Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2015 Ran by User (administrator) on USER-PC on 23-02-2015 10:34:01 Running from C:\Users\User\Desktop Loaded Profiles: User (Available profiles: User) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: Opera) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (SysTool PasSame LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe () C:\Program Files (x86)\D-Link\DWA-125 revA\ANIWConnService.exe () C:\Windows\DAODx.exe (XTab system) C:\Program Files (x86)\XTab\ProtectService.exe (SearchProtect) C:\Program Files (x86)\XTab\CmdShell.exe () C:\Program Files (x86)\WajNEnhance\WajNEnhance Internet Enhancer\InternetEnhancerService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files (x86)\WajNEnhance\WajNEnhance Internet Enhancer\InternetEnhancer.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe () C:\Windows\SysWOW64\PnkBstrA.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Guillemot Corporation S.A.) C:\Program Files (x86)\Hercules\Deluxe Optical Glass\XtrCtrl.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (XTab system) C:\Program Files (x86)\XTab\HPNotify.exe (D-Link Corp.) C:\Program Files (x86)\D-Link\DWA-125 revA\AirNCFG.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [613024 2010-09-27] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379040 2010-09-27] (Atheros Commnucations) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [CamserviceOG] => C:\Program Files (x86)\Hercules\Deluxe Optical Glass\XtrCtrl.exe [2999080 2009-10-19] (Guillemot Corporation S.A.) HKLM-x32\...\Run: [D-Link D-Link DWA-125] => C:\Program Files (x86)\D-Link\DWA-125 revA\AirNCFG.exe [1095984 2014-03-18] (D-Link Corp.) HKLM-x32\...\Run: [CamserviceOG] => C:\Program Files (x86)\Hercules\Deluxe Optical Glass\XtrCtrl.exe [2999080 2009-10-19] (Guillemot Corporation S.A.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31087200 2015-01-23] (Skype Technologies S.A.) HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd) HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\...\MountPoints2: {5a794e66-b41d-11e4-9f9a-d0509935d872} - I:\setup.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled. ProxyServer: [.DEFAULT] => http=127.0.0.1:49752;https=127.0.0.1:49752 ProxyEnable: [S-1-5-21-3928150652-2756980015-3035233101-1000] => Internet Explorer proxy is enabled. ProxyServer: [S-1-5-21-3928150652-2756980015-3035233101-1000] => http=127.0.0.1:49752;https=127.0.0.1:49752 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms} HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680 HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680 SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3928150652-2756980015-3035233101-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&ts=1423906963&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3928150652-2756980015-3035233101-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&ts=1423906963&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3928150652-2756980015-3035233101-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&ts=1423906963&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3928150652-2756980015-3035233101-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&ts=1423906963&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3928150652-2756980015-3035233101-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&ts=1423906963&type=default&q={searchTerms} BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll (Thinknice Co. Limited) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680 FireFox: ======== Opera: ======= OPR StartupUrls: "hxxp://www.mystartsearch.com/?type=hp&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680" StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe http://www.mystartsearch.com/?type=sc&ts=1423906812&from=smt&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680 ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [52896 2010-09-27] (Atheros Commnucations) [File not signed] R2 D_Link_DWA-125_WPS; C:\Program Files (x86)\D-Link\DWA-125 revA\ANIWConnService.exe [53248 2010-07-12] () [File not signed] R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system) R2 Internet Enhancer Service; C:\Program Files (x86)\WajNEnhance\WajNEnhance Internet Enhancer\InternetEnhancerService.exe [457728 2015-02-12] () [File not signed] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2015-02-05] () S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [487056 2015-02-14] (SysTool PasSame LIMITED) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2010-05-29] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-14] (Disc Soft Ltd) R3 hxctlflt; C:\Windows\System32\DRIVERS\hxctlflt.sys [111104 2009-02-09] (Guillemot Corporation) R3 L1c; C:\Windows\System32\DRIVERS\l1c51x64.sys [104600 2012-11-19] (Atheros Communications, Inc.) S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] () R3 netr28ux; C:\Windows\System32\DRIVERS\Dnetr28ux.sys [1617472 2011-04-28] (Ralink Technology Corp.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) S3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation) R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [765288 2011-10-01] (Microsoft Corporation) R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [268648 2011-10-01] (Microsoft Corporation) R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [25960 2011-10-01] (Microsoft Corporation) R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [22376 2011-10-01] (Microsoft Corporation) R3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10684672 2007-07-17] (Sonix Co. Ltd.) S3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [225792 2013-09-25] (VIA Technologies, Inc.) S3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [296960 2013-09-25] (VIA Technologies, Inc.) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-23 10:33 - 2015-02-23 10:33 - 00000000 ____D () C:\Users\User\Desktop\FRST-OlderVersion 2015-02-16 12:18 - 2015-02-23 10:34 - 00014353 _____ () C:\Users\User\Desktop\FRST.txt 2015-02-14 11:48 - 2010-06-02 04:55 - 00527192 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2015-02-14 11:48 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2015-02-14 11:48 - 2010-06-02 04:55 - 00239960 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2015-02-14 11:48 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-02-14 11:48 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2015-02-14 11:48 - 2010-06-02 04:55 - 00074072 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2015-02-14 11:48 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2015-02-14 11:48 - 2010-05-26 11:41 - 02106216 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2015-02-14 11:48 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-02-14 11:48 - 2010-05-26 11:41 - 01868128 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2015-02-14 11:48 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-02-14 11:48 - 2010-02-04 10:01 - 00528216 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-02-14 11:48 - 2010-02-04 10:01 - 00238936 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-02-14 11:48 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-02-14 11:48 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-02-14 11:48 - 2010-02-04 10:01 - 00074072 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-02-14 11:48 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-02-14 11:48 - 2010-02-04 10:01 - 00022360 ____C (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-02-14 11:48 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-02-14 11:48 - 2009-09-04 17:44 - 00515416 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2015-02-14 11:48 - 2009-09-04 17:44 - 00238936 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2015-02-14 11:48 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-02-14 11:48 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-02-14 11:48 - 2009-09-04 17:44 - 00069464 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2015-02-14 11:48 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-02-14 11:48 - 2009-09-04 17:29 - 05501792 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2015-02-14 11:48 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-02-14 11:48 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-02-14 11:48 - 2009-09-04 17:29 - 01974616 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2015-02-14 11:48 - 2009-09-04 17:29 - 01892184 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2015-02-14 11:48 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2015-02-14 11:48 - 2009-09-04 17:29 - 00453456 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2015-02-14 11:48 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-02-14 11:48 - 2009-09-04 17:29 - 00235344 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2015-02-14 11:48 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-02-14 11:48 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-02-14 11:48 - 2009-03-09 15:27 - 04178264 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2015-02-14 11:48 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-02-14 11:48 - 2009-03-09 15:27 - 01846632 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2015-02-14 11:48 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-02-14 11:48 - 2009-03-09 15:27 - 00453456 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2015-02-14 11:47 - 2009-03-16 14:18 - 00517448 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2015-02-14 11:46 - 2009-03-16 14:18 - 00235352 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2015-02-14 11:46 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-02-14 11:46 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-02-14 11:46 - 2009-03-16 14:18 - 00022360 ____C (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2015-02-14 11:46 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-02-14 11:46 - 2008-10-27 10:04 - 00514384 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-02-14 11:46 - 2008-10-27 10:04 - 00235856 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-02-14 11:46 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-02-14 11:46 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-02-14 11:46 - 2008-10-27 10:04 - 00070992 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-02-14 11:46 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-02-14 11:46 - 2008-10-27 10:04 - 00023376 ____C (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-02-14 11:46 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-02-14 11:46 - 2008-10-15 06:22 - 04379984 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2015-02-14 11:46 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-02-14 11:46 - 2008-10-15 06:22 - 02036576 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2015-02-14 11:46 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-02-14 11:46 - 2008-10-15 06:22 - 00452440 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2015-02-14 11:46 - 2008-07-31 10:41 - 00238088 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-02-14 11:46 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-02-14 11:46 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-02-14 11:46 - 2008-07-31 10:41 - 00068616 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-02-14 11:46 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-02-14 11:46 - 2008-07-31 10:40 - 00509448 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-02-14 11:46 - 2008-07-10 11:01 - 00467984 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-02-14 11:46 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-02-14 11:46 - 2008-07-10 11:00 - 03851784 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-02-14 11:46 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-02-14 11:46 - 2008-07-10 11:00 - 01493528 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-02-14 11:46 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-02-14 11:46 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-02-14 11:46 - 2008-05-30 14:19 - 00507400 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2015-02-14 11:46 - 2008-05-30 14:18 - 00238088 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2015-02-14 11:46 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-02-14 11:46 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-02-14 11:46 - 2008-05-30 14:17 - 00065032 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2015-02-14 11:46 - 2008-05-30 14:17 - 00025608 ____C (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2015-02-14 11:46 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-02-14 11:46 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-02-14 11:46 - 2008-05-30 14:11 - 03850760 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2015-02-14 11:46 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-02-14 11:46 - 2008-05-30 14:11 - 01491992 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2015-02-14 11:46 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-02-14 11:46 - 2008-05-30 14:11 - 00467984 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2015-02-14 11:46 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-02-14 11:46 - 2008-03-05 16:03 - 00479752 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2015-02-14 11:46 - 2008-03-05 16:03 - 00238088 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2015-02-14 11:46 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-02-14 11:46 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-02-14 11:46 - 2008-03-05 16:00 - 00025608 ____C (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2015-02-14 11:46 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-02-14 11:46 - 2008-03-05 15:56 - 03786760 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2015-02-14 11:46 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-02-14 11:46 - 2008-03-05 15:56 - 01420824 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2015-02-14 11:46 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-02-14 11:46 - 2008-02-05 23:07 - 00462864 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2015-02-14 11:46 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-02-14 11:46 - 2007-10-22 03:39 - 00267272 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2015-02-14 11:46 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-02-14 11:46 - 2007-10-22 03:37 - 00017928 ____C (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2015-02-14 11:46 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-02-14 11:46 - 2007-10-12 15:14 - 03734536 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2015-02-14 11:46 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-02-14 11:46 - 2007-10-12 15:14 - 01374232 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2015-02-14 11:46 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-02-14 11:46 - 2007-10-02 09:56 - 00444776 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2015-02-14 11:46 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-02-14 11:46 - 2007-07-20 00:57 - 00267112 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2015-02-14 11:46 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-02-14 11:46 - 2007-07-19 18:14 - 03727720 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2015-02-14 11:46 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-02-14 11:46 - 2007-07-19 18:14 - 01358192 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2015-02-14 11:46 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-02-14 11:46 - 2007-07-19 18:14 - 00444776 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2015-02-14 11:46 - 2006-12-08 12:02 - 00251672 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2015-02-14 11:46 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-02-14 11:46 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2015-02-14 11:46 - 2006-11-29 13:06 - 03426072 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2015-02-14 11:46 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-02-14 11:46 - 2006-11-29 13:06 - 00440080 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2015-02-14 11:45 - 2015-02-14 11:46 - 00012093 _____ () C:\Windows\DirectX.log 2015-02-14 11:45 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-02-14 11:45 - 2006-09-28 16:05 - 02414360 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2015-02-14 11:45 - 2006-09-28 16:05 - 00237848 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2015-02-14 11:45 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-02-14 11:45 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-02-14 11:45 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-02-14 11:45 - 2006-07-28 09:30 - 00236824 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2015-02-14 11:45 - 2006-07-28 09:30 - 00062744 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2015-02-14 11:45 - 2006-05-31 07:24 - 00230168 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2015-02-14 11:45 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-02-14 11:45 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-02-14 11:45 - 2006-03-31 12:40 - 02388176 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2015-02-14 11:45 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-02-14 11:45 - 2006-03-31 12:39 - 00229584 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2015-02-14 11:45 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-02-14 11:45 - 2006-03-31 12:39 - 00062672 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2015-02-14 11:45 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-02-14 11:45 - 2006-02-03 08:43 - 02332368 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2015-02-14 11:45 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-02-14 11:45 - 2006-02-03 08:42 - 00230096 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2015-02-14 11:45 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-02-14 11:45 - 2006-02-03 08:41 - 00014032 ____C (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2015-02-14 11:45 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-02-14 11:45 - 2005-12-05 18:09 - 02323664 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2015-02-14 11:45 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-02-14 11:45 - 2005-07-22 19:59 - 02319568 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2015-02-14 11:45 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-02-14 11:45 - 2005-05-26 15:34 - 02297552 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2015-02-14 11:45 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-02-14 11:45 - 2005-03-18 17:19 - 02337488 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2015-02-14 11:45 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-02-14 11:45 - 2005-02-05 19:45 - 02222800 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2015-02-14 11:44 - 2015-02-14 11:44 - 00000000 ____D () C:\Users\User\Desktop\direct 2015-02-14 11:28 - 2015-02-14 11:28 - 00000000 ____D () C:\ProgramData\Steam 2015-02-14 11:19 - 2015-02-14 11:19 - 00001178 _____ () C:\Users\Public\Desktop\Wolfenstein The New Order.lnk 2015-02-14 11:19 - 2015-02-14 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wolfenstein The New Order 2015-02-14 10:43 - 2015-02-14 10:43 - 00000000 ___DC () C:\Program Files (x86)\WajNEnhance 2015-02-14 10:43 - 2015-02-14 10:43 - 00000000 ___DC () C:\Program Files (x86)\Wajam 2015-02-14 10:43 - 2015-02-14 10:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajNEnhance 2015-02-14 10:43 - 2015-02-14 10:43 - 00000000 ____D () C:\ProgramData\IHProtectUpDate 2015-02-14 10:42 - 2015-02-14 11:28 - 00000000 ___DC () C:\Program Files (x86)\Wolfenstein The New Order 2015-02-14 10:42 - 2015-02-14 10:43 - 00000000 ___DC () C:\Program Files (x86)\XTab 2015-02-14 10:42 - 2015-02-14 10:42 - 00000000 ____D () C:\Users\User\AppData\Roaming\mystartsearch 2015-02-14 10:42 - 2015-02-14 10:42 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect 2015-02-14 10:39 - 2015-02-14 10:39 - 00001962 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2015-02-14 10:39 - 2015-02-14 10:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite 2015-02-14 10:38 - 2015-02-14 10:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\DAEMON Tools Lite 2015-02-14 10:38 - 2015-02-14 10:40 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2015-02-14 10:38 - 2015-02-14 10:38 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2015-02-14 10:38 - 2015-02-14 10:38 - 00000000 ___DC () C:\Program Files (x86)\DAEMON Tools Lite 2015-02-14 09:18 - 2015-02-07 16:09 - 00000000 ____D () C:\Users\User\Desktop\Wolfenstein The New Order (incl. Update 1) 2015-02-12 18:29 - 2015-02-13 11:06 - 00000000 ____D () C:\AdwCleaner 2015-02-12 18:23 - 2015-02-12 18:23 - 02112512 _____ () C:\Users\User\Desktop\adwcleaner_4.110.exe 2015-02-12 10:47 - 2015-02-14 19:11 - 00085442 _____ () C:\Windows\PFRO.log 2015-02-11 23:13 - 2015-02-11 23:13 - 00000000 ____D () C:\MATS 2015-02-11 23:02 - 2015-02-11 23:02 - 00000000 ____D () C:\Users\User\AppData\Roaming\WinRAR 2015-02-11 23:02 - 2015-02-11 22:43 - 00000000 ____D () C:\Users\User\Desktop\fixit 2015-02-11 23:01 - 2015-02-11 23:01 - 00000000 ___DC () C:\Program Files\WinRAR 2015-02-11 23:01 - 2015-02-11 23:01 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-02-11 23:01 - 2015-02-11 23:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-02-11 22:36 - 2015-02-11 22:37 - 00347440 _____ (Microsoft Corporation) C:\Users\User\Desktop\MicrosoftFixit-portable.exe 2015-02-10 22:25 - 2015-02-23 10:34 - 00000000 ____D () C:\FRST 2015-02-10 22:25 - 2015-02-23 10:33 - 02087424 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe 2015-02-10 12:17 - 2015-02-10 12:17 - 00019016 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2015-02-10 12:14 - 2015-02-23 10:28 - 00006810 _____ () C:\Windows\setupact.log 2015-02-10 12:14 - 2015-02-10 12:14 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-10 11:45 - 2015-02-13 12:03 - 00000000 ___DC () C:\Program Files (x86)\G Data 2015-02-10 11:20 - 2015-02-10 11:20 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-02-10 11:20 - 2015-02-10 11:20 - 00000830 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2015-02-10 11:20 - 2015-02-10 11:20 - 00000000 ___DC () C:\Program Files\CCleaner 2015-02-10 11:20 - 2015-02-10 11:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-02-10 11:15 - 2015-02-13 12:04 - 00000000 ____D () C:\ProgramData\G Data 2015-02-10 11:06 - 2015-02-12 12:11 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2015-02-09 13:32 - 2015-02-09 13:32 - 00000000 ____D () C:\Windows\system32\appmgmt 2015-02-09 12:21 - 2015-02-09 12:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Macromedia 2015-02-09 12:20 - 2015-02-09 12:20 - 00000000 ___DC () C:\Windows\SysWOW64\Flash 2015-02-09 11:04 - 2015-02-09 11:04 - 00001109 _____ () C:\Users\Public\Desktop\StarCraft II.lnk 2015-02-09 11:03 - 2015-02-09 11:03 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieUserList 2015-02-09 11:03 - 2015-02-09 11:03 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieSiteList 2015-02-09 10:57 - 2015-02-09 10:57 - 00001078 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2015-02-09 10:57 - 2015-02-09 10:57 - 00000000 ___DC () C:\Program Files (x86)\VideoLAN 2015-02-09 10:57 - 2015-02-09 10:57 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc 2015-02-09 10:57 - 2015-02-09 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-02-09 10:55 - 2015-02-09 10:55 - 00000000 ____D () C:\Users\User\Documents\Add-in Express 2015-02-09 10:50 - 2015-02-09 10:57 - 00000000 ____D () C:\Users\User\Documents\vlc 2015-02-09 10:36 - 2015-02-09 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II 2015-02-06 23:39 - 2015-02-10 11:21 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps 2015-02-06 20:38 - 2015-02-06 20:38 - 00000000 ____D () C:\Users\User\Documents\Diablo III 2015-02-06 18:48 - 2015-02-06 18:48 - 00001168 _____ () C:\Users\Public\Desktop\Diablo III.lnk 2015-02-06 18:46 - 2015-02-06 18:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III 2015-02-06 18:44 - 2015-02-06 20:37 - 00000000 ___DC () C:\Program Files (x86)\Diablo III 2015-02-06 14:57 - 2015-02-10 11:48 - 00000000 ____D () C:\Users\User\AppData\Local\Battle.net 2015-02-06 14:57 - 2015-02-06 15:01 - 00000000 ____D () C:\Users\User\AppData\Roaming\Battle.net 2015-02-06 14:57 - 2015-02-06 14:57 - 00001130 _____ () C:\Users\Public\Desktop\Battle.net.lnk 2015-02-06 14:57 - 2015-02-06 14:57 - 00000000 ____D () C:\Users\User\AppData\Roaming\NVIDIA 2015-02-06 14:57 - 2015-02-06 14:57 - 00000000 ____D () C:\Users\User\AppData\Local\Blizzard Entertainment 2015-02-06 14:56 - 2015-02-06 14:57 - 00000000 ___DC () C:\Program Files (x86)\Battle.net 2015-02-06 14:56 - 2015-02-06 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2015-02-06 14:45 - 2015-02-23 02:23 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-02-06 14:45 - 2015-02-06 14:45 - 00701616 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-02-06 14:45 - 2015-02-06 14:45 - 00071344 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-02-06 14:45 - 2015-02-06 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-02-06 14:45 - 2015-02-06 14:45 - 00000000 ___DC () C:\Windows\SysWOW64\Macromed 2015-02-06 14:45 - 2015-02-06 14:45 - 00000000 ____D () C:\Windows\system32\Macromed 2015-02-06 14:42 - 2015-02-06 14:46 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe 2015-02-06 14:21 - 2015-02-09 11:44 - 00000000 ____D () C:\Users\User\Documents\StarCraft II 2015-02-06 14:21 - 2015-02-09 11:42 - 00000000 ___DC () C:\Program Files (x86)\StarCraft II 2015-02-06 14:21 - 2015-02-06 14:57 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment 2015-02-06 14:14 - 2009-02-09 10:43 - 00111104 _____ (Guillemot Corporation) C:\Windows\system32\Drivers\hxctlflt.sys 2015-02-06 14:14 - 2007-07-20 11:33 - 00015478 _____ () C:\Windows\snpstd3.ini 2015-02-06 14:14 - 2007-07-20 11:18 - 00013003 _____ () C:\Windows\snpstd3.src 2015-02-06 14:14 - 2007-07-17 18:10 - 10684672 _____ (Sonix Co. Ltd.) C:\Windows\system32\Drivers\snpstd3.sys 2015-02-06 14:14 - 2007-04-20 16:26 - 00057344 ____C ( ) C:\Windows\SysWOW64\vsnpstd3.dll 2015-02-06 14:14 - 2005-11-22 20:40 - 00018944 _____ ( ) C:\Windows\system32\csnpstd3.dll 2015-02-06 14:12 - 2015-02-06 14:14 - 33555888 _____ (Macrovision Corporation) C:\Users\User\Downloads\HOPGL_v3.2.2.1.exe 2015-02-06 14:12 - 2015-02-06 14:14 - 33555888 _____ (Macrovision Corporation) C:\Users\User\Downloads\HOPGL_v3.2.2.1 (1).exe 2015-02-06 14:08 - 2015-02-06 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hercules 2015-02-06 14:07 - 2015-02-06 14:14 - 00000000 ___DC () C:\Program Files (x86)\Hercules 2015-02-06 13:59 - 2015-02-06 14:02 - 115887608 _____ (Macrovision Corporation) C:\Users\User\Downloads\HWSE_V4.0.2.6.exe 2015-02-05 11:33 - 2015-02-05 11:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\Canneverbe Limited 2015-02-05 11:33 - 2015-02-05 11:33 - 00000000 ____D () C:\ProgramData\Canneverbe Limited 2015-02-05 11:27 - 2015-02-09 13:38 - 00103736 ____C () C:\Windows\SysWOW64\PnkBstrB.exe 2015-02-05 11:27 - 2015-02-05 11:28 - 00000000 ____D () C:\Users\User\Documents\NFS ProStreet 2015-02-05 11:27 - 2015-02-05 11:27 - 00066872 ____C () C:\Windows\SysWOW64\PnkBstrA.exe 2015-02-05 11:27 - 2015-02-05 11:27 - 00000000 __RHD () C:\Users\User\AppData\Roaming\SecuROM 2015-02-05 11:27 - 2015-02-05 11:27 - 00000000 ____D () C:\Users\User\AppData\Local\PunkBuster 2015-02-05 11:26 - 2015-02-05 11:26 - 00002140 _____ () C:\Users\Public\Desktop\Need for Speed™ ProStreet.lnk 2015-02-05 11:26 - 2015-02-05 11:26 - 00000778 _____ () C:\Users\User\Desktop\BESTplayer - Verknüpfung.lnk 2015-02-05 11:26 - 2015-02-05 11:26 - 00000000 ____D () C:\Users\User\AppData\Roaming\BESTplayer 2015-02-05 11:26 - 2015-02-05 11:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts 2015-02-05 11:09 - 2015-02-05 11:09 - 00000000 ___DC () C:\Program Files (x86)\Electronic Arts 2015-02-05 11:09 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-02-05 11:09 - 2007-06-20 20:46 - 00266088 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2015-02-05 11:09 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-02-05 11:09 - 2007-05-16 16:45 - 03497832 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2015-02-05 11:09 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-02-05 11:09 - 2007-05-16 16:45 - 01124720 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2015-02-05 11:09 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-02-05 11:09 - 2007-05-16 16:45 - 00443752 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2015-02-05 11:09 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-02-05 11:09 - 2007-04-04 18:55 - 00261480 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2015-02-05 11:09 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2015-02-05 11:09 - 2007-04-04 18:53 - 00081768 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2015-02-05 11:09 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-02-05 11:09 - 2007-03-15 16:57 - 00443752 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2015-02-05 11:09 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-02-05 11:09 - 2007-03-12 16:42 - 03495784 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2015-02-05 11:09 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-02-05 11:09 - 2007-03-12 16:42 - 01123696 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2015-02-05 11:09 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-02-05 11:09 - 2007-03-05 12:42 - 00015128 ____C (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2015-02-05 11:09 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-02-05 11:09 - 2007-01-24 15:27 - 00255848 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2015-02-05 11:04 - 2015-02-05 15:44 - 00000000 ____D () C:\ProgramData\Battle.net 2015-02-05 10:40 - 2015-02-06 12:44 - 00000000 ____D () C:\Neuer Ordner 2015-02-05 10:36 - 2015-02-05 10:36 - 00001428 _____ () C:\Users\User\Desktop\TERA.lnk 2015-02-05 10:34 - 2015-02-23 10:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype 2015-02-05 10:34 - 2015-02-16 12:22 - 00000000 ___DC () C:\Program Files (x86)\Opera 2015-02-05 10:34 - 2015-02-14 10:42 - 00001347 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2015-02-05 10:34 - 2015-02-14 10:42 - 00001335 _____ () C:\Users\Public\Desktop\Opera.lnk 2015-02-05 10:34 - 2015-02-12 12:19 - 00003850 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1423128877 2015-02-05 10:34 - 2015-02-05 10:34 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 __RDC () C:\Program Files (x86)\Skype 2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\Users\User\AppData\Roaming\Opera Software 2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\Users\User\AppData\Local\Skype 2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software 2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\ProgramData\Skype 2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-02-05 10:31 - 2015-02-05 10:31 - 00000000 ____D () C:\Users\User\AppData\Roaming\TERA 2015-02-05 02:35 - 2015-02-05 02:36 - 00003858 _____ () C:\Windows\system32\RaCoInst.log 2015-02-05 02:35 - 2015-02-05 02:35 - 00000000 ___DC () C:\Program Files (x86)\D-Link 2015-02-05 02:35 - 2015-02-05 02:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\InstallShield 2015-02-05 02:35 - 2011-04-28 14:20 - 01617472 _____ (Ralink Technology Corp.) C:\Windows\system32\Drivers\Dnetr28ux.sys 2015-02-05 02:35 - 2011-04-28 14:17 - 00327008 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInstx.dll 2015-02-05 02:35 - 2011-04-28 14:17 - 00014119 _____ () C:\Windows\system32\RaCoInst.dat 2015-02-05 02:35 - 2010-07-12 14:39 - 00302080 _____ () C:\Windows\lwd.exe 2015-02-05 02:35 - 2010-05-29 07:58 - 00015872 _____ () C:\Windows\system32\Drivers\anodlwfx.sys 2015-02-04 12:39 - 2014-02-27 17:27 - 682299392 _____ () C:\StarCraft (PL).iso 2015-02-04 12:35 - 2014-05-13 12:27 - 968511488 _____ () C:\Heroes.3.Zlota Edycja.PL.iso 2015-02-04 12:34 - 2014-02-25 19:27 - 565276672 _____ () C:\Heroes III Złota Edycja + WoG.iso 2015-02-04 12:32 - 2015-02-04 23:22 - 00000000 ____D () C:\programy 2015-02-04 11:09 - 2015-02-04 11:10 - 45109352 _____ (Skype Technologies S.A.) C:\SkypeSetup71Full.exe 2015-02-04 09:59 - 2015-02-04 23:21 - 00000000 ____D () C:\GameforgeLive 2015-02-03 11:39 - 2015-02-03 11:40 - 32896408 _____ (Opera Software) C:\Opera_27.0.1689.54_Setup.exe 2015-02-03 11:39 - 2015-02-03 11:39 - 36942788 _____ () C:\dwa-125a3-1-51s0039.zip 2015-02-03 11:38 - 2015-02-03 11:39 - 23320495 _____ () C:\DWA-125_drv_reva3_153s0050_ALL_multi_20140421.zip 2015-02-03 11:22 - 2015-02-05 14:10 - 00000000 ____D () C:\dwoch i pol 7 ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-23 10:32 - 2011-05-25 03:18 - 01525661 _____ () C:\Windows\WindowsUpdate.log 2015-02-23 10:28 - 2013-11-28 02:14 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-02-23 10:28 - 2011-06-26 21:08 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini 2015-02-23 10:28 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-22 11:10 - 2009-07-14 05:45 - 00022384 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-02-22 11:10 - 2009-07-14 05:45 - 00022384 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-02-21 19:17 - 2009-07-14 18:58 - 01891594 _____ () C:\Windows\system32\perfh007.dat 2015-02-21 19:17 - 2009-07-14 18:58 - 00519508 _____ () C:\Windows\system32\perfc007.dat 2015-02-21 19:17 - 2009-07-14 06:13 - 00006468 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-15 23:34 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-02-14 10:42 - 2012-04-22 03:16 - 00001645 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-13 12:03 - 2009-07-14 04:20 - 00000000 ___DC () C:\Windows\SysWOW64\Setup 2015-02-13 12:03 - 2009-07-14 04:20 - 00000000 ___DC () C:\Windows\SysWOW64\oobe 2015-02-13 12:03 - 2009-07-14 04:20 - 00000000 ___DC () C:\Windows\SysWOW64\MUI 2015-02-13 12:03 - 2009-07-14 04:20 - 00000000 ___DC () C:\Windows\SysWOW64\com 2015-02-12 10:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy 2015-02-10 21:50 - 2013-11-20 13:42 - 00000000 ___DC () C:\Program Files\VIA XHCI UASP Utility 2015-02-10 21:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2015-02-10 12:25 - 2014-03-23 17:27 - 00000000 ____D () C:\ProgramData\VirtualizedApplications 2015-02-10 11:21 - 2013-07-15 10:49 - 00000000 ____D () C:\Windows\Minidump 2015-02-10 11:21 - 2011-05-25 04:15 - 00000000 ____D () C:\Windows\Panther 2015-02-10 11:15 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini 2015-02-09 11:02 - 2013-11-26 12:14 - 00000000 ___DC () C:\Program Files (x86)\ATI Technologies 2015-02-06 14:46 - 2014-03-25 14:06 - 00000000 ____D () C:\Users\User\AppData\Roaming\Adobe 2015-02-06 14:43 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-02-06 14:14 - 2011-05-25 03:25 - 00000000 __HDC () C:\Program Files (x86)\InstallShield Installation Information 2015-02-06 12:41 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2015-02-05 15:32 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries 2015-02-05 14:13 - 2014-03-01 00:59 - 00000000 ____D () C:\Two and a half Man 5 2015-02-05 14:09 - 2012-08-20 17:16 - 00000000 ____D () C:\cali sezon 4 2015-02-05 11:27 - 2012-04-22 03:15 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore 2015-02-04 22:20 - 2009-02-28 10:34 - 00000000 ____D () C:\Fotki Some content of TEMP: ==================== C:\Users\User\AppData\Local\Temp\bitool.dll C:\Users\User\AppData\Local\Temp\DSETUP.dll C:\Users\User\AppData\Local\Temp\dsetup32.dll C:\Users\User\AppData\Local\Temp\DXSETUP.exe C:\Users\User\AppData\Local\Temp\Quarantine.exe C:\Users\User\AppData\Local\Temp\setup.exe C:\Users\User\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-14 03:06 ==================== End Of Log ============================