\Documents\MeinSpore-Kreationen
2014-06-07 22:27 - 2014-06-07 22:27 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\SPORE
2014-06-07 22:26 - 2014-06-07 22:26 - 00000000 __RHD () C:\Users\Ankhang\AppData\Roaming\SecuROM
2014-06-07 19:15 - 2014-06-07 19:15 - 00000420 _____ () C:\Users\Ankhang\Desktop\SPORE™.lnk
2014-06-07 19:03 - 2014-06-07 19:03 - 00001008 _____ () C:\Users\Public\Desktop\Mass Effect 3.lnk
2014-06-07 19:02 - 2014-05-31 17:06 - 00115581 _____ () C:\Windows\DirectX.log
2014-06-07 18:30 - 2014-06-07 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-06 21:35 - 2014-05-12 16:23 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\NVIDIA
2014-06-06 12:03 - 2014-06-06 11:19 - 00000000 ____D () C:\Users\Ankhang\Documents\BioWare
2014-06-06 12:02 - 2014-02-16 22:11 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-06-06 11:41 - 2014-06-06 11:41 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\BigHugeEngine
2014-06-06 11:41 - 2014-06-03 22:56 - 00000000 ____D () C:\Users\Ankhang\Documents\my games
2014-06-06 11:12 - 2014-06-06 11:12 - 00000897 _____ () C:\Users\Public\Desktop\Dragon Age II.lnk
2014-06-06 10:23 - 2014-06-04 09:05 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Spotify
2014-06-05 08:09 - 2014-02-17 19:50 - 00000000 ____D () C:\ProgramData\Skype
2014-06-04 15:22 - 2014-06-04 15:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Ubisoft
2014-06-04 09:43 - 2014-02-17 04:29 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-06-04 09:43 - 2014-02-17 04:29 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-06-04 09:43 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-04 09:36 - 2014-06-04 09:33 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\vlc
2014-06-04 09:32 - 2014-06-04 09:32 - 00001062 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-04 09:31 - 2014-06-04 09:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-04 09:05 - 2014-06-04 09:05 - 00001817 _____ () C:\Users\Ankhang\Desktop\Spotify.lnk
2014-06-04 09:05 - 2014-06-04 09:05 - 00001803 _____ () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-04 08:32 - 2014-06-04 08:32 - 00000211 _____ () C:\Users\Ankhang\Desktop\Dota 2.url
2014-06-03 23:16 - 2014-06-03 23:01 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Skyrim
2014-06-03 22:13 - 2014-06-03 22:13 - 00000646 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-06-03 22:13 - 2014-06-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-03 15:49 - 2014-06-03 15:49 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399999089
2014-06-03 15:49 - 2014-05-08 19:27 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-06-03 11:04 - 2014-06-02 22:17 - 00000000 ____D () C:\Users\Ankhang\Documents\SEGA
2014-06-03 11:00 - 2014-06-03 09:41 - 00000360 _____ () C:\console.log
2014-06-03 09:15 - 2014-06-03 09:15 - 00000637 _____ () C:\Users\Ankhang\Desktop\LoL.lnk
2014-06-02 18:22 - 2014-06-02 18:22 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitComet
2014-06-02 18:05 - 2014-06-02 18:00 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\BitCometLite
2014-06-02 12:16 - 2014-05-31 17:17 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-06-02 12:16 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-06-01 14:25 - 2014-05-31 17:06 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-06-01 14:08 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Origin
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\Documents\Battlefield 3
2014-05-31 17:17 - 2014-05-31 17:17 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\PunkBuster
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\ESN
2014-05-31 17:16 - 2014-05-31 17:16 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-05-31 17:15 - 2014-05-31 17:15 - 02247960 _____ () C:\Users\Ankhang\Downloads\battlelog-web-plugins_2.4.0_141.exe
2014-05-31 17:12 - 2014-05-31 17:12 - 00000000 ____D () C:\ProgramData\EA Core
2014-05-31 17:12 - 2014-05-31 15:56 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Origin
2014-05-31 17:12 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-31 17:07 - 2014-05-31 17:07 - 00000725 _____ () C:\Users\Public\Desktop\BF3.lnk
2014-05-31 17:07 - 2014-05-31 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-31 15:54 - 2014-05-31 15:54 - 00000658 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-31 15:54 - 2014-05-31 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-31 15:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-31 10:31 - 2014-05-23 18:25 - 00000800 _____ () C:\Users\Ankhang\Desktop\MK LOL.lnk
2014-05-24 11:34 - 2014-05-24 11:34 - 00289784 _____ () C:\Windows\Minidump\052414-24866-01.dmp
2014-05-23 18:26 - 2014-04-06 13:50 - 00000059 _____ () C:\Windows\JQHApp.dat
2014-05-23 18:25 - 2014-04-06 13:49 - 00000000 ____D () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MKJogo
2014-05-22 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-22 18:44 - 2014-05-22 18:44 - 00003076 _____ () C:\Windows\System32\Tasks\{CE9C1FFC-6069-417B-AC21-78EDAAA5CC10}
2014-05-22 16:22 - 2009-07-14 01:59 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\msdtc.exe
2014-05-22 16:00 - 2014-05-22 16:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-05-22 15:51 - 2014-02-16 23:28 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-22 15:51 - 2014-02-16 23:28 - 00002319 _____ () C:\Users\Public\Desktop\Norton 360.lnk
2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2014-05-22 15:51 - 2014-02-16 23:27 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64
2014-05-19 15:35 - 2014-05-19 15:35 - 00291256 _____ () C:\Windows\Minidump\051914-26192-01.dmp
2014-05-19 14:50 - 2014-05-19 14:50 - 00288504 _____ () C:\Windows\Minidump\051914-22027-01.dmp
2014-05-19 14:33 - 2014-05-19 14:33 - 00291928 _____ () C:\Windows\Minidump\051914-25615-01.dmp
2014-05-16 17:14 - 2014-03-24 16:42 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-14 20:24 - 2014-02-19 17:51 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 20:24 - 2014-02-19 17:51 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 20:24 - 2014-02-19 17:51 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-13 20:39 - 2014-02-16 19:40 - 00000000 ___RD () C:\Users\Ankhang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-13 18:41 - 2014-02-19 17:50 - 00000000 ____D () C:\Users\Ankhang\AppData\Local\Adobe
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-05-13 18:38 - 2014-05-13 18:38 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-05-09 06:51
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-06-2014
Ran by Ankhang at 2014-06-12 11:31:44
Running from C:\Users\Ankhang\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Norton 360 Online (Disabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton 360 Online (Disabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton 360 Online (Disabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
==================== Installed Programs ======================
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.347.0 - Microsoft Corporation)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts)
Dragon Age™ II (HKLM-x32\...\{E1EB9F56-AFE2-4204-B28F-AD8DA793B9F4}) (Version: 1.04.8524.0 - Electronic Arts)
Internet Explorer (Enable DEP) (HKLM\...\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb) (Version: - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Small Business Edition 2003 (HKLM-x32\...\{91CA0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Norton 360 (HKLM-x32\...\N360) (Version: 21.3.0.12 - Symantec Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
Opera Stable 22.0.1471.50 (HKLM-x32\...\Opera 22.0.1471.50) (Version: 22.0.1471.50 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Pointofix (HKLM-x32\...\Pointofix_is1) (Version: - Amerigomedia)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
==================== Restore Points =========================
09-06-2014 13:05:56 Windows Update
11-06-2014 18:42:53 Windows Update
12-06-2014 09:18:48 zoek.exe restore point
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {43E67C9A-557E-4E5B-A808-79F9B8BCE1C1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {985EBFEE-C4E0-4265-9F16-55908D468A89} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {A87828C2-F008-44AE-86D9-66C975704767} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation)
Task: {C6245414-7C62-4989-9F52-CAF330FF2C67} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {C96F1BA6-3444-432A-9549-DABE511AC317} - System32\Tasks\{D65FF839-151E-45D9-BB4F-8F8B982E3852} => C:\Program Files (x86)\Skype\Phone\Skype.exe
Task: {E2821676-D67F-46C1-AC1A-FD2225325605} - System32\Tasks\Opera scheduled Autoupdate 1399999089 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-27] (Opera Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-02-16 22:12 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-31 17:06 - 2014-05-31 17:06 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/12/2014 11:30:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 11:14:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 10:56:52 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 09:57:15 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 09:33:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001d821
ID des fehlerhaften Prozesses: 0xf78
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
Error: (06/12/2014 09:33:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0015e235
ID des fehlerhaften Prozesses: 0xf78
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
Error: (06/12/2014 09:31:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/11/2014 09:06:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: wcp.dll, Version: 6.1.7601.17592, Zeitstempel: 0x4da00342
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000009a156
ID des fehlerhaften Prozesses: 0x440
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3
Error: (06/11/2014 09:03:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/11/2014 06:59:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SporeApp.exe, Version: 1.1.0.338, Zeitstempel: 0x4897d819
Name des fehlerhaften Moduls: DMCmdPortalClient.DLL, Version: 0.6.7.2, Zeitstempel: 0x4865307e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001d821
ID des fehlerhaften Prozesses: 0x14b0
Startzeit der fehlerhaften Anwendung: 0xSporeApp.exe0
Pfad der fehlerhaften Anwendung: SporeApp.exe1
Pfad des fehlerhaften Moduls: SporeApp.exe2
Berichtskennung: SporeApp.exe3
System errors:
=============
Error: (06/12/2014 11:30:13 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (06/12/2014 11:26:38 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/12/2014 11:26:37 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/12/2014 11:26:37 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/12/2014 11:26:36 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/12/2014 11:26:35 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/12/2014 11:14:14 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (06/12/2014 10:58:15 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.
Error: (06/12/2014 10:56:15 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (06/12/2014 09:56:39 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
Error: (06/12/2014 11:30:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 11:14:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 10:56:52 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 09:57:15 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 09:33:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d821f7801cf86104a9c5d2bC:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLLdd8aa9fe-f203-11e3-8aec-002511a293a5
Error: (06/12/2014 09:33:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819SporeApp.exe1.1.0.3384897d819c00000050015e235f7801cf86104a9c5d2bC:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\SporeApp.exed16f462c-f203-11e3-8aec-002511a293a5
Error: (06/12/2014 09:31:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/11/2014 09:06:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bwcp.dll6.1.7601.175924da00342c0000005000000000009a15644001cf85a7b157d058C:\Windows\servicing\TrustedInstaller.exeC:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.17592_none_672ce6c3de2cb17f\wcp.dll8af5a14b-f19b-11e3-bba2-002511a293a5
Error: (06/11/2014 09:03:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/11/2014 06:59:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: SporeApp.exe1.1.0.3384897d819DMCmdPortalClient.DLL0.6.7.24865307ec00000050001d82114b001cf85964f17d8cbC:\Spiele\Spore\SporeBin\SporeApp.exeC:\Spiele\Spore\SporeBin\DMCmdPortalClient.DLLc8ec30b7-f189-11e3-8660-002511a293a5
CodeIntegrity Errors:
===================================
Date: 2014-05-08 20:58:05.725
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:58:05.665
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:59.459
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:59.334
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:53.156
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:53.032
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:46.760
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:46.698
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:40.524
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-08 20:57:40.478
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140507.008\ex64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 15%
Total physical RAM: 8191.14 MB
Available physical RAM: 6931.2 MB
Total Pagefile: 16380.46 MB
Available Pagefile: 15065.92 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:456.26 GB) (Free:311.93 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (VOLUME) (Fixed) (Total:18.55 GB) (Free:1.97 GB) NTFS
Drive e: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive f: () (Fixed) (Total:456.6 GB) (Free:456.44 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: B200EA93)
Partition 1: (Not Active) - (Size=19 GB) - (Type=OF Extended)
Partition 2: (Not Active) - (Size=99 MB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
12.06.2014, 10:43
| #10 |
| /// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Wir kontrollieren nochmal alles. ESET kann länger (> 3 h) dauern. Im Anschluss entfernen wir alle verwendeten Tools und ich gebe dir noch ein paar Tipps mit auf den Weg. Schritt 1 ESET Online Scanner
Schritt 2 Downloade Dir bitte  SecurityCheck und:
Bitte poste mit deiner nächsten Antwort
|
|
12.06.2014, 11:53
| #11 |
| | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hier die Log Dateien von ESET und Security Check Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=85b2e54168572540b164f88689c636ef
# engine=18681
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-06-12 10:46:16
# local_time=2014-06-12 12:46:16 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Norton 360'
# compatibility_mode=3598 16777213 100 100 257506 153232472 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 4969 154199826 0 0
# scanned=225476
# found=10
# cleaned=0
# scan_time=3023
sh=4E475FD620FBCCBB37453AF2BD0427BDA73109FF ft=1 fh=70875884387ffbdb vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir"
sh=524ED1264811258D64BA2BE8B48005C6D1935713 ft=1 fh=19b60c262a337e59 vn="Win64/Thinknice.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface64.dll.vir"
sh=72971E4B87542575A876B36FB87879B416F4EC88 ft=1 fh=eb8c71c588367618 vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterfacef32.dll.vir"
sh=F34BB16FA7EEF85B106A7C3A3FDEEE95ECF18001 ft=1 fh=7bd5299d4d87abc5 vn="Win32/Thinknice.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect32.dll.vir"
sh=FB15CD6ADCD9BDFBF68D5DF5EAEA02BF329F8D4F ft=1 fh=dfa2b1c2f56e7303 vn="Win64/Thinknice.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect64.dll.vir"
sh=EC7EC5D60C5A578BC9953115D368BECD05BA14B2 ft=1 fh=ecbff00cc7dcc0fd vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir"
sh=95D8C7F2851240F836D46EBD0DCB0BBAE3C9C3C8 ft=1 fh=c39b2415a29978f2 vn="Variante von Win32/ELEX.AD evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\IePluginService\PluginService.exe.vir"
sh=A70C63312CBCD0D975236E48372A5F3275A01554 ft=1 fh=b3500ac9ac48c1c9 vn="Variante von Win32/ELEX.AE evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\WPM\wprotectmanager.exe.vir"
sh=EC7EC5D60C5A578BC9953115D368BECD05BA14B2 ft=1 fh=ecbff00cc7dcc0fd vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Ankhang\AppData\Roaming\SupTab\SupTab.dll.vir"
sh=AC8E627E20A1EF7BEB483D9654751D36F1483952 ft=1 fh=34eb50337ba521c2 vn="Variante von Win32/DomaIQ.BH evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Ankhang\AppData\Roaming\Opera Software\Opera Stable\File System\002\t\00\00000000"
Code:
ATTFilter Results of screen317's Security Check version 0.99.83
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Norton 360 Online
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Adobe Flash Player 13.0.0.214
Adobe Reader XI
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
|
|
12.06.2014, 14:27
| #12 |
| /// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.  Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern. Schritt 1 Die Reihenfolge ist hier entscheidend.
Schritt 2 Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems. Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti-Viren-Programm und zusätzlicher Schutz
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden. Mozilla Firefox
Performance
Was du vermeiden solltest:
Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen? Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
12.06.2014, 16:02
| #13 |
| | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt Hallo. Und vielen Dank für die Hilfe. Leider treten die Probleme immer noch auf. Könnte eine Formatierung die Probleme lösen? |
|
12.06.2014, 16:04
| #14 | |
| /// TB-Ausbilder | Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stopptZitat:
Ich bin froh, dass wir helfen konnten  In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!  Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
|
| Themen zu Windows 7: Webbrowser stürzt ab, Spiele hängen, Computer stoppt |
| abstürzen, association, automatisch, bildschirm, computer, hängen, keine verbindung, keine viren, norton 360, probleme, pup.optional.outbrowse, pup.optional.qone8, sich automatisch, spotify web helper, stürzt ab, sweet-page, sweet-page entfernen, verbindung, webseiten, win32/domaiq.bh, win32/elex.ad, win32/elex.ae, win32/thinknice.a, win32/thinknice.b, win64/thinknice.a, windows |
