| |
| |||||||
Log-Analyse und Auswertung: PC friert beim zocken und im windows einWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
19.12.2010, 22:53
| #1 |
| |  PC friert beim zocken und im windows ein Hi habe seit 2 Jahren probleme mit meinem PC, er friert immer wieder ein. Hab mich schon durch alle möglichen Foren gelesen und mein problem im Chip Forum gepostet doch da konnte mir keiner helfen. Hardware wurde schon komplett ausgetauscht.Festplatte is koplett neu hatte vorher xp jetzt win 7 das ich noch aktiviren muss. Die Graka ist auch neu gerade mal ne woche alt. Mainboard wurde auch getauscht, genauso wie die Arbeitspeicher 3 mal. Netzteil wurde auch getauscht aber nach dem der Fehler wieder aufgetreten ist, hab ich das alte wieder eingebaut. Das einzigste was nicht getauscht wurde is der chipsatz auf dem Mainboard(quadcore). Ich hoffe ich habe alle Regeln richtig befolgt und ihr könnt mir weiterhelfen. Extras.Txt Hier die LogfilesOTL Logfile: Code:
ATTFilter OTL Extras logfile created on: 19.12.2010 22:12:08 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\***\Downloads
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 71,00% Memory free
8,00 Gb Paging File | 7,00 Gb Available in Paging File | 83,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97,56 Gb Total Space | 70,72 Gb Free Space | 72,49% Space Free | Partition Type: NTFS
Drive D: | 368,10 Gb Total Space | 307,40 Gb Free Space | 83,51% Space Free | Partition Type: NTFS
Drive E: | 3,74 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Computer Name: CYRAX-PC | User Name: Cyrax | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{C0698BDA-0D29-40EE-8570-A31106DF9AB1}" = Medieval II Total War
"{ECCA8FE7-767A-4C8A-9DAA-BAB60F877C41}" = Sins of a Solar Empire
"{F2C4E6E0-EB78-4824-A212-6DF6AF0E8E82}" = FINAL FANTASY XIV
"7-Zip" = 7-Zip 4.65
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"Sins of a Solar Empire" = Sins of a Solar Empire
"StarCraft II" = StarCraft II
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"X3-Reunion2.0.02DE_is1" = X3: Reunion v2.0.02
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 17.12.2010 12:02:08 | Computer Name = Cyrax-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: ffxivgame.exe, Version: 1.0.0.0,
Zeitstempel: 0x4d050815 Name des fehlerhaften Moduls: ffxivgame.exe, Version: 1.0.0.0,
Zeitstempel: 0x4d050815 Ausnahmecode: 0xc0000005 Fehleroffset: 0x007175ed ID des fehlerhaften
Prozesses: 0x2e4 Startzeit der fehlerhaften Anwendung: 0x01cb9dfacc59d988 Pfad der
fehlerhaften Anwendung: D:\Games\SquareEnix\FINAL FANTASY XIV\ffxivgame.exe Pfad
des fehlerhaften Moduls: D:\Games\SquareEnix\FINAL FANTASY XIV\ffxivgame.exe Berichtskennung:
ffa3cec9-09f6-11e0-854d-90e6ba3c9a3c
Error - 17.12.2010 15:41:30 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 8200
Description = Lizenzerwerb-Fehlerdetails. hr=0xC004C003
Error - 17.12.2010 15:41:30 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 1012
Description = Fehler beim Erwerb des Produktzertifikats. hr=0xC004C003 SKU-ID=a0cde89c-3304-4157-b61c-c8ad785d1fad
Error - 17.12.2010 19:41:39 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 8200
Description = Lizenzerwerb-Fehlerdetails. hr=0xC004C003
Error - 17.12.2010 19:41:39 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 1012
Description = Fehler beim Erwerb des Produktzertifikats. hr=0xC004C003 SKU-ID=a0cde89c-3304-4157-b61c-c8ad785d1fad
Error - 19.12.2010 11:27:23 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 8200
Description = Lizenzerwerb-Fehlerdetails. hr=0xC004C003
Error - 19.12.2010 11:27:23 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 1012
Description = Fehler beim Erwerb des Produktzertifikats. hr=0xC004C003 SKU-ID=a0cde89c-3304-4157-b61c-c8ad785d1fad
Error - 19.12.2010 15:27:29 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 8200
Description = Lizenzerwerb-Fehlerdetails. hr=0xC004C003
Error - 19.12.2010 15:27:29 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 1012
Description = Fehler beim Erwerb des Produktzertifikats. hr=0xC004C003 SKU-ID=a0cde89c-3304-4157-b61c-c8ad785d1fad
Error - 19.12.2010 16:59:55 | Computer Name = Cyrax-PC | Source = Application Hang | ID = 1002
Description = Programm Load.exe, Version 3.3.6.1 kann nicht mehr unter Windows ausgeführt
werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 11e8 Startzeit:
01cb9fbf89a3e1b6 Endzeit: 2 Anwendungspfad: C:\Users\Cyrax\Downloads\Load.exe Berichts-ID:
e86a2cf3-0bb2-11e0-a346-90e6ba3c9a3c
[ System Events ]
Error - 08.12.2010 18:23:33 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?08.?12.?2010 um 23:22:42 unerwartet heruntergefahren.
Error - 09.12.2010 14:36:59 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?09.?12.?2010 um 19:34:54 unerwartet heruntergefahren.
Error - 10.12.2010 15:24:49 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?10.?12.?2010 um 20:23:16 unerwartet heruntergefahren.
Error - 11.12.2010 00:32:52 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?11.?12.?2010 um 02:40:35 unerwartet heruntergefahren.
Error - 16.12.2010 02:04:31 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?15.?12.?2010 um 23:57:07 unerwartet heruntergefahren.
Error - 17.12.2010 20:06:52 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?18.?12.?2010 um 01:05:42 unerwartet heruntergefahren.
Error - 18.12.2010 02:32:54 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?18.?12.?2010 um 03:40:45 unerwartet heruntergefahren.
Error - 19.12.2010 16:01:53 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?19.?12.?2010 um 20:50:36 unerwartet heruntergefahren.
Error - 19.12.2010 16:21:17 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?19.?12.?2010 um 21:19:48 unerwartet heruntergefahren.
Error - 19.12.2010 16:42:50 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?19.?12.?2010 um 21:41:12 unerwartet heruntergefahren.
< End of report >
========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 ========== Authorized Applications List ========== ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "NVIDIA Display Control Panel" = NVIDIA Display Control Panel "NVIDIA Drivers" = NVIDIA Drivers [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011 "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{C0698BDA-0D29-40EE-8570-A31106DF9AB1}" = Medieval II Total War "{ECCA8FE7-767A-4C8A-9DAA-BAB60F877C41}" = Sins of a Solar Empire "{F2C4E6E0-EB78-4824-A212-6DF6AF0E8E82}" = FINAL FANTASY XIV "7-Zip" = 7-Zip 4.65 "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011 "Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13) "Sins of a Solar Empire" = Sins of a Solar Empire "StarCraft II" = StarCraft II "TeamSpeak 3 Client" = TeamSpeak 3 Client "X3-Reunion2.0.02DE_is1" = X3: Reunion v2.0.02 ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 17.12.2010 12:02:08 | Computer Name = Cyrax-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: ffxivgame.exe, Version: 1.0.0.0, Zeitstempel: 0x4d050815 Name des fehlerhaften Moduls: ffxivgame.exe, Version: 1.0.0.0, Zeitstempel: 0x4d050815 Ausnahmecode: 0xc0000005 Fehleroffset: 0x007175ed ID des fehlerhaften Prozesses: 0x2e4 Startzeit der fehlerhaften Anwendung: 0x01cb9dfacc59d988 Pfad der fehlerhaften Anwendung: D:\Games\SquareEnix\FINAL FANTASY XIV\ffxivgame.exe Pfad des fehlerhaften Moduls: D:\Games\SquareEnix\FINAL FANTASY XIV\ffxivgame.exe Berichtskennung: ffa3cec9-09f6-11e0-854d-90e6ba3c9a3c Error - 17.12.2010 15:41:30 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 8200 Description = Lizenzerwerb-Fehlerdetails. hr=0xC004C003 Error - 17.12.2010 15:41:30 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 1012 Description = Fehler beim Erwerb des Produktzertifikats. hr=0xC004C003 SKU-ID=a0cde89c-3304-4157-b61c-c8ad785d1fad Error - 17.12.2010 19:41:39 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 8200 Description = Lizenzerwerb-Fehlerdetails. hr=0xC004C003 Error - 17.12.2010 19:41:39 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 1012 Description = Fehler beim Erwerb des Produktzertifikats. hr=0xC004C003 SKU-ID=a0cde89c-3304-4157-b61c-c8ad785d1fad Error - 19.12.2010 11:27:23 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 8200 Description = Lizenzerwerb-Fehlerdetails. hr=0xC004C003 Error - 19.12.2010 11:27:23 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 1012 Description = Fehler beim Erwerb des Produktzertifikats. hr=0xC004C003 SKU-ID=a0cde89c-3304-4157-b61c-c8ad785d1fad Error - 19.12.2010 15:27:29 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 8200 Description = Lizenzerwerb-Fehlerdetails. hr=0xC004C003 Error - 19.12.2010 15:27:29 | Computer Name = Cyrax-PC | Source = Software Protection Platform Service | ID = 1012 Description = Fehler beim Erwerb des Produktzertifikats. hr=0xC004C003 SKU-ID=a0cde89c-3304-4157-b61c-c8ad785d1fad Error - 19.12.2010 16:59:55 | Computer Name = Cyrax-PC | Source = Application Hang | ID = 1002 Description = Programm Load.exe, Version 3.3.6.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 11e8 Startzeit: 01cb9fbf89a3e1b6 Endzeit: 2 Anwendungspfad: C:\Users\Cyrax\Downloads\Load.exe Berichts-ID: e86a2cf3-0bb2-11e0-a346-90e6ba3c9a3c [ System Events ] Error - 08.12.2010 18:23:33 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am ?08.?12.?2010 um 23:22:42 unerwartet heruntergefahren. Error - 09.12.2010 14:36:59 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am ?09.?12.?2010 um 19:34:54 unerwartet heruntergefahren. Error - 10.12.2010 15:24:49 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am ?10.?12.?2010 um 20:23:16 unerwartet heruntergefahren. Error - 11.12.2010 00:32:52 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am ?11.?12.?2010 um 02:40:35 unerwartet heruntergefahren. Error - 16.12.2010 02:04:31 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am ?15.?12.?2010 um 23:57:07 unerwartet heruntergefahren. Error - 17.12.2010 20:06:52 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am ?18.?12.?2010 um 01:05:42 unerwartet heruntergefahren. Error - 18.12.2010 02:32:54 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am ?18.?12.?2010 um 03:40:45 unerwartet heruntergefahren. Error - 19.12.2010 16:01:53 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am ?19.?12.?2010 um 20:50:36 unerwartet heruntergefahren. Error - 19.12.2010 16:21:17 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am ?19.?12.?2010 um 21:19:48 unerwartet heruntergefahren. Error - 19.12.2010 16:42:50 | Computer Name = Cyrax-PC | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am ?19.?12.?2010 um 21:41:12 unerwartet heruntergefahren. < End of report > OTL.TxtOTL Logfile: Code:
ATTFilter OTL logfile created on: 19.12.2010 22:12:08 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\***\Downloads 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 71,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 97,56 Gb Total Space | 70,72 Gb Free Space | 72,49% Space Free | Partition Type: NTFS Drive D: | 368,10 Gb Total Space | 307,40 Gb Free Space | 83,51% Space Free | Partition Type: NTFS Drive E: | 3,74 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: CYRAX-PC | User Name: Cyrax | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Cyrax\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (Mozilla Corporation) PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) PRC - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO) PRC - C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe (TeamSpeak Systems GmbH) ========== Modules (SafeList) ========== MOD - C:\Users\Cyrax\Downloads\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SRV - (AVP) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (WinHttpAutoProxySvc) -- winhttp.dll (Microsoft Corporation) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (KLIF) -- C:\Windows\SysNative\drivers\klif.sys (Kaspersky Lab) DRV:64bit: - (kl2) -- C:\Windows\SysNative\drivers\kl2.sys (Kaspersky Lab ZAO) DRV:64bit: - (KL1) -- C:\Windows\SysNative\drivers\kl1.sys (Kaspersky Lab ZAO) DRV:64bit: - (KLIM6) -- C:\Windows\SysNative\drivers\klim6.sys (Kaspersky Lab ZAO) DRV:64bit: - (klmouflt) -- C:\Windows\SysNative\drivers\klmouflt.sys (Kaspersky Lab) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof () DRV:64bit: - (yukonw7) -- C:\Windows\SysNative\drivers\yk62x64.sys (Marvell) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:64bit: - (MTsensor) -- C:\Windows\SysNative\drivers\ASACPI.sys () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BC 2A D4 2D B7 94 CB 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:11.0.1.400 FF - prefs.js..network.proxy.type: 0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.12.12 03:46:43 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.12.12 03:46:43 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\THBExt [2010.12.05 19:25:20 | 000,000,000 | ---D | M] [2010.12.06 19:43:55 | 000,000,000 | ---D | M] -- C:\Users\Cyrax\AppData\Roaming\mozilla\Extensions [2010.12.06 19:43:55 | 000,000,000 | ---D | M] -- C:\Users\Cyrax\AppData\Roaming\mozilla\Firefox\Profiles\n1v4g1x4.default\extensions [2010.12.09 18:45:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2010.12.06 21:22:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions\KavAntiBanner@Kaspersky.ru [2010.12.06 21:22:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru [2010.10.27 06:44:13 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2010.10.27 06:44:13 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2010.10.27 06:44:13 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2010.10.27 06:44:13 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2010.10.27 06:44:13 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\ievkbd.dll (Kaspersky Lab ZAO) O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.5.5126.1836\swg64.dll (Google Inc.) O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.) O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO) O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO) O4 - HKCU..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.) O8:64bit: - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm () O8 - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.) O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm () O9:64bit: - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO) O9:64bit: - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll (Kaspersky Lab ZAO) O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll (Kaspersky Lab ZAO) O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll (Kaspersky Lab ZAO) O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll (Kaspersky Lab ZAO) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\klogon: DllName - Reg Error: Key error. - C:\Windows\SysNative\klogon.dll (Kaspersky Lab ZAO) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O29:64bit: - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.10.06 08:04:29 | 000,000,044 | R--- | M] () - E:\Autorun.inf -- [ UDF ] O33 - MountPoints2\{0184ceb4-0093-11e0-addd-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{0184ceb4-0093-11e0-addd-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Launch.exe -- [2006.10.06 08:04:29 | 000,126,976 | R--- | M] (Macrovision Corporation) O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.12.19 22:03:48 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Roaming\Malwarebytes [2010.12.19 22:02:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.12.19 22:02:54 | 000,024,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010.12.19 22:02:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip [2010.12.19 21:58:58 | 000,000,000 | ---D | C] -- C:\Users\Public\Desktop\MFtools [2010.12.19 21:04:09 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Roaming\InstallShield [2010.12.19 21:04:08 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallShield [2010.12.15 19:11:03 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll [2010.12.15 19:11:02 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll [2010.12.15 19:11:02 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll [2010.12.15 19:11:02 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll [2010.12.15 19:11:02 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe [2010.12.15 19:11:02 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll [2010.12.15 19:11:02 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe [2010.12.15 19:11:02 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe [2010.12.15 19:10:55 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2010.12.15 19:10:55 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2010.12.15 19:10:55 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2010.12.15 19:10:55 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2010.12.15 19:10:47 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll [2010.12.15 19:10:46 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll [2010.12.15 19:10:46 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe [2010.12.15 19:10:42 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2010.12.15 19:10:42 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2010.12.15 19:10:42 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2010.12.15 19:10:42 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2010.12.15 19:10:42 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2010.12.15 19:10:42 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2010.12.15 19:10:42 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2010.12.15 19:10:42 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2010.12.15 19:10:42 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2010.12.15 19:10:42 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2010.12.15 19:10:42 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2010.12.15 19:10:42 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2010.12.15 19:10:42 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2010.12.15 19:10:42 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2010.12.10 16:16:33 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA [2010.12.10 16:00:43 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation [2010.12.10 16:00:40 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation [2010.12.09 19:22:11 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat [2010.12.09 19:22:10 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat [2010.12.09 18:35:24 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\Documents\StarCraft II [2010.12.09 18:35:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2010.12.09 18:35:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment [2010.12.07 22:39:29 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Local\ElevatedDiagnostics [2010.12.07 18:35:29 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Local\Ironclad Games [2010.12.07 18:35:15 | 000,000,000 | -H-D | C] -- C:\ProgramData\{A4B500C8-F3EB-4AD9-9762-515CCA35FD16} [2010.12.07 18:31:28 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Local\Stardock [2010.12.06 19:43:44 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Roaming\Mozilla [2010.12.06 19:43:44 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Local\Mozilla [2010.12.06 19:43:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2010.12.06 19:01:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2010.12.06 18:58:59 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2010.12.06 18:58:59 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2010.12.06 18:58:59 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe [2010.12.06 18:58:59 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe [2010.12.06 18:58:59 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll [2010.12.06 18:58:59 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll [2010.12.06 18:58:59 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll [2010.12.06 18:58:59 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll [2010.12.06 18:58:41 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe [2010.12.06 18:12:47 | 001,736,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2010.12.06 18:12:41 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2010.12.06 18:12:39 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2010.12.06 18:12:39 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2010.12.06 18:12:33 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll [2010.12.06 18:12:26 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll [2010.12.06 18:12:23 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll [2010.12.06 18:12:23 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll [2010.12.06 18:11:58 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll [2010.12.06 18:11:58 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll [2010.12.06 18:11:58 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll [2010.12.06 18:11:58 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll [2010.12.06 18:11:58 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe [2010.12.06 18:11:58 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe [2010.12.06 18:11:58 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe [2010.12.06 18:11:58 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe [2010.12.06 18:11:58 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe [2010.12.06 18:11:58 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe [2010.12.06 18:11:58 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe [2010.12.06 18:11:58 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe [2010.12.06 18:11:58 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll [2010.12.06 18:11:58 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll [2010.12.06 18:11:58 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll [2010.12.06 18:11:58 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll [2010.12.06 18:11:22 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll [2010.12.06 18:11:22 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll [2010.12.06 18:11:22 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll [2010.12.06 18:11:22 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2010.12.06 18:11:22 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll [2010.12.06 18:11:22 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax [2010.12.06 18:11:22 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax [2010.12.06 18:11:22 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax [2010.12.06 18:11:22 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax [2010.12.06 18:10:53 | 005,507,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2010.12.06 18:10:53 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2010.12.06 18:10:53 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2010.12.06 18:10:42 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll [2010.12.06 18:10:40 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2010.12.06 18:10:36 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2010.12.06 18:10:36 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2010.12.06 18:10:36 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2010.12.06 18:10:29 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2010.12.06 18:10:29 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2010.12.06 18:10:29 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2010.12.06 18:10:29 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2010.12.06 18:10:29 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2010.12.06 18:10:29 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2010.12.06 18:10:27 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll [2010.12.06 18:10:27 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll [2010.12.06 18:10:06 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll [2010.12.06 18:10:01 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2010.12.06 18:09:42 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll [2010.12.06 18:09:42 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll [2010.12.06 18:09:38 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2010.12.06 18:09:38 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2010.12.06 18:09:38 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll [2010.12.06 18:09:38 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll [2010.12.06 18:09:09 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys [2010.12.06 18:09:06 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2010.12.06 18:09:06 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2010.12.06 18:09:01 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2010.12.06 18:08:42 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll [2010.12.06 18:08:42 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll [2010.12.06 18:08:33 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll [2010.12.06 18:08:31 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2010.12.06 18:08:31 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2010.12.06 18:08:13 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2010.12.06 18:08:12 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2010.12.06 18:08:12 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2010.12.06 18:08:11 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2010.12.06 18:08:04 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll [2010.12.06 00:37:32 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\Documents\My Games [2010.12.05 23:55:00 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll [2010.12.05 23:55:00 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll [2010.12.05 23:55:00 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll [2010.12.05 23:55:00 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll [2010.12.05 23:55:00 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll [2010.12.05 23:55:00 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll [2010.12.05 23:54:59 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll [2010.12.05 23:54:59 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll [2010.12.05 23:54:59 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll [2010.12.05 23:54:59 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll [2010.12.05 23:54:59 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll [2010.12.05 23:54:59 | 000,069,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll [2010.12.05 23:54:58 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll [2010.12.05 23:54:58 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll [2010.12.05 23:54:58 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll [2010.12.05 23:54:58 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll [2010.12.05 23:54:58 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll [2010.12.05 23:54:58 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll [2010.12.05 23:54:57 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll [2010.12.05 23:54:57 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll [2010.12.05 23:54:57 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll [2010.12.05 23:54:57 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll [2010.12.05 23:54:57 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll [2010.12.05 23:54:57 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll [2010.12.05 23:54:57 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll [2010.12.05 23:54:57 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll [2010.12.05 23:54:56 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll [2010.12.05 23:54:56 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll [2010.12.05 23:54:56 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll [2010.12.05 23:54:56 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll [2010.12.05 23:54:56 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll [2010.12.05 23:54:56 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll [2010.12.05 23:54:56 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll [2010.12.05 23:54:56 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll [2010.12.05 23:54:55 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll [2010.12.05 23:54:55 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll [2010.12.05 23:54:55 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll [2010.12.05 23:54:55 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll [2010.12.05 23:54:55 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll [2010.12.05 23:54:55 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll [2010.12.05 23:54:55 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll [2010.12.05 23:54:55 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll [2010.12.05 23:54:55 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll [2010.12.05 23:54:55 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll [2010.12.05 23:54:54 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll [2010.12.05 23:54:54 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll [2010.12.05 23:54:53 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll [2010.12.05 23:54:53 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll [2010.12.05 23:54:53 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll [2010.12.05 23:54:53 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll [2010.12.05 23:54:53 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll [2010.12.05 23:54:53 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll [2010.12.05 23:54:53 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll [2010.12.05 23:54:53 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll [2010.12.05 23:54:52 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll [2010.12.05 23:54:52 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll [2010.12.05 23:54:52 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll [2010.12.05 23:54:52 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll [2010.12.05 23:54:52 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll [2010.12.05 23:54:52 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll [2010.12.05 23:54:52 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll [2010.12.05 23:54:52 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll [2010.12.05 23:54:52 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll [2010.12.05 23:54:52 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll [2010.12.05 23:54:51 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll [2010.12.05 23:54:51 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll [2010.12.05 23:54:51 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll [2010.12.05 23:54:51 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll [2010.12.05 23:54:50 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll [2010.12.05 23:54:50 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll [2010.12.05 23:54:50 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll [2010.12.05 23:54:50 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll [2010.12.05 23:54:50 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll [2010.12.05 23:54:50 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll [2010.12.05 23:54:50 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll [2010.12.05 23:54:50 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll [2010.12.05 23:54:49 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll [2010.12.05 23:54:49 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll [2010.12.05 23:54:49 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll [2010.12.05 23:54:49 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll [2010.12.05 23:54:49 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll [2010.12.05 23:54:49 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll [2010.12.05 23:54:49 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll [2010.12.05 23:54:49 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll [2010.12.05 23:54:49 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll [2010.12.05 23:54:49 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll [2010.12.05 23:54:48 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll [2010.12.05 23:54:48 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll [2010.12.05 23:54:48 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll [2010.12.05 23:54:48 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll [2010.12.05 23:54:48 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll [2010.12.05 23:54:48 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll [2010.12.05 23:54:48 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll [2010.12.05 23:54:48 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll [2010.12.05 23:54:47 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll [2010.12.05 23:54:47 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll [2010.12.05 23:54:47 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll [2010.12.05 23:54:47 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll [2010.12.05 23:54:47 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll [2010.12.05 23:54:47 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll [2010.12.05 23:54:47 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll [2010.12.05 23:54:47 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll [2010.12.05 23:54:46 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll [2010.12.05 23:54:46 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll [2010.12.05 23:54:46 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll [2010.12.05 23:54:46 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll [2010.12.05 23:54:46 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll [2010.12.05 23:54:46 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll [2010.12.05 23:54:46 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll [2010.12.05 23:54:46 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll [2010.12.05 23:54:45 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll [2010.12.05 23:54:45 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll [2010.12.05 23:54:45 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll [2010.12.05 23:54:45 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll [2010.12.05 23:54:45 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll [2010.12.05 23:54:45 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll [2010.12.05 23:54:45 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll [2010.12.05 23:54:45 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll [2010.12.05 23:54:45 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll [2010.12.05 23:54:45 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll [2010.12.05 23:54:44 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll [2010.12.05 23:54:44 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll [2010.12.05 23:54:44 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll [2010.12.05 23:54:44 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll [2010.12.05 23:54:44 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll [2010.12.05 23:54:44 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll [2010.12.05 23:54:41 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll [2010.12.05 23:54:41 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll [2010.12.05 23:54:41 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll [2010.12.05 23:54:41 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll [2010.12.05 23:54:41 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll [2010.12.05 23:54:41 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll [2010.12.05 23:54:41 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll [2010.12.05 23:54:41 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll [2010.12.05 23:54:40 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll [2010.12.05 23:54:40 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll [2010.12.05 23:54:40 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll [2010.12.05 23:54:40 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll [2010.12.05 23:54:40 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll [2010.12.05 23:54:40 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll [2010.12.05 23:54:39 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll [2010.12.05 23:54:39 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll [2010.12.05 23:54:38 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll [2010.12.05 23:54:38 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll [2010.12.05 22:13:51 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2010.12.05 22:13:37 | 000,000,000 | ---D | C] -- C:\Programme\Google [2010.12.05 21:42:59 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\Documents\Egosoft [2010.12.05 20:33:36 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Roaming\Google [2010.12.05 20:23:18 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Roaming\Macromedia [2010.12.05 20:22:46 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Roaming\Adobe [2010.12.05 20:22:30 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Local\Google [2010.12.05 20:22:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Google [2010.12.05 20:22:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2010.12.05 20:13:37 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Local\Diagnostics [2010.12.05 19:41:16 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2010.12.05 19:25:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2010.12.05 19:25:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kaspersky Lab [2010.12.05 19:25:12 | 000,556,120 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys [2010.12.05 18:51:33 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Roaming\TS3Client [2010.12.05 18:29:37 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010.12.05 18:29:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamSpeak 3 Client [2010.12.05 18:23:50 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2010.12.05 18:23:50 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll [2010.12.05 18:23:50 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll [2010.12.05 18:23:50 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll [2010.12.05 18:23:36 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Local\MigWiz [2010.12.05 18:22:46 | 000,000,000 | R--D | C] -- C:\Users\Cyrax\Searches [2010.12.05 18:22:38 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Roaming\Identities [2010.12.05 18:22:36 | 000,000,000 | R--D | C] -- C:\Users\Cyrax\Contacts [2010.12.05 18:22:35 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Local\VirtualStore [2010.12.05 18:22:31 | 000,000,000 | --SD | C] -- C:\Users\Cyrax\AppData\Roaming\Microsoft [2010.12.05 18:22:31 | 000,000,000 | R--D | C] -- C:\Users\Cyrax\Videos [2010.12.05 18:22:31 | 000,000,000 | R--D | C] -- C:\Users\Cyrax\Saved Games [2010.12.05 18:22:31 | 000,000,000 | R--D | C] -- C:\Users\Cyrax\Pictures [2010.12.05 18:22:31 | 000,000,000 | R--D | C] -- C:\Users\Cyrax\Music [2010.12.05 18:22:31 | 000,000,000 | R--D | C] -- C:\Users\Cyrax\Links [2010.12.05 18:22:31 | 000,000,000 | R--D | C] -- C:\Users\Cyrax\Favorites [2010.12.05 18:22:31 | 000,000,000 | R--D | C] -- C:\Users\Cyrax\Downloads [2010.12.05 18:22:31 | 000,000,000 | R--D | C] -- C:\Users\Cyrax\Documents [2010.12.05 18:22:31 | 000,000,000 | R--D | C] -- C:\Users\Cyrax\Desktop [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Vorlagen [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\AppData\Local\Verlauf [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\AppData\Local\Temporary Internet Files [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Startmenü [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\SendTo [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Recent [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Netzwerkumgebung [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Lokale Einstellungen [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Documents\Eigene Videos [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Documents\Eigene Musik [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Eigene Dateien [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Documents\Eigene Bilder [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Druckumgebung [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Cookies [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\AppData\Local\Anwendungsdaten [2010.12.05 18:22:31 | 000,000,000 | -HSD | C] -- C:\Users\Cyrax\Anwendungsdaten [2010.12.05 18:22:31 | 000,000,000 | -H-D | C] -- C:\Users\Cyrax\AppData [2010.12.05 18:22:31 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Local\Temp [2010.12.05 18:22:31 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Local\Microsoft [2010.12.05 18:22:31 | 000,000,000 | ---D | C] -- C:\Users\Cyrax\AppData\Roaming\Media Center Programs [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\Recovery [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\Programme [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2010.12.05 18:22:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2010.12.05 18:16:38 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010.12.05 18:14:05 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010.12.05 18:13:46 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010.12.05 18:12:59 | 000,000,000 | ---D | C] -- C:\Windows\Panther ========== Files - Modified Within 30 Days ========== [2010.12.19 22:03:41 | 000,000,224 | -HS- | M] () -- C:\Windows\KLIF.spi [2010.12.19 21:48:49 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.12.19 21:48:49 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010.12.19 21:48:49 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.12.19 21:48:49 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010.12.19 21:48:49 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.12.19 21:43:13 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010.12.19 21:42:49 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.12.19 21:42:46 | 3220,480,000 | -HS- | M] () -- C:\hiberfil.sys [2010.12.19 21:23:01 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010.12.19 21:19:32 | 000,000,574 | ---- | M] () -- C:\Users\Public\Desktop\Medieval II Total War.lnk [2010.12.19 20:41:55 | 000,013,984 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010.12.19 20:41:55 | 000,013,984 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010.12.16 07:24:33 | 000,274,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010.12.10 21:05:32 | 000,000,017 | ---- | M] () -- C:\Users\Cyrax\AppData\Local\resmon.resmoncfg [2010.12.09 18:56:49 | 000,000,714 | ---- | M] () -- C:\Users\Public\Desktop\StarCraft II.lnk [2010.12.08 18:48:11 | 000,150,083 | ---- | M] () -- C:\Windows\SysNative\drivers\klin.dat [2010.12.08 18:48:11 | 000,107,075 | ---- | M] () -- C:\Windows\SysNative\drivers\klick.dat [2010.12.06 19:43:42 | 000,001,943 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010.12.06 19:40:17 | 000,001,754 | ---- | M] () -- C:\Users\Public\Desktop\Browserwahl.lnk [2010.12.06 00:36:47 | 000,000,837 | ---- | M] () -- C:\Users\Public\Desktop\FINAL FANTASY XIV.lnk [2010.12.05 22:34:43 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010.12.05 21:51:22 | 000,000,578 | ---- | M] () -- C:\Users\Cyrax\Desktop\X3 Reunion spielen.lnk [2010.12.05 21:40:16 | 000,035,140 | ---- | M] () -- C:\Windows\unins000.dat [2010.12.05 21:34:40 | 000,681,980 | ---- | M] () -- C:\Windows\unins000.exe [2010.12.05 20:54:12 | 000,556,120 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys [2010.12.05 18:29:36 | 000,001,166 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk [2010.12.05 18:26:58 | 000,000,355 | ---- | M] () -- C:\Users\Cyrax\Desktop\Computer - Verknüpfung.lnk [2010.12.05 18:17:12 | 000,057,050 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2010.12.05 18:17:12 | 000,057,050 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2010.11.29 17:42:06 | 000,024,152 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys ========== Files Created - No Company Name ========== [2010.12.19 22:03:41 | 000,000,224 | -HS- | C] () -- C:\Windows\KLIF.spi [2010.12.19 21:19:32 | 000,000,574 | ---- | C] () -- C:\Users\Public\Desktop\Medieval II Total War.lnk [2010.12.10 21:05:32 | 000,000,017 | ---- | C] () -- C:\Users\Cyrax\AppData\Local\resmon.resmoncfg [2010.12.09 18:35:24 | 000,000,714 | ---- | C] () -- C:\Users\Public\Desktop\StarCraft II.lnk [2010.12.06 19:43:42 | 000,001,943 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010.12.06 19:40:17 | 000,001,754 | ---- | C] () -- C:\Users\Public\Desktop\Browserwahl.lnk [2010.12.06 00:36:47 | 000,000,837 | ---- | C] () -- C:\Users\Public\Desktop\FINAL FANTASY XIV.lnk [2010.12.05 22:34:43 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010.12.05 22:13:43 | 000,001,106 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010.12.05 22:13:43 | 000,001,102 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010.12.05 21:40:15 | 000,000,578 | ---- | C] () -- C:\Users\Cyrax\Desktop\X3 Reunion spielen.lnk [2010.12.05 21:35:14 | 000,681,980 | ---- | C] () -- C:\Windows\unins000.exe [2010.12.05 21:35:14 | 000,035,140 | ---- | C] () -- C:\Windows\unins000.dat [2010.12.05 19:25:32 | 000,150,083 | ---- | C] () -- C:\Windows\SysNative\drivers\klin.dat [2010.12.05 19:25:32 | 000,107,075 | ---- | C] () -- C:\Windows\SysNative\drivers\klick.dat [2010.12.05 18:29:36 | 000,001,166 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk [2010.12.05 18:26:58 | 000,000,355 | ---- | C] () -- C:\Users\Cyrax\Desktop\Computer - Verknüpfung.lnk [2010.12.05 18:13:46 | 3220,480,000 | -HS- | C] () -- C:\hiberfil.sys [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll ========== LOP Check ========== [2010.12.08 19:58:35 | 000,000,000 | ---D | M] -- C:\Users\Cyrax\AppData\Roaming\TS3Client [2009.07.14 06:08:49 | 000,012,222 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > [2010.12.19 21:48:49 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.12.19 21:48:49 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010.12.19 21:48:49 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.12.19 21:48:49 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010.12.19 21:48:49 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.12.05 18:17:12 | 000,057,050 | ---- | M] () -- C:\Windows\SysNative\license.rtf ========== LOP Check ========== [2010.12.08 19:58:35 | 000,000,000 | ---D | M] -- C:\Users\Cyrax\AppData\Roaming\TS3Client [2009.07.14 06:08:49 | 000,012,222 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > mfg Cyrax |
|
| Themen zu PC friert beim zocken und im windows ein |
| 7-zip, absturz ohne grund, adobe, adobe flash player, autorun, avp.exe, bho, c:\windows\system32\rundll32.exe, error, explorer, fehler, firefox.exe, flash player, format, friert ein, google, ieframe.dll, install.exe, installation, langs, load.exe, location, media center, mozilla, neu, nvidia, oldtimer, otl.exe, programdata, programm, programme, registry, rundll, saver, scan, searchplugins, security, shell32.dll, shortcut, software, suche, syswow64, tastatur, teamspeak, webcheck, windows |
Linear-Darstellung
