| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: TR/Crypt.XPACK.Gen7 und Malewarebites MeldungenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
19.02.2015, 19:41
| #1 |
 |  TR/Crypt.XPACK.Gen7 und Malewarebites Meldungen Hallo, ich habe mir vor kurzem, kein Monat her, einen neuen PC gekauft. Jetzt habe ich eine Meldung von meinem Antivirenprogramm bekommen, das ich einen Trojaner hätte. Der Trojaner wird plötzlich bei meinem W-Lanstick vermutet... Kann es sein, das das nur Falschmeldungen sind? Wenn ja, wie bekommt man die weg? Hier der Bericht von dem Antivierenprogramm. Code:
ATTFilter Avira Free Antivirus
Erstellungsdatum der Reportdatei: Donnerstag, 19. Februar 2015 18:28
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Avira Antivirus Free
Seriennummer : 0000149996-AVHOE-0000001
Plattform : Windows 7 Professional
Windowsversion : (Service Pack 1) [6.1.7601]
Boot Modus : Normal gebootet
Benutzername : SYSTEM
Computername : GAMING-PC
Versionsinformationen:
BUILD.DAT : 14.0.7.468 91859 Bytes 24.11.2014 10:23:00
AVSCAN.EXE : 14.0.7.462 1015544 Bytes 24.11.2014 09:23:24
AVSCANRC.DLL : 14.0.7.308 64304 Bytes 24.11.2014 09:23:24
LUKE.DLL : 14.0.7.462 60664 Bytes 24.11.2014 09:23:29
AVSCPLR.DLL : 14.0.7.440 93488 Bytes 24.11.2014 09:23:24
REPAIR.DLL : 14.0.7.412 366328 Bytes 24.11.2014 09:23:24
REPAIR.RDF : 1.0.5.0 738219 Bytes 18.02.2015 17:55:27
AVREG.DLL : 14.0.7.310 264952 Bytes 24.11.2014 09:23:23
AVLODE.DLL : 14.0.7.440 561456 Bytes 24.11.2014 09:23:23
AVLODE.RDF : 14.0.4.54 78895 Bytes 30.01.2015 08:43:20
XBV00015.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00016.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00017.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00018.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00019.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00020.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00021.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00022.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00023.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00024.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00025.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00026.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00027.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00028.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00029.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00030.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00031.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00032.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00033.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00034.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00035.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00036.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00037.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00038.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00039.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00040.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00041.VDF : 8.11.165.190 2048 Bytes 07.08.2014 09:23:34
XBV00154.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00155.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00156.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00157.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00158.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00159.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00160.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00161.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00162.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00163.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00164.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00165.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00166.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00167.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00168.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00169.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00170.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00171.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00172.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00173.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00174.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00175.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00176.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00177.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:56
XBV00178.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00179.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00180.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00181.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00182.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00183.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00184.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00185.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00186.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00187.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00188.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00189.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00190.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00191.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00192.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00193.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00194.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00195.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00196.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00197.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00198.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00199.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00200.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00201.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00202.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00203.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:57
XBV00204.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00205.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00206.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00207.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00208.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00209.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00210.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00211.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00212.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00213.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00214.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00215.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00216.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00217.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00218.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00219.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00220.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00221.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00222.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00223.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00224.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00225.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00226.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00227.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00228.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00229.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00230.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:58
XBV00231.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00232.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00233.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00234.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00235.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00236.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00237.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00238.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00239.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00240.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00241.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00242.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00243.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00244.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00245.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00246.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00247.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00248.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00249.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00250.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00251.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00252.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00253.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00254.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00255.VDF : 8.11.206.252 2048 Bytes 04.02.2015 13:09:59
XBV00000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 09:23:34
XBV00001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 09:23:34
XBV00002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 09:23:34
XBV00003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 09:23:34
XBV00004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 09:23:34
XBV00005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 09:23:34
XBV00006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 09:23:34
XBV00007.VDF : 7.11.152.100 4193792 Bytes 02.06.2014 09:23:34
XBV00008.VDF : 8.11.165.192 4251136 Bytes 07.08.2014 09:23:34
XBV00009.VDF : 8.11.172.30 2094080 Bytes 15.09.2014 09:23:34
XBV00010.VDF : 8.11.178.32 1581056 Bytes 14.10.2014 09:23:34
XBV00011.VDF : 8.11.184.50 2178560 Bytes 11.11.2014 09:23:34
XBV00012.VDF : 8.11.190.32 1876992 Bytes 03.12.2014 08:43:23
XBV00013.VDF : 8.11.201.28 2973696 Bytes 14.01.2015 08:43:28
XBV00014.VDF : 8.11.206.252 2695680 Bytes 04.02.2015 13:09:51
XBV00042.VDF : 8.11.207.24 43520 Bytes 04.02.2015 13:09:51
XBV00043.VDF : 8.11.207.50 2048 Bytes 04.02.2015 13:09:51
XBV00044.VDF : 8.11.207.52 2048 Bytes 04.02.2015 13:09:51
XBV00045.VDF : 8.11.207.78 20480 Bytes 04.02.2015 13:09:51
XBV00046.VDF : 8.11.207.104 5632 Bytes 04.02.2015 13:09:51
XBV00047.VDF : 8.11.207.106 2048 Bytes 05.02.2015 13:09:51
XBV00048.VDF : 8.11.207.108 23040 Bytes 05.02.2015 13:09:51
XBV00049.VDF : 8.11.207.110 34304 Bytes 05.02.2015 13:09:52
XBV00050.VDF : 8.11.207.112 2048 Bytes 05.02.2015 13:09:52
XBV00051.VDF : 8.11.207.134 15360 Bytes 05.02.2015 13:09:52
XBV00052.VDF : 8.11.207.154 9728 Bytes 05.02.2015 19:09:47
XBV00053.VDF : 8.11.207.178 39936 Bytes 05.02.2015 14:26:30
XBV00054.VDF : 8.11.207.200 32256 Bytes 05.02.2015 14:26:30
XBV00055.VDF : 8.11.207.204 2560 Bytes 05.02.2015 14:26:31
XBV00056.VDF : 8.11.207.208 57856 Bytes 06.02.2015 14:26:31
XBV00057.VDF : 8.11.207.210 2048 Bytes 06.02.2015 14:26:31
XBV00058.VDF : 8.11.207.212 5120 Bytes 06.02.2015 14:26:31
XBV00059.VDF : 8.11.207.232 18944 Bytes 06.02.2015 14:26:31
XBV00060.VDF : 8.11.207.252 24576 Bytes 06.02.2015 14:26:31
XBV00061.VDF : 8.11.208.16 9216 Bytes 06.02.2015 20:26:25
XBV00062.VDF : 8.11.208.18 4096 Bytes 06.02.2015 20:26:25
XBV00063.VDF : 8.11.208.20 2560 Bytes 06.02.2015 20:26:25
XBV00064.VDF : 8.11.208.42 54272 Bytes 06.02.2015 16:06:37
XBV00065.VDF : 8.11.208.62 2048 Bytes 06.02.2015 16:06:37
XBV00066.VDF : 8.11.208.84 28160 Bytes 06.02.2015 16:06:37
XBV00067.VDF : 8.11.208.86 2048 Bytes 06.02.2015 16:06:37
XBV00068.VDF : 8.11.208.88 2048 Bytes 07.02.2015 16:06:37
XBV00069.VDF : 8.11.208.92 61440 Bytes 07.02.2015 16:06:38
XBV00070.VDF : 8.11.208.112 2048 Bytes 07.02.2015 16:06:38
XBV00071.VDF : 8.11.208.130 40448 Bytes 07.02.2015 16:06:38
XBV00072.VDF : 8.11.208.148 2048 Bytes 07.02.2015 16:06:38
XBV00073.VDF : 8.11.208.166 62976 Bytes 08.02.2015 16:06:38
XBV00074.VDF : 8.11.208.184 2048 Bytes 08.02.2015 16:06:38
XBV00075.VDF : 8.11.208.204 32768 Bytes 08.02.2015 22:06:37
XBV00076.VDF : 8.11.208.206 49664 Bytes 09.02.2015 20:14:21
XBV00077.VDF : 8.11.208.224 5120 Bytes 09.02.2015 20:14:21
XBV00078.VDF : 8.11.208.242 5120 Bytes 09.02.2015 20:14:21
XBV00079.VDF : 8.11.209.4 17920 Bytes 09.02.2015 20:14:21
XBV00080.VDF : 8.11.209.22 7680 Bytes 09.02.2015 20:14:21
XBV00081.VDF : 8.11.209.28 30720 Bytes 09.02.2015 20:14:21
XBV00082.VDF : 8.11.209.34 24064 Bytes 09.02.2015 20:14:21
XBV00083.VDF : 8.11.209.36 2048 Bytes 09.02.2015 20:14:21
XBV00084.VDF : 8.11.209.38 12800 Bytes 09.02.2015 20:14:21
XBV00085.VDF : 8.11.209.42 36352 Bytes 10.02.2015 20:14:21
XBV00086.VDF : 8.11.209.44 3584 Bytes 10.02.2015 20:14:21
XBV00087.VDF : 8.11.209.46 16384 Bytes 10.02.2015 20:14:21
XBV00088.VDF : 8.11.209.48 33280 Bytes 10.02.2015 20:14:21
XBV00089.VDF : 8.11.209.70 38400 Bytes 10.02.2015 20:14:21
XBV00090.VDF : 8.11.209.90 18944 Bytes 10.02.2015 20:14:21
XBV00091.VDF : 8.11.209.106 10752 Bytes 10.02.2015 20:14:21
XBV00092.VDF : 8.11.209.122 10752 Bytes 10.02.2015 20:14:22
XBV00093.VDF : 8.11.209.126 25088 Bytes 11.02.2015 20:14:22
XBV00094.VDF : 8.11.209.128 13312 Bytes 11.02.2015 20:14:22
XBV00095.VDF : 8.11.209.130 2048 Bytes 11.02.2015 20:14:22
XBV00096.VDF : 8.11.209.132 32256 Bytes 11.02.2015 20:14:22
XBV00097.VDF : 8.11.209.134 23552 Bytes 11.02.2015 20:14:22
XBV00098.VDF : 8.11.209.140 20480 Bytes 11.02.2015 20:14:22
XBV00099.VDF : 8.11.209.156 7680 Bytes 11.02.2015 20:14:22
XBV00100.VDF : 8.11.209.174 12800 Bytes 11.02.2015 14:29:58
XBV00101.VDF : 8.11.209.190 8192 Bytes 11.02.2015 14:29:58
XBV00102.VDF : 8.11.209.206 5120 Bytes 11.02.2015 14:29:58
XBV00103.VDF : 8.11.209.210 30720 Bytes 12.02.2015 14:29:58
XBV00104.VDF : 8.11.209.212 23040 Bytes 12.02.2015 14:29:58
XBV00105.VDF : 8.11.209.214 2048 Bytes 12.02.2015 14:29:58
XBV00106.VDF : 8.11.209.218 2048 Bytes 12.02.2015 14:29:58
XBV00107.VDF : 8.11.209.222 19968 Bytes 12.02.2015 14:29:58
XBV00108.VDF : 8.11.209.226 23552 Bytes 12.02.2015 14:29:58
XBV00109.VDF : 8.11.209.228 8704 Bytes 12.02.2015 14:29:58
XBV00110.VDF : 8.11.209.232 24576 Bytes 13.02.2015 14:29:58
XBV00111.VDF : 8.11.209.248 5120 Bytes 13.02.2015 14:29:58
XBV00112.VDF : 8.11.210.6 3584 Bytes 13.02.2015 14:29:58
XBV00113.VDF : 8.11.210.20 20992 Bytes 13.02.2015 14:29:58
XBV00114.VDF : 8.11.210.34 2560 Bytes 13.02.2015 14:29:58
XBV00115.VDF : 8.11.210.36 7680 Bytes 13.02.2015 15:58:51
XBV00116.VDF : 8.11.210.38 28160 Bytes 13.02.2015 15:58:51
XBV00117.VDF : 8.11.210.40 5632 Bytes 13.02.2015 15:58:51
XBV00118.VDF : 8.11.210.42 2048 Bytes 13.02.2015 15:58:51
XBV00119.VDF : 8.11.210.46 17920 Bytes 13.02.2015 15:58:51
XBV00120.VDF : 8.11.210.48 6656 Bytes 14.02.2015 15:58:51
XBV00121.VDF : 8.11.210.52 22528 Bytes 14.02.2015 15:58:52
XBV00122.VDF : 8.11.210.54 8704 Bytes 14.02.2015 15:58:52
XBV00123.VDF : 8.11.210.56 8704 Bytes 14.02.2015 15:58:52
XBV00124.VDF : 8.11.210.58 2048 Bytes 14.02.2015 14:15:03
XBV00125.VDF : 8.11.210.60 57344 Bytes 15.02.2015 14:15:03
XBV00126.VDF : 8.11.210.74 7168 Bytes 15.02.2015 14:15:03
XBV00127.VDF : 8.11.210.88 11776 Bytes 15.02.2015 14:15:03
XBV00128.VDF : 8.11.210.104 43008 Bytes 16.02.2015 14:15:03
XBV00129.VDF : 8.11.210.118 4096 Bytes 16.02.2015 14:15:03
XBV00130.VDF : 8.11.210.124 12800 Bytes 16.02.2015 14:15:03
XBV00131.VDF : 8.11.210.126 60416 Bytes 16.02.2015 14:15:03
XBV00132.VDF : 8.11.210.134 2048 Bytes 16.02.2015 14:15:03
XBV00133.VDF : 8.11.210.138 23552 Bytes 16.02.2015 20:01:38
XBV00134.VDF : 8.11.210.142 19968 Bytes 16.02.2015 20:01:38
XBV00135.VDF : 8.11.210.156 6656 Bytes 16.02.2015 20:01:38
XBV00136.VDF : 8.11.210.170 17408 Bytes 17.02.2015 20:01:38
XBV00137.VDF : 8.11.210.172 2048 Bytes 17.02.2015 20:01:38
XBV00138.VDF : 8.11.210.184 6144 Bytes 17.02.2015 20:01:38
XBV00139.VDF : 8.11.210.196 5120 Bytes 17.02.2015 20:01:38
XBV00140.VDF : 8.11.210.198 4608 Bytes 17.02.2015 20:01:38
XBV00141.VDF : 8.11.210.200 2048 Bytes 17.02.2015 20:01:38
XBV00142.VDF : 8.11.210.206 29696 Bytes 17.02.2015 20:01:38
XBV00143.VDF : 8.11.210.208 2048 Bytes 17.02.2015 20:01:38
XBV00144.VDF : 8.11.210.212 20480 Bytes 17.02.2015 17:55:25
XBV00145.VDF : 8.11.210.216 8704 Bytes 17.02.2015 17:55:25
XBV00146.VDF : 8.11.210.218 12800 Bytes 17.02.2015 17:55:25
XBV00147.VDF : 8.11.210.222 31744 Bytes 18.02.2015 17:55:25
XBV00148.VDF : 8.11.210.224 38912 Bytes 18.02.2015 17:55:25
XBV00149.VDF : 8.11.210.236 184832 Bytes 18.02.2015 17:55:26
XBV00150.VDF : 8.11.210.248 2048 Bytes 18.02.2015 17:55:26
XBV00151.VDF : 8.11.211.4 36352 Bytes 18.02.2015 17:55:26
XBV00152.VDF : 8.11.211.10 2048 Bytes 18.02.2015 17:55:26
XBV00153.VDF : 8.11.211.22 2048 Bytes 18.02.2015 17:55:26
LOCAL001.VDF : 8.11.211.22 121759744 Bytes 18.02.2015 17:55:34
Engineversion : 8.3.28.20
AEVDF.DLL : 8.3.1.6 133992 Bytes 24.11.2014 09:23:20
AESCRIPT.DLL : 8.2.2.56 554920 Bytes 13.02.2015 14:29:57
AESCN.DLL : 8.3.2.2 139456 Bytes 24.11.2014 09:23:20
AESBX.DLL : 8.2.20.24 1409224 Bytes 24.11.2014 09:23:20
AERDL.DLL : 8.2.1.20 731040 Bytes 11.02.2015 20:14:20
AEPACK.DLL : 8.4.0.58 789360 Bytes 30.01.2015 08:43:18
AEOFFICE.DLL : 8.3.1.10 351088 Bytes 30.01.2015 08:43:18
AEMOBILE.DLL : 8.1.2.0 277360 Bytes 30.01.2015 08:43:20
AEHEUR.DLL : 8.1.4.1536 8145776 Bytes 13.02.2015 14:29:57
AEHELP.DLL : 8.3.1.0 278728 Bytes 24.11.2014 09:23:20
AEGEN.DLL : 8.1.7.40 456608 Bytes 30.01.2015 08:43:12
AEEXP.DLL : 8.4.2.70 255904 Bytes 06.02.2015 14:26:30
AEEMU.DLL : 8.1.3.4 399264 Bytes 24.11.2014 09:23:20
AEDROID.DLL : 8.4.3.6 850800 Bytes 30.01.2015 08:43:19
AECORE.DLL : 8.3.4.0 243624 Bytes 30.01.2015 08:43:12
AEBB.DLL : 8.1.2.0 60448 Bytes 24.11.2014 09:23:20
AVWINLL.DLL : 14.0.7.308 25904 Bytes 24.11.2014 09:23:25
AVPREF.DLL : 14.0.7.308 52016 Bytes 24.11.2014 09:23:23
AVREP.DLL : 14.0.7.308 220976 Bytes 24.11.2014 09:23:24
AVARKT.DLL : 14.0.7.308 227632 Bytes 24.11.2014 09:23:21
AVEVTLOG.DLL : 14.0.7.440 184112 Bytes 24.11.2014 09:23:21
SQLITE3.DLL : 14.0.7.308 453936 Bytes 24.11.2014 09:23:32
AVSMTP.DLL : 14.0.7.308 79096 Bytes 24.11.2014 09:23:24
NETNT.DLL : 14.0.7.308 15152 Bytes 24.11.2014 09:23:29
RCIMAGE.DLL : 14.0.7.308 4865328 Bytes 24.11.2014 09:23:30
RCTEXT.DLL : 14.0.7.318 77048 Bytes 24.11.2014 09:23:31
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: AVGuardAsyncScan
Konfigurationsdatei...................: C:\ProgramData\Avira\AntiVir Desktop\TEMP\AVGUARD_54e60b66\guard_slideup.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Quarantäne
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: aus
Durchsuche aktive Programme...........: ein
Durchsuche Registrierung..............: aus
Suche nach Rootkits...................: aus
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: Vollständig
Beginn des Suchlaufs: Donnerstag, 19. Februar 2015 18:28
Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvSCPAPISvr.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '90' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '123' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '82' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '137' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '73' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvxdsync.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '76' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '100' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '163' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '141' Modul(e) wurden durchsucht
Durchsuche Prozess 'GfExperienceService.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'MSI_Trigger_Service.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'RtkNGUI64.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'rundll32.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'NvBackend.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'NvNetworkService.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'SBCinema.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvstreamsvc.exe' - '66' Modul(e) wurden durchsucht
Durchsuche Prozess 'iusb3mon.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'CLMLSvc.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'PnkBstrA.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'KillerService.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'RtlService.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'A6100.exe' - '89' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.Systray.exe' - '121' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '123' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '127' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'GoogleCrashHandler.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'GoogleCrashHandler64.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvstreamsvc.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '14' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvstreamsvc.exe' - '67' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvtray.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '119' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '115' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '64' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:\Program Files (x86)\NETGEAR\A6100\NETGEARU.exe'
C:\Program Files (x86)\NETGEAR\A6100\NETGEARU.exe
[FUND] Ist das Trojanische Pferd TR/Crypt.XPACK.Gen7
Beginne mit der Desinfektion:
C:\Program Files (x86)\NETGEAR\A6100\NETGEARU.exe
[FUND] Ist das Trojanische Pferd TR/Crypt.XPACK.Gen7
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '50f5bfb6.qua' verschoben!
Ende des Suchlaufs: Donnerstag, 19. Februar 2015 18:28
Benötigte Zeit: 00:03 Minute(n)
Der Suchlauf wurde vollständig durchgeführt.
0 Verzeichnisse wurden überprüft
811 Dateien wurden geprüft
1 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
1 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
810 Dateien ohne Befall
1 Archive wurden durchsucht
0 Warnungen
1 Hinweise
Die Suchergebnisse werden an den Guard übermittelt.
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 19.02.2015 Scan Time: 18:30:54 Logfile: maleware.txt Administrator: Yes Version: 2.00.4.1028 Malware Database: v2015.02.19.07 Rootkit Database: v2015.02.03.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: GAMING Scan Type: Threat Scan Result: Completed Objects Scanned: 346489 Time Elapsed: 4 min, 36 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 2 Backdoor.Bot.ED, C:\Program Files (x86)\Battlelog Web Plugins\helper.exe, Quarantined, [ef64cd53b3d786b0ce3b27fed1319868], Backdoor.Bot.ED, C:\Users\GAMING\Downloads\battlelog-web-plugins_2.6.2_157.exe, Quarantined, [cd86c45ca9e1c07621e8ef36bf4323dd], Physical Sectors: 0 (No malicious items detected) (end) |
|
19.02.2015, 20:13
| #2 |
| /// the machine /// TB-Ausbilder    | TR/Crypt.XPACK.Gen7 und Malewarebites Meldungen Hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
19.02.2015, 21:09
| #3 |
| | TR/Crypt.XPACK.Gen7 und Malewarebites Meldungen Hallo. Danke schonmal für deine Hilfe. Hier die Beiden Logs.
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2015 01
Ran by GAMING (administrator) on GAMING-PC on 19-02-2015 21:06:21
Running from D:\Downloads
Loaded Profiles: GAMING (Available profiles: GAMING)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\NETGEAR\A6100\RtlService.exe
(NETGEAR) C:\Program Files (x86)\NETGEAR\A6100\A6100.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202008 2013-10-17] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Sound Blaster Cinema] => C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2013-08-16] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-12-15] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] => C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2010-04-20] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [619008 2010-05-25] (Nikon Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR A6100 Genie.lnk
ShortcutTarget: NETGEAR A6100 Genie.lnk -> C:\Program Files (x86)\NETGEAR\A6100\RtlService.exe (Realtek Semiconductor Corp.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-3600593988-3379056849-236234246-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.rbhs.de/ihre-bank/filialen-ansprechpartner/filialen/uebersicht-filialen/filiale-waldfeucht.html
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\GAMING\AppData\Roaming\Mozilla\Firefox\Profiles\10l8j12e.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3600593988-3379056849-236234246-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: Avira Browser Safety - C:\Users\GAMING\AppData\Roaming\Mozilla\Firefox\Profiles\10l8j12e.default\Extensions\abs@avira.com [2015-02-02]
FF Extension: WOT - C:\Users\GAMING\AppData\Roaming\Mozilla\Firefox\Profiles\10l8j12e.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-02-18]
FF Extension: Adblock Plus - C:\Users\GAMING\AppData\Roaming\Mozilla\Firefox\Profiles\10l8j12e.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-29]
Chrome:
=======
CHR Profile: C:\Users\GAMING\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\GAMING\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Docs) - C:\Users\GAMING\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\GAMING\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-04]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\GAMING\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-04]
CHR Extension: (YouTube) - C:\Users\GAMING\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-04]
CHR Extension: (Google Search) - C:\Users\GAMING\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-04]
CHR Extension: (Google Sheets) - C:\Users\GAMING\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Avira Browser Safety) - C:\Users\GAMING\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-02-04]
CHR Extension: (Google Wallet) - C:\Users\GAMING\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-04]
CHR Extension: (Gmail) - C:\Users\GAMING\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-04]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-01-13] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-01-30] ()
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [343040 2013-08-08] (Qualcomm Atheros) [File not signed]
R2 Realtek8723AU; C:\Program Files (x86)\NETGEAR\A6100\RtlService.exe [45784 2013-07-02] (Realtek Semiconductor Corp.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 A6100; C:\Windows\System32\DRIVERS\A6100.sys [2944216 2013-07-08] (Realtek Semiconductor Corporation )
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [67888 2013-02-13] (Qualcomm Atheros, Inc.)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-08-02] ()
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-19 21:06 - 2015-02-19 21:06 - 00000000 ____D () C:\FRST
2015-02-19 18:30 - 2015-02-19 19:22 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-19 18:30 - 2015-02-19 18:30 - 00001105 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-19 18:30 - 2015-02-19 18:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-02-19 18:30 - 2015-02-19 18:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-19 18:30 - 2015-02-19 18:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-02-19 18:30 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-19 18:30 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-19 18:30 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-13 09:54 - 2015-02-13 09:54 - 00000019 _____ () C:\Users\GAMING\Desktop\Battlefield 3 Back to Karkand.txt
2015-02-12 18:51 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 18:51 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-12 18:51 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-12 18:51 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 22:51 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-11 22:51 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-11 22:51 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-11 22:51 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-11 21:59 - 2015-02-11 21:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-02-11 15:21 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 15:21 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 15:21 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 15:21 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 15:21 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 15:21 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 15:21 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 15:21 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 15:21 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 15:21 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 15:21 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 15:21 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 15:21 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 15:21 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 15:21 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 15:21 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 15:21 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 15:21 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 15:21 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 15:21 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 15:21 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 15:21 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 15:21 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 15:21 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 15:21 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 15:21 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 15:21 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 15:21 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 15:21 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 15:21 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 15:21 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 15:21 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 15:21 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 15:21 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 15:21 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 15:21 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 15:21 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 15:21 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 15:21 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 15:21 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 15:21 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 15:21 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 15:21 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 15:21 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 15:21 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 15:21 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 15:21 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 15:21 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 15:21 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 15:21 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 15:21 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 15:21 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 15:21 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 15:21 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 15:21 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 15:21 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 15:21 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 15:21 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 15:21 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 15:21 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 15:21 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 15:21 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 15:21 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 15:21 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 15:21 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 15:21 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 15:21 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 15:21 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 15:21 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 15:21 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 15:21 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 15:21 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 15:21 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 15:21 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 15:19 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 15:19 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 15:19 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 15:19 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 15:19 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 15:19 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 15:19 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 15:19 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 15:19 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 15:19 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 15:19 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 15:19 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 15:19 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 15:19 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 15:19 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 15:19 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 15:19 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 15:19 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 15:19 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 15:19 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 15:19 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 15:19 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 15:19 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 15:19 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 15:19 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 15:19 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 15:19 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 15:19 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 15:19 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 15:19 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 15:19 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 15:19 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 15:19 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 15:19 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 15:19 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 15:19 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 15:19 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 15:19 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-08 15:48 - 2015-02-08 15:48 - 00000000 ____D () C:\ProgramData\Nikon
2015-02-08 11:53 - 2015-02-08 11:53 - 00000000 ____D () C:\Users\GAMING\AppData\Roaming\Nikon
2015-02-08 11:53 - 2015-02-08 11:53 - 00000000 ____D () C:\Users\GAMING\AppData\Local\Nikon
2015-02-08 11:53 - 2015-02-08 11:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nikon Message Center 2
2015-02-08 11:52 - 2015-02-08 11:53 - 00000020 ____H () C:\ProgramData\PKP_DLet.DAT
2015-02-08 11:52 - 2015-02-08 11:53 - 00000000 ____D () C:\Users\GAMING\AppData\Local\Downloaded Installations
2015-02-08 11:52 - 2015-02-08 11:53 - 00000000 ____D () C:\Program Files (x86)\Nikon
2015-02-08 11:52 - 2015-02-08 11:52 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ATL71.DLL
2015-02-08 11:52 - 2015-02-08 11:52 - 00000268 ___RH () C:\Users\GAMING\AppData\Roaming\CMMs
2015-02-08 11:52 - 2015-02-08 11:52 - 00000268 ___RH () C:\Users\GAMING\AppData\Roaming\CIOSupport
2015-02-08 11:52 - 2015-02-08 11:52 - 00000268 ___RH () C:\Users\GAMING\AppData\Roaming\Caches
2015-02-08 11:52 - 2015-02-08 11:52 - 00000268 ___RH () C:\ProgramData\Chiller
2015-02-08 11:52 - 2015-02-08 11:52 - 00000268 ___RH () C:\ProgramData\Channel
2015-02-08 11:52 - 2015-02-08 11:52 - 00000268 ___RH () C:\ProgramData\Carbon
2015-02-08 11:52 - 2015-02-08 11:52 - 00000020 ____H () C:\ProgramData\PKP_DLev.DAT
2015-02-08 11:52 - 2015-02-08 11:52 - 00000020 ____H () C:\ProgramData\PKP_DLes.DAT
2015-02-08 11:52 - 2015-02-08 11:52 - 00000012 ___RH () C:\ProgramData\Compressor
2015-02-08 11:52 - 2015-02-08 11:52 - 00000012 ___RH () C:\ProgramData\Common
2015-02-08 11:52 - 2015-02-08 11:52 - 00000012 ___RH () C:\ProgramData\Command Line Utility
2015-02-08 11:52 - 2015-02-08 11:52 - 00000000 ____D () C:\ProgramData\Ultima_T15
2015-02-08 11:52 - 2015-02-08 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX 2
2015-02-08 11:52 - 2015-02-08 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-02-08 11:52 - 2015-02-08 11:52 - 00000000 ____D () C:\ProgramData\EnterNHelp
2015-02-08 11:52 - 2015-02-08 11:52 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-02-08 11:52 - 2015-02-08 11:52 - 00000000 ____D () C:\ProgramData\Apple
2015-02-08 11:52 - 2015-02-08 11:52 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2015-02-08 11:51 - 2015-02-08 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon
2015-02-04 22:36 - 2015-02-04 22:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2015-02-04 22:34 - 2015-02-19 20:45 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-04 22:34 - 2015-02-19 18:36 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-04 22:34 - 2015-02-06 09:40 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 22:34 - 2015-02-06 09:40 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-04 22:34 - 2015-02-04 22:37 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-04 22:34 - 2015-02-04 22:36 - 00000000 ____D () C:\Users\GAMING\AppData\Local\Google
2015-02-04 22:34 - 2015-02-04 22:34 - 00880784 _____ (Google Inc.) C:\Users\GAMING\Downloads\googleupdatesetup.exe
2015-02-01 22:08 - 2015-02-01 22:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-02-01 22:08 - 2015-02-01 22:08 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-02-01 22:08 - 2015-02-01 22:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-02-01 22:07 - 2014-07-02 18:44 - 00609240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-02-01 19:19 - 2015-02-01 19:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET
2015-01-30 11:04 - 2015-01-30 11:04 - 00000000 ____D () C:\Users\GAMING\Documents\My Games
2015-01-30 09:44 - 2015-01-30 09:43 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-01-30 09:43 - 2015-01-30 09:43 - 00000000 ____D () C:\Users\GAMING\AppData\Roaming\Avira
2015-01-30 09:42 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-01-30 09:42 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-01-30 09:42 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-01-30 09:38 - 2015-01-30 09:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-01-30 09:38 - 2015-01-30 09:42 - 00000000 ____D () C:\ProgramData\Avira
2015-01-30 09:38 - 2015-01-30 09:42 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-30 09:38 - 2015-01-30 09:38 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-30 09:36 - 2015-01-30 09:36 - 04515896 _____ (Avira Operations & Co. KG) C:\Users\GAMING\Downloads\avira_de_av_5816162510__ws.exe
2015-01-30 08:50 - 2015-02-19 14:24 - 00348928 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2015-01-30 08:50 - 2015-01-30 11:04 - 00000000 ____D () C:\Users\GAMING\AppData\Local\PunkBuster
2015-01-30 08:50 - 2015-01-30 08:50 - 00000000 ____D () C:\Users\GAMING\Documents\Battlefield 3
2015-01-30 08:50 - 2015-01-30 08:50 - 00000000 ____D () C:\Users\GAMING\AppData\Local\ESN
2015-01-30 08:49 - 2015-02-19 18:36 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2015-01-30 00:17 - 2015-01-30 00:17 - 00285162 _____ () C:\Windows\msxml4-KB973688-deu.LOG
2015-01-30 00:16 - 2015-01-30 00:17 - 00290338 _____ () C:\Windows\msxml4-KB954430-deu.LOG
2015-01-30 00:16 - 2015-01-30 00:16 - 00000000 ____D () C:\ProgramData\EA Core
2015-01-29 21:29 - 2015-01-29 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2015-01-29 20:49 - 2015-01-29 21:08 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2015-01-29 20:43 - 2015-01-30 00:16 - 00000000 ____D () C:\Users\GAMING\AppData\Local\Origin
2015-01-29 20:40 - 2015-02-19 14:22 - 00000000 ____D () C:\ProgramData\Origin
2015-01-29 20:40 - 2015-02-19 14:22 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-01-29 20:40 - 2015-01-30 00:16 - 00000000 ____D () C:\ProgramData\Electronic Arts
2015-01-29 20:40 - 2015-01-29 20:49 - 00000000 ____D () C:\Users\GAMING\AppData\Roaming\Origin
2015-01-29 20:40 - 2015-01-29 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-01-29 20:40 - 2015-01-29 20:40 - 00000552 _____ () C:\Windows\KB893803v2.log
2015-01-29 20:36 - 2015-01-29 20:36 - 00000000 ____D () C:\Users\GAMING\AppData\Local\Macromedia
2015-01-29 20:36 - 2015-01-29 20:36 - 00000000 ____D () C:\ProgramData\Sun
2015-01-29 20:35 - 2015-01-29 20:35 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-01-29 20:35 - 2015-01-29 20:35 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-29 20:35 - 2015-01-29 20:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-29 20:35 - 2015-01-29 20:35 - 00000000 ____D () C:\Program Files\Java
2015-01-29 20:33 - 2015-01-29 20:35 - 93427112 _____ (Oracle Corporation) C:\Users\GAMING\Downloads\jre-8u31-windows-x64.exe
2015-01-29 20:16 - 2015-01-29 20:16 - 00000000 ____D () C:\Users\GAMING\AppData\Local\Microsoft Game Studios
2015-01-29 19:06 - 2015-01-29 19:07 - 00000000 ____D () C:\Users\GAMING\AppData\Local\NVIDIA Corporation
2015-01-29 19:06 - 2015-01-29 19:06 - 00000000 ____D () C:\Users\GAMING\AppData\Local\NVIDIA
2015-01-29 19:06 - 2015-01-16 07:41 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-01-29 19:06 - 2015-01-16 07:41 - 01514528 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-01-29 19:06 - 2015-01-16 07:41 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-01-29 19:06 - 2015-01-16 07:41 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-01-29 19:06 - 2014-11-22 11:46 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-01-29 19:06 - 2014-11-22 11:46 - 00035472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2015-01-29 19:06 - 2014-11-22 11:46 - 00032400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-01-29 19:04 - 2015-01-29 19:04 - 00001162 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-29 19:04 - 2015-01-29 19:04 - 00000000 ____D () C:\Users\GAMING\AppData\Roaming\Mozilla
2015-01-29 19:04 - 2015-01-29 19:04 - 00000000 ____D () C:\Users\GAMING\AppData\Local\Mozilla
2015-01-29 19:04 - 2015-01-29 19:04 - 00000000 ____D () C:\ProgramData\Mozilla
2015-01-29 19:04 - 2015-01-29 19:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-29 19:04 - 2015-01-29 19:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-29 18:53 - 2015-01-29 18:53 - 00000000 ____D () C:\Windows\Downloaded Installations
2015-01-29 18:53 - 2015-01-29 18:53 - 00000000 ____D () C:\ProgramData\NETGEAR
2015-01-29 18:53 - 2015-01-29 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR A6100 Genie
2015-01-29 18:53 - 2015-01-29 18:53 - 00000000 ____D () C:\Program Files (x86)\NETGEAR
2015-01-29 18:53 - 2013-08-21 23:20 - 00006588 _____ () C:\Windows\system32\Drivers\A6100_LMT.txt
2015-01-29 18:53 - 2013-08-21 23:20 - 00001529 _____ () C:\Windows\system32\Drivers\A6100.txt
2015-01-29 18:52 - 2015-01-29 18:52 - 00000000 ____D () C:\Users\GAMING\Downloads\NETGEAR
2015-01-29 12:45 - 2015-02-16 18:26 - 00000000 ____D () C:\Users\GAMING\AppData\Roaming\vlc
2015-01-26 09:30 - 2015-01-26 09:30 - 00000000 ____D () C:\Users\GAMING\Documents\Flight Simulator X-Dateien
2015-01-26 09:29 - 2015-01-26 09:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2015-01-26 09:20 - 2015-01-26 09:20 - 00000000 ____D () C:\Windows\PCHEALTH
2015-01-26 09:14 - 2015-01-26 09:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games
2015-01-25 19:39 - 2015-01-25 19:39 - 00000000 ____D () C:\Users\GAMING\AppData\Roaming\OpenOffice
2015-01-25 19:32 - 2015-01-25 19:32 - 00001188 _____ () C:\Users\GAMING\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
2015-01-25 19:32 - 2015-01-25 19:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-01-25 19:32 - 2015-01-25 19:32 - 00000000 ____D () C:\Program Files\VideoLAN
2015-01-25 19:32 - 2015-01-25 19:32 - 00000000 ____D () C:\Program Files (x86)\Startfenster
2015-01-25 19:31 - 2015-01-25 19:39 - 00000000 ____D () C:\Users\GAMING\AppData\Roaming\Winamp
2015-01-25 19:31 - 2015-01-25 19:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2015-01-25 19:31 - 2015-01-25 19:31 - 00000000 ____D () C:\Program Files (x86)\Winamp
2015-01-25 19:29 - 2015-02-08 11:53 - 00000000 ____D () C:\Users\GAMING\Desktop\Programme
2015-01-25 19:29 - 2015-01-25 19:29 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2015-01-25 19:29 - 2015-01-25 19:29 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2015-01-23 10:45 - 2015-01-23 10:45 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2015-01-23 10:44 - 2015-01-23 10:44 - 00007597 _____ () C:\Users\GAMING\AppData\Local\Resmon.ResmonCfg
2015-01-22 19:58 - 2015-01-30 00:16 - 00000000 ____D () C:\Users\GAMING\Desktop\Games
2015-01-22 19:50 - 2015-01-30 10:35 - 00000000 ____D () C:\Users\GAMING\AppData\Local\Ubisoft Game Launcher
2015-01-22 19:48 - 2015-02-19 14:24 - 00348928 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2015-01-22 19:48 - 2015-02-19 14:24 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2015-01-22 19:48 - 2015-01-30 08:54 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-01-22 19:48 - 2015-01-29 21:29 - 00313626 _____ () C:\Windows\DirectX.log
2015-01-22 19:48 - 2015-01-22 19:48 - 00000000 ____D () C:\Users\GAMING\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2015-01-22 19:48 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2015-01-22 19:48 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2015-01-22 19:48 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2015-01-22 19:48 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2015-01-22 19:48 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2015-01-22 19:48 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2015-01-22 19:48 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2015-01-22 19:48 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2015-01-22 19:48 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2015-01-22 19:48 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2015-01-22 19:48 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2015-01-22 19:48 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2015-01-22 19:48 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2015-01-22 19:48 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2015-01-22 19:48 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2015-01-22 19:48 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2015-01-22 19:48 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2015-01-22 19:48 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2015-01-22 19:48 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2015-01-22 19:48 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2015-01-22 19:48 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2015-01-22 19:48 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2015-01-22 19:48 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2015-01-22 19:48 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2015-01-22 19:48 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2015-01-22 19:48 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2015-01-22 19:48 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2015-01-22 19:48 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2015-01-22 19:48 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2015-01-22 19:48 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2015-01-22 19:48 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2015-01-22 19:48 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2015-01-22 19:48 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2015-01-22 19:48 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2015-01-22 19:48 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2015-01-22 19:48 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2015-01-22 19:48 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2015-01-22 19:48 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2015-01-22 19:48 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2015-01-22 19:48 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2015-01-22 19:48 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2015-01-22 19:48 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2015-01-22 19:48 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2015-01-22 19:48 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2015-01-22 19:48 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2015-01-22 19:48 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2015-01-22 19:48 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2015-01-22 19:48 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2015-01-22 19:48 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2015-01-22 19:48 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2015-01-22 19:48 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2015-01-22 19:48 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2015-01-22 19:48 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2015-01-22 19:48 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2015-01-22 19:48 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2015-01-22 19:48 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2015-01-22 19:48 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2015-01-22 19:48 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2015-01-22 19:48 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2015-01-22 19:48 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2015-01-22 19:48 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2015-01-22 19:48 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2015-01-22 19:48 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2015-01-22 19:48 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2015-01-22 19:48 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2015-01-22 19:48 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2015-01-22 19:48 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2015-01-22 19:48 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2015-01-22 19:48 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2015-01-22 19:48 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2015-01-22 19:48 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2015-01-22 19:48 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2015-01-22 19:48 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-01-22 19:48 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2015-01-22 19:48 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-01-22 19:48 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2015-01-22 19:48 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-01-22 19:48 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2015-01-22 19:48 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2015-01-22 19:48 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2015-01-22 19:48 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2015-01-22 19:48 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2015-01-22 19:48 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2015-01-22 19:48 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2015-01-22 19:48 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2015-01-22 19:48 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2015-01-22 19:48 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2015-01-22 19:48 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2015-01-22 19:48 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2015-01-22 19:48 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2015-01-22 19:48 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2015-01-22 19:48 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2015-01-22 19:48 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2015-01-22 19:48 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2015-01-22 19:48 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2015-01-22 19:48 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2015-01-22 19:48 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2015-01-22 19:48 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2015-01-22 19:48 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2015-01-22 19:48 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2015-01-22 19:48 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2015-01-22 19:48 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2015-01-22 19:48 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2015-01-22 19:48 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2015-01-22 19:48 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2015-01-22 19:48 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2015-01-22 19:48 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2015-01-22 19:48 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2015-01-22 19:48 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2015-01-22 19:48 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2015-01-22 19:48 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2015-01-22 19:48 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2015-01-22 19:48 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2015-01-22 19:48 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2015-01-22 19:48 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2015-01-22 19:48 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2015-01-22 19:48 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2015-01-22 19:48 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2015-01-22 19:48 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2015-01-22 19:48 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2015-01-22 19:48 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2015-01-22 19:48 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2015-01-22 19:48 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2015-01-22 19:48 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2015-01-22 19:48 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2015-01-22 19:48 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2015-01-22 19:48 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2015-01-22 19:48 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2015-01-22 19:48 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2015-01-22 19:48 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2015-01-22 19:48 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2015-01-22 19:48 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2015-01-22 19:48 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2015-01-22 19:48 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2015-01-22 19:48 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2015-01-22 19:48 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2015-01-22 19:48 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2015-01-22 19:48 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2015-01-22 19:48 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2015-01-22 19:48 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2015-01-22 19:48 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2015-01-22 19:48 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2015-01-22 19:48 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2015-01-22 19:48 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2015-01-22 19:48 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2015-01-22 19:48 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2015-01-22 19:48 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2015-01-22 19:48 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2015-01-22 19:48 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2015-01-22 19:48 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2015-01-22 19:48 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2015-01-22 19:48 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2015-01-22 19:48 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2015-01-22 19:48 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2015-01-22 19:48 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2015-01-22 19:48 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2015-01-22 19:48 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2015-01-22 19:48 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2015-01-22 19:48 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2015-01-22 19:48 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2015-01-22 19:48 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2015-01-22 19:48 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2015-01-22 19:48 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2015-01-22 19:48 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2015-01-22 19:48 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2015-01-22 19:48 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2015-01-22 19:48 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2015-01-22 19:48 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2015-01-22 19:48 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2015-01-22 19:48 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2015-01-22 19:48 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2015-01-22 19:48 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2015-01-22 19:48 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2015-01-22 19:48 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2015-01-22 19:48 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2015-01-22 19:48 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2015-01-22 19:48 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2015-01-22 19:48 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2015-01-22 19:48 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2015-01-22 19:48 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2015-01-22 19:48 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2015-01-22 19:48 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2015-01-22 19:33 - 2015-01-22 19:48 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2015-01-20 21:56 - 2015-01-20 21:56 - 00000000 ____D () C:\Users\GAMING\AppData\Local\Creative
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-19 18:43 - 2011-04-12 08:43 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-02-19 18:43 - 2011-04-12 08:43 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-02-19 18:43 - 2009-07-14 06:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-19 18:43 - 2009-07-14 05:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-19 18:43 - 2009-07-14 05:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-19 18:39 - 2015-01-12 12:24 - 01602400 _____ () C:\Windows\WindowsUpdate.log
2015-02-19 18:36 - 2015-01-12 13:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-19 18:36 - 2010-11-21 04:47 - 00234350 _____ () C:\Windows\PFRO.log
2015-02-19 18:36 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-19 18:36 - 2009-07-14 05:51 - 00042434 _____ () C:\Windows\setupact.log
2015-02-19 18:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Globalization
2015-02-14 15:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-11 22:54 - 2015-01-12 14:29 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-11 22:54 - 2015-01-12 14:29 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-11 22:54 - 2009-07-14 05:45 - 00300384 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-11 22:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-11 22:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-02-11 22:53 - 2015-01-12 13:55 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 22:52 - 2015-01-12 13:55 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-08 11:53 - 2015-01-12 12:31 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-06 09:27 - 2015-01-12 17:13 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-06 09:27 - 2015-01-12 17:13 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-01 22:10 - 2015-01-12 13:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-02-01 22:07 - 2015-01-12 13:02 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-02-01 22:07 - 2015-01-12 13:02 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-02-01 22:07 - 2015-01-12 12:52 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-01-30 09:37 - 2015-01-12 17:19 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-01-30 08:38 - 2015-01-12 12:24 - 00000000 ____D () C:\Users\GAMING\AppData\Local\VirtualStore
2015-01-29 21:29 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-01-29 20:29 - 2015-01-12 17:12 - 00000000 ____D () C:\Users\GAMING\AppData\Local\Adobe
2015-01-29 18:58 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2015-01-29 18:52 - 2015-01-12 14:31 - 00000000 ____D () C:\Users\GAMING\AppData\Roaming\Adobe
2015-01-26 19:36 - 2015-01-12 12:40 - 00066472 _____ () C:\Users\GAMING\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-25 19:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-20 10:20 - 2015-01-12 12:30 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
==================== Files in the root of some directories =======
2015-02-08 11:52 - 2015-02-08 11:52 - 0000268 ___RH () C:\Users\GAMING\AppData\Roaming\Caches
2015-02-08 11:52 - 2015-02-08 11:52 - 0000268 ___RH () C:\Users\GAMING\AppData\Roaming\CIOSupport
2015-02-08 11:52 - 2015-02-08 11:52 - 0000268 ___RH () C:\Users\GAMING\AppData\Roaming\CMMs
2015-01-23 10:44 - 2015-01-23 10:44 - 0007597 _____ () C:\Users\GAMING\AppData\Local\Resmon.ResmonCfg
2015-02-08 11:52 - 2015-02-08 11:52 - 0000268 ___RH () C:\ProgramData\Carbon
2015-02-08 11:52 - 2015-02-08 11:52 - 0000268 ___RH () C:\ProgramData\Channel
2015-02-08 11:52 - 2015-02-08 11:52 - 0000268 ___RH () C:\ProgramData\Chiller
2015-02-08 11:52 - 2015-02-08 11:52 - 0000012 ___RH () C:\ProgramData\Command Line Utility
2015-02-08 11:52 - 2015-02-08 11:52 - 0000012 ___RH () C:\ProgramData\Common
2015-02-08 11:52 - 2015-02-08 11:52 - 0000012 ___RH () C:\ProgramData\Compressor
2015-02-08 11:52 - 2015-02-08 11:52 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2015-02-08 11:52 - 2015-02-08 11:53 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2015-02-08 11:52 - 2015-02-08 11:52 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT
Some content of TEMP:
====================
C:\Users\GAMING\AppData\Local\Temp\avgnt.exe
C:\Users\GAMING\AppData\Local\Temp\devcon64.exe
C:\Users\GAMING\AppData\Local\Temp\ubi6D74.tmp.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-14 14:58
==================== End Of Log ============================
--- --- --- --- --- --- Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-02-2015 01
Ran by GAMING at 2015-02-19 21:06:36
Running from D:\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{EE6097DD-05F4-4178-9719-D3170BF098E8}) (Version: 1.4.1 - Apple Inc.)
Avira (HKLM-x32\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.05 - Ubisoft)
Flight Simulator X (HKLM-x32\...\RTMshadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: - )
Flight Simulator X Service Pack 1 (HKLM-x32\...\SP1shadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: - )
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
LG CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.2.4009 - CyberLink Corp.)
LG CyberLink Power2Go (x32 Version: 6.2.4009 - CyberLink Corp.) Hidden
LG Power Tools (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.3316 - CyberLink Corp.)
LG Power Tools (x32 Version: 6.0.3316 - CyberLink Corp.) Hidden
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Flight Simulator X: Acceleration (HKLM-x32\...\FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: 10.0.61637.0 - Microsoft Game Studios)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
NETGEAR A6100 Genie (HKLM-x32\...\InstallShield_{15D27BA3-6CCD-4848-8925-07EF083492AD}) (Version: 1.0.0.12 - NETGEAR)
NETGEAR A6100 Genie (x32 Version: 1.0.0.12 - NETGEAR) Hidden
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.0.1 - Nikon)
NVIDIA 3D Vision Controller-Treiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 320.49 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 8.5.0.4518 - Electronic Arts, Inc.)
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.2 - Nikon)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.30.1003 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer E220x Drivers (Version: 1.0.30.1003 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{DD21E907-9A2A-44B8-A12E-13691E166664}) (Version: 1.0.30.1003 - Qualcomm Atheros)
Qualcomm Atheros Network Manager (Version: 1.0.30.1003 - Qualcomm Atheros) Hidden
QuickTime (HKLM-x32\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7069 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
Sound Blaster Cinema (HKLM-x32\...\{8801CA65-921A-4CCC-9D63-879D1D0BAA97}) (Version: 1.00.05 - Creative Technology Limited)
Startfenster (HKLM-x32\...\Startfenster) (Version: - Startfenster)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.7 - MSI)
ViewNX 2 (HKLM-x32\...\{DDD62492-32A7-412B-8AF1-2CF032AD42E3}) (Version: 2.1.2 - Nikon)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
26-01-2015 09:14:18 Installiert Microsoft Flight Simulator X
29-01-2015 18:53:45 Installiert NETGEAR A6100 Genie
29-01-2015 19:05:57 Windows Update
29-01-2015 20:11:48 Microsoft Flight Simulator X: Acceleration wird installiert
29-01-2015 21:29:13 DirectX wurde installiert
30-01-2015 00:16:52 Windows Update
01-02-2015 19:19:14 Windows Update
01-02-2015 22:07:05 Windows Update
08-02-2015 11:51:41 Installiert "ViewNX 2"
11-02-2015 22:51:46 Windows Update
12-02-2015 22:48:07 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {22735643-A798-4078-8C7F-5FA33E067B0A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {94937501-5EFF-4B8F-8DFE-BA2141153271} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: {ECCE6441-C918-4FEC-83B9-B42BCED5C218} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3600593988-3379056849-236234246-1000
Task: {FD3A2277-23E9-4D9B-A2CA-A31E334ED458} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) ==============
2015-01-12 13:02 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-22 19:48 - 2015-01-30 08:54 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-01-12 12:35 - 2012-11-01 11:23 - 00089600 _____ () C:\Windows\SYSTEM32\CmdRtr64.DLL
2015-01-12 12:35 - 2012-11-01 11:21 - 00325120 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2013-07-17 11:57 - 2013-07-17 11:57 - 00094208 _____ () C:\Program Files (x86)\NETGEAR\A6100\Realtek.dll
2012-11-06 09:47 - 2012-11-06 09:47 - 00114688 _____ () C:\Program Files (x86)\NETGEAR\A6100\EnumDevLib.dll
2015-01-12 12:34 - 2012-10-31 15:00 - 00991232 ____N () C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\de-DE\SBCinema.resources.dll
2009-12-15 13:46 - 2009-12-15 13:46 - 00619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-12-15 13:49 - 2009-12-15 13:49 - 00013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2015-01-29 19:04 - 2015-01-23 11:37 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2015-02-06 09:27 - 2015-02-06 09:27 - 16852144 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3600593988-3379056849-236234246-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\GAMING\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-3600593988-3379056849-236234246-500 - Administrator - Disabled)
GAMING (S-1-5-21-3600593988-3379056849-236234246-1000 - Administrator - Enabled) => C:\Users\GAMING
Gast (S-1-5-21-3600593988-3379056849-236234246-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3600593988-3379056849-236234246-1003 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/19/2015 06:38:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/19/2015 05:14:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/19/2015 01:40:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/18/2015 02:59:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/18/2015 00:57:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/17/2015 07:10:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/17/2015 06:12:35 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/17/2015 03:03:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/16/2015 05:27:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000018e5d
ID des fehlerhaften Prozesses: 0xc8c
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (02/16/2015 05:06:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000018e5d
ID des fehlerhaften Prozesses: 0x1110
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
System errors:
=============
Error: (02/19/2015 06:36:51 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (02/19/2015 05:12:19 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (02/19/2015 01:38:27 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (02/18/2015 02:57:42 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (02/18/2015 00:55:22 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (02/17/2015 07:08:11 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (02/17/2015 06:10:44 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (02/17/2015 03:01:34 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (02/16/2015 10:27:47 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (02/16/2015 09:15:00 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Microsoft Office Sessions:
=========================
Error: (02/19/2015 06:38:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/19/2015 05:14:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/19/2015 01:40:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/18/2015 02:59:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/18/2015 00:57:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/17/2015 07:10:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/17/2015 06:12:35 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/17/2015 03:03:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/16/2015 05:27:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.18247521eaf24c00000050000000000018e5dc8c01d04a028e05d5faC:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dllb3473e79-b5f8-11e4-9269-448a5b62542a
Error: (02/16/2015 05:06:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.18247521eaf24c00000050000000000018e5d111001d049ff6e3add6fC:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dllc575f942-b5f5-11e4-9269-448a5b62542a
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Percentage of memory in use: 14%
Total physical RAM: 32711.93 MB
Available physical RAM: 27993.04 MB
Total Pagefile: 65422.05 MB
Available Pagefile: 60357.63 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (SSD) (Fixed) (Total:232.79 GB) (Free:95.42 GB) NTFS
Drive d: (HDD) (Fixed) (Total:465.76 GB) (Free:282.38 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: A56E7CB0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 5DB1F13F)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
20.02.2015, 10:41
| #4 | |
| /// the machine /// TB-Ausbilder | TR/Crypt.XPACK.Gen7 und Malewarebites MeldungenZitat:
Dateien online auf Viren prüfen ? so geht?s | Anleitungen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
20.02.2015, 13:14
| #5 |
| | TR/Crypt.XPACK.Gen7 und Malewarebites Meldungen Hier der Link. Code:
ATTFilter https://www.virustotal.com/de/file/1ac41c7dd1f0d11b424efd22b8aeb5d5b56d38db6788100f8a8ae548b0bfa732/analysis/
|
|
20.02.2015, 19:42
| #6 |
| /// the machine /// TB-Ausbilder | TR/Crypt.XPACK.Gen7 und Malewarebites Meldungen Jup. Alles Fehlalarme 
__________________ --> TR/Crypt.XPACK.Gen7 und Malewarebites Meldungen |
|
20.02.2015, 20:06
| #7 |
| | TR/Crypt.XPACK.Gen7 und Malewarebites Meldungen Da bin ich ja beruhigt. Kann ich die Meldungen denn irgendwie abschalten und was ist mit den Malewarebites Meldungen? |
|
21.02.2015, 13:28
| #8 |
| /// the machine /// TB-Ausbilder | TR/Crypt.XPACK.Gen7 und Malewarebites Meldungen Die Battlelog Dateien kannste auch mal bei Virustotal scannen. Avira musste die Funde einschicken damit die die Erkennung raus nehmen können.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
21.02.2015, 13:56
| #9 |
| | TR/Crypt.XPACK.Gen7 und Malewarebites Meldungen Hab ich gemacht, mit dem Ergebnis das alles in Ordnung ist. Dann kann das Thema ja beendet werden, ich danke dir für deine Hilfe und Zeit. Gruß Connors |
|
21.02.2015, 14:31
| #10 |
| /// the machine /// TB-Ausbilder | TR/Crypt.XPACK.Gen7 und Malewarebites Meldungen Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu TR/Crypt.XPACK.Gen7 und Malewarebites Meldungen |
| backdoor.bot.ed, csrss.exe, detected, explorer.exe, fehlercode 0xc0000005, fehlercode 126, fehlercode windows, helper.exe, lsass.exe, malwarebytes, programm, prozesse, rundll32.exe, services.exe, svchost.exe, tr/crypt.xpack.gen, tr/crypt.xpack.gen7, trojaner, winlogon.exe |
Linear-Darstellung
