| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: PC nach Trojanerbefall wirklich sauber?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
24.10.2012, 10:08
| #16 |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  PC nach Trojanerbefall wirklich sauber? Ok, eine Kontrolle bitte:
Code:
ATTFilter netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%systemdrive%\*.
%allusersprofile%\*. /s
%allusersprofile%\Application Data\*. /s
%appdata%\*. /s
%systemroot%\Installer\*. /s
%systemroot%\system32\*. /s
%systemroot%\system32\drivers\*. /s
%systemroot%\System32\config\*. /s
%systemroot%\*. /mp /s
CREATERESTOREPOINT
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
24.10.2012, 18:41
| #17 |
 | PC nach Trojanerbefall wirklich sauber? Hallo, hier der 1. Teil:
__________________Code:
ATTFilter OTL logfile created on: 24.10.2012 18:56:03 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\878\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000c07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,20 Gb Available Physical Memory | 59,86% Memory free 4,00 Gb Paging File | 3,06 Gb Available in Paging File | 76,55% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 465,75 Gb Total Space | 344,41 Gb Free Space | 73,95% Space Free | Partition Type: NTFS Computer Name: 878-PC | User Name: 878 | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\878\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) PRC - C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe () PRC - C:\Programme\AVG\AVG2012\avgidsagent.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Programme\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) PRC - C:\Programme\AVG\AVG2012\avgrsx.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Programme\AVG\AVG2012\avgnsx.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Programme\Online Games Manager\ogmservice.exe (RealNetworks, Inc.) PRC - C:\Programme\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Programme\AVG\AVG2012\avgcsrvx.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Programme\PDF24\pdf24.exe (Geek Software GmbH) PRC - C:\Windows\System32\bgsmsnd.exe (Broadgun Software) PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corp.) PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Programme\Winamp\winampa.exe (Nullsoft, Inc.) PRC - C:\Programme\FreePDF_XP\fpassist.exe (shbox.de) PRC - C:\Programme\Nero\Update\NASvc.exe (Nero AG) PRC - C:\Programme\Clear History\ClearHistory.exe (CS Software) ========== Modules (No Company Name) ========== ========== Services (SafeList) ========== SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) SRV - (MBAMScheduler) -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) SRV - (vToolbarUpdater12.2.6) -- C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe () SRV - (AVGIDSAgent) -- C:\Programme\AVG\AVG2012\avgidsagent.exe (AVG Technologies CZ, s.r.o.) SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (SkypeUpdate) -- C:\Programme\Skype\Updater\Updater.exe (Skype Technologies) SRV - (ogmservice) -- C:\Programme\Online Games Manager\ogmservice.exe (RealNetworks, Inc.) SRV - (avgwd) -- C:\Programme\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.) SRV - (wlidsvc) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation) SRV - (NAUpdate) -- C:\Programme\Nero\Update\NASvc.exe (Nero AG) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (ose) -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found DRV - (cpuz132) -- C:\Users\878\AppData\Local\Temp\cpuz132\cpuz132_x32.sys File not found DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation) DRV - (avgtp) -- C:\Windows\System32\drivers\avgtpx86.sys (AVG Technologies) DRV - (Avgtdix) -- C:\Windows\System32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.) DRV - (Avgldx86) -- C:\Windows\System32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.) DRV - (AVGIDSHX) -- C:\Windows\System32\drivers\avgidshx.sys (AVG Technologies CZ, s.r.o. ) DRV - (Avgrkx86) -- C:\Windows\System32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.) DRV - (Avgmfx86) -- C:\Windows\System32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.) DRV - (AVGIDSShim) -- C:\Windows\System32\drivers\avgidsshimx.sys (AVG Technologies CZ, s.r.o. ) DRV - (AVGIDSFilter) -- C:\Windows\System32\drivers\avgidsfilterx.sys (AVG Technologies CZ, s.r.o. ) DRV - (AVGIDSDriver) -- C:\Windows\System32\drivers\avgidsdriverx.sys (AVG Technologies CZ, s.r.o. ) DRV - (iBtFltCoex) -- C:\Windows\System32\drivers\iBtFltCoex.sys (Intel Corporation) DRV - (btmhsf) -- C:\Windows\System32\drivers\btmhsf.sys (Intel Corporation) DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation) DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation) DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation) DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation) DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation) DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - (acedrv11) -- C:\Windows\System32\drivers\acedrv11.sys (Protect Software GmbH) DRV - (BthAvrcp) -- C:\Windows\System32\drivers\BthAvrcp.sys (CSR, plc) DRV - (NVENETFD) -- C:\Windows\System32\drivers\nvm62x32.sys (NVIDIA Corporation) DRV - (irsir) -- C:\Windows\System32\drivers\irsir.sys (Microsoft Corporation) DRV - (P1120VID) -- C:\Windows\System32\drivers\P1120Vid.sys (Creative Technology Ltd.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 95 39 38 76 99 AC CD 01 [binary data] IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26 FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll File not found FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@powerchallenge.com/PowerLoader: C:\Users\878\AppData\LocalLow\POWERC~1\nppowerloader.dll (Power Challenge Sweden AB) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012.09.11 09:57:36 | 000,000,000 | ---D | M] [2010.10.05 19:26:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\878\AppData\Roaming\mozilla\Extensions [2011.09.15 21:35:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\878\AppData\Roaming\mozilla\Firefox\Profiles\r9bisenm.default\extensions [2011.09.15 23:09:17 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2010.10.05 19:28:42 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010.10.22 16:03:29 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011.01.15 20:07:50 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011.03.15 10:41:49 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011.06.16 20:00:14 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2010.10.05 19:28:42 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010.10.22 16:03:29 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011.01.15 20:07:50 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011.03.15 10:41:49 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011.06.16 20:00:14 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011.05.04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2010.10.05 19:26:19 | 000,075,208 | ---- | M] (Foxit Software Company) -- C:\Program Files\mozilla firefox\plugins\npFoxitReaderPlugin.dll [2010.07.12 18:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms} CHR - homepage: hxxp://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\878\AppData\Local\Google\Chrome\Application\13.0.782.220\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll CHR - plugin: Chrome NaCl (Disabled) = C:\Users\878\AppData\Local\Google\Chrome\Application\13.0.782.220\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\878\AppData\Local\Google\Chrome\Application\13.0.782.220\pdf.dll CHR - plugin: Garmin Communicator Plug-In (Enabled) = C:\Program Files\Garmin GPS Plugin\npGarmin.dll CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: AVG Safe Search = C:\Users\878\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2210_0\ CHR - Extension: AVG Secure Search = C:\Users\878\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.2.5.32_0\ CHR - Extension: AVG Safe Search = C:\Users\878\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2210_0\ CHR - Extension: AVG Secure Search = C:\Users\878\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.2.5.32_0\ O1 HOSTS File: ([2012.10.23 21:39:09 | 000,000,098 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (pdfMachine) - {56CF4856-ECB4-4e46-A897-A378821F97B9} - C:\Windows\System32\spool\drivers\w32x86\3\bgstb.dll (Broadgun Software) O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (pdfMachine) - {56CF4856-ECB4-4e46-A897-A378821F97B9} - C:\Windows\System32\spool\drivers\w32x86\3\bgstb.dll (Broadgun Software) O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (pdfMachine) - {56CF4856-ECB4-4E46-A897-A378821F97B9} - C:\Windows\System32\spool\drivers\w32x86\3\bgstb.dll (Broadgun Software) O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (pdfMachine) - {56CF4856-ECB4-4E46-A897-A378821F97B9} - C:\Windows\System32\spool\drivers\w32x86\3\bgstb.dll (Broadgun Software) O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [bgsmsnd.exe] C:\Windows\System32\bgsmsnd.exe (Broadgun Software) O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de) O4 - HKLM..\Run: [PDFPrint] C:\Programme\PDF24\pdf24.exe (Geek Software GmbH) O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.) O4 - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001..\Run: [ClearHistory] C:\Program Files\Clear History\ClearHistory.exe (CS Software) O4 - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001..\Run: [Steam] C:\Program Files\Steam1\Steam.exe (Valve Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O13 - gopher Prefix: missing O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab (UnoCtrl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 10.9.2) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.7.0_09) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.7.0_09) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 195.34.133.21 212.186.211.21 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9806874B-4621-4D96-B9FC-D8CB4C695FAA}: DhcpNameServer = 195.34.133.21 212.186.211.21 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{614e5986-25f7-11e1-9776-0019666c2b7e}\Shell - "" = AutoRun O33 - MountPoints2\{614e5986-25f7-11e1-9776-0019666c2b7e}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpReg: CTRegRun - hkey= - key= - C:\Windows\Ctregrun.exe (Creative Technology Ltd ) MsConfig - State: "startup" - 2 SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2012.10.23 21:38:52 | 000,000,000 | ---D | C] -- C:\_OTL [2012.10.20 12:26:58 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\878\Desktop\OTL.exe [2012.10.20 10:47:53 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2012.10.17 20:12:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2012.10.17 17:38:24 | 000,000,000 | ---D | C] -- C:\Users\878\AppData\Roaming\AVG [2012.10.17 17:37:50 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG [2012.10.17 17:37:47 | 000,000,000 | -HSD | C] -- C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F} [2012.10.16 21:01:07 | 000,000,000 | ---D | C] -- C:\Users\878\Documents\Anti-Malware [2012.10.16 19:11:14 | 000,000,000 | ---D | C] -- C:\Users\878\AppData\Roaming\Malwarebytes [2012.10.16 19:11:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012.10.16 19:11:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012.10.16 19:11:04 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2012.10.16 19:11:04 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2012.10.06 01:30:50 | 000,000,000 | ---D | C] -- C:\Users\878\AppData\Roaming\TuneUp Software [2012.10.06 01:30:47 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013 [2012.10.06 01:30:45 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software [2012.10.06 01:30:37 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2 C:\Users\878\Desktop\*.tmp files -> C:\Users\878\Desktop\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012.10.24 19:00:05 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012.10.24 18:59:21 | 000,014,336 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.10.24 18:59:21 | 000,014,336 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.10.24 18:55:45 | 098,483,969 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm [2012.10.24 18:52:14 | 000,001,088 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012.10.24 18:52:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012.10.24 18:52:04 | 1610,006,528 | -HS- | M] () -- C:\hiberfil.sys [2012.10.24 09:24:00 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012.10.23 21:39:09 | 000,000,098 | ---- | M] () -- C:\Windows\System32\drivers\etc\Hosts [2012.10.22 19:57:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\878\Desktop\OTL.exe [2012.10.20 12:23:05 | 000,538,941 | ---- | M] () -- C:\Users\878\Desktop\adwcleaner.exe [2012.10.20 09:29:26 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2012.10.07 01:02:45 | 000,074,137 | ---- | M] () -- C:\ProgramData\eatstoapzfibbbc [2012.10.05 20:36:52 | 000,378,368 | ---- | M] () -- C:\Users\878\Desktop\P1070175-pic.jpg [2012.10.05 18:31:57 | 000,272,670 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm [2012.10.03 00:52:48 | 000,121,837 | ---- | M] () -- C:\Users\878\Desktop\IMG_0210.JPG [2012.10.02 16:12:03 | 000,653,928 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2012.10.02 16:12:03 | 000,615,810 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012.10.02 16:12:03 | 000,129,800 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2012.10.02 16:12:03 | 000,106,190 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012.09.29 19:54:26 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2 C:\Users\878\Desktop\*.tmp files -> C:\Users\878\Desktop\*.tmp -> ] ========== Files Created - No Company Name ========== [2012.10.20 12:17:08 | 000,538,941 | ---- | C] () -- C:\Users\878\Desktop\adwcleaner.exe [2012.10.16 19:11:05 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2012.10.07 01:02:39 | 000,074,137 | ---- | C] () -- C:\ProgramData\eatstoapzfibbbc [2012.10.05 20:36:52 | 000,378,368 | ---- | C] () -- C:\Users\878\Desktop\P1070175-pic.jpg [2012.10.03 00:52:48 | 000,121,837 | ---- | C] () -- C:\Users\878\Desktop\IMG_0210.JPG [2012.08.21 08:27:53 | 000,027,520 | ---- | C] () -- C:\Users\878\AppData\Local\dt.dat [2012.05.29 21:52:21 | 000,000,889 | ---- | C] () -- C:\Users\878\AppData\Local\recently-used.xbel [2011.11.23 17:15:43 | 000,000,000 | ---- | C] () -- C:\Users\878\AppData\Local\{B99A73A0-AA41-4986-A67D-7E8B18B48CBE} [2011.09.30 11:07:23 | 000,000,000 | ---- | C] () -- C:\Users\878\AppData\Local\{EC113985-85DB-4DC2-9ADE-06367B0D5E54} [2011.08.09 13:06:31 | 000,761,856 | ---- | C] () -- C:\Windows\System32\FreeImage3.dll [2011.08.09 13:06:31 | 000,761,856 | ---- | C] () -- C:\Windows\System32\FreeImage.dll [2011.08.09 13:06:31 | 000,098,304 | ---- | C] () -- C:\Windows\System32\DVM.dll [2011.08.09 13:06:31 | 000,053,248 | ---- | C] () -- C:\Windows\System32\RegisterExe.exe [2011.08.07 00:41:05 | 000,216,776 | ---- | C] () -- C:\Windows\System32\bgsserv.exe [2011.08.07 00:41:05 | 000,128,712 | ---- | C] () -- C:\Windows\System32\bgsreses.dll [2011.08.07 00:41:05 | 000,127,176 | ---- | C] () -- C:\Windows\System32\bgsresfr.dll [2011.08.07 00:41:05 | 000,125,640 | ---- | C] () -- C:\Windows\System32\bgsresit.dll [2011.08.07 00:41:05 | 000,123,592 | ---- | C] () -- C:\Windows\System32\bgsrespt.dll [2011.08.07 00:41:05 | 000,123,080 | ---- | C] () -- C:\Windows\System32\bgsrespl.dll [2011.08.07 00:41:05 | 000,121,032 | ---- | C] () -- C:\Windows\System32\bgsresde.dll [2011.08.07 00:41:05 | 000,119,496 | ---- | C] () -- C:\Windows\System32\bgsresen.dll [2011.08.07 00:41:05 | 000,119,496 | ---- | C] () -- C:\Windows\System32\bgsresda.dll [2011.08.07 00:41:05 | 000,061,640 | ---- | C] () -- C:\Windows\System32\bgspmnt.dll [2011.06.21 11:45:02 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2011.06.21 11:44:09 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2011.05.29 19:22:15 | 000,000,000 | ---- | C] () -- C:\Users\878\AppData\Local\{68A286C1-2FC3-4162-8592-165066DD8103} [2011.03.20 04:10:57 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat [2011.03.01 17:33:21 | 000,000,807 | ---- | C] () -- C:\Users\878\AppData\Roaming\FrameFun.ini [2011.01.22 19:15:39 | 000,116,224 | ---- | C] () -- C:\Windows\System32\redmonnt.dll [2011.01.22 19:15:39 | 000,045,056 | ---- | C] () -- C:\Windows\System32\unredmon.exe [2011.01.20 05:26:12 | 000,004,096 | -H-- | C] () -- C:\Users\878\AppData\Local\keyfile3.drm [2010.12.18 18:42:30 | 000,004,608 | ---- | C] () -- C:\Users\878\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.11.12 22:48:33 | 000,074,219 | ---- | C] () -- C:\Windows\hpqins16.dat [2010.10.05 20:55:17 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat ========== ZeroAccess Check ========== [2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2010.11.20 14:21:19 | 012,872,192 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2011.02.24 23:26:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AlawarSouthpoint [2012.10.17 17:38:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG [2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG2012 [2012.09.15 22:39:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Boomzap [2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR120TWN [2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR330TWN [2010.12.13 05:02:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\DeepBurner [2012.09.15 17:21:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\ERS Game Studios [2011.03.20 03:37:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Floodlight Games [2010.10.05 19:26:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit [2010.10.05 19:26:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit Software [2011.02.23 23:27:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GameHouse [2011.02.25 01:20:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GamersDigital [2011.01.31 18:04:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN [2011.03.20 01:12:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Gogii [2010.10.05 19:27:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\IrfanView [2011.02.25 00:13:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\LittleGamesCompany [2011.04.14 17:40:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MAGIX [2012.09.15 15:31:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MumboJumbo [2010.10.05 19:29:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera [2012.09.15 18:18:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Orneon [2012.05.29 22:03:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\PhotoScape [2011.06.24 21:34:21 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\PlayFirst [2012.09.10 22:42:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\RenPy [2011.02.23 20:35:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skip-Bo [2011.08.09 13:06:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Softinterface, Inc [2012.05.29 21:58:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall [2012.09.15 23:52:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Top Evidence [2012.10.06 01:30:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software [2010.11.12 22:42:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Uniblue [2012.09.15 14:08:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games [2011.03.20 03:55:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\VampireSaga [2011.08.09 13:24:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\WordToPDF [2011.08.06 23:17:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\XnView [2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom ========== Purity Check ========== ========== Custom Scans ========== < %systemdrive%\*. > [2012.06.09 17:18:21 | 000,000,000 | -H-D | M] -- C:\$AVG [2010.10.08 04:00:50 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin [2011.11.10 21:53:08 | 000,000,000 | ---D | M] -- C:\Bearbeitung [2012.09.15 14:02:20 | 000,000,000 | ---D | M] -- C:\BigFishGamesCache [2012.10.04 17:25:39 | 000,000,000 | ---D | M] -- C:\Bildchen [2011.10.19 18:06:43 | 000,000,000 | -HSD | M] -- C:\Boot [2012.10.17 22:19:35 | 000,000,000 | -H-D | M] -- C:\Config.Msi [2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings [2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen [2012.10.17 21:05:32 | 000,000,000 | ---D | M] -- C:\Downloads [2012.10.02 09:50:08 | 000,000,000 | ---D | M] -- C:\Eigene Dateien [2012.10.07 02:27:03 | 000,000,000 | ---D | M] -- C:\Erledigungen Freizeit [2012.10.02 16:10:16 | 000,000,000 | ---D | M] -- C:\Fotos [2012.01.15 19:17:45 | 000,000,000 | ---D | M] -- C:\Media [2010.10.05 22:27:54 | 000,000,000 | RH-D | M] -- C:\MSOCache [2012.04.28 00:53:14 | 000,000,000 | ---D | M] -- C:\Musik [2010.12.08 21:54:37 | 000,000,000 | ---D | M] -- C:\Oma [2012.10.20 10:47:53 | 000,000,000 | R--D | M] -- C:\Program Files [2012.10.23 21:38:53 | 000,000,000 | -H-D | M] -- C:\ProgramData [2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\Programme [2010.10.05 19:18:21 | 000,000,000 | -HSD | M] -- C:\Recovery [2012.06.04 00:31:36 | 000,000,000 | ---D | M] -- C:\Ringtöne [2011.11.10 21:51:21 | 000,000,000 | ---D | M] -- C:\Spiele [2012.10.24 18:58:29 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2010.11.12 22:39:18 | 000,000,000 | ---D | M] -- C:\temp [2011.08.09 14:50:37 | 000,000,000 | ---D | M] -- C:\Temporär [2010.10.05 19:18:36 | 000,000,000 | R--D | M] -- C:\Users [2012.10.21 17:58:53 | 000,000,000 | ---D | M] -- C:\Windows [2012.10.23 21:38:52 | 000,000,000 | ---D | M] -- C:\_OTL < %programdata%\*. /s > [2012.10.17 22:16:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe [2011.03.20 02:27:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Alawar Stargaze [2011.02.24 23:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\AlawarSouthpoint [2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Anwendungsdaten [2010.12.17 02:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple [2010.12.17 02:29:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer [2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data [2012.10.17 17:39:00 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG [2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012 [2012.09.15 14:00:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games [2011.10.19 18:20:02 | 000,000,000 | -H-D | M] -- C:\ProgramData\Common Files [2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop [2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents [2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumente [2010.10.05 21:17:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Easy Driver Pro [2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favoriten [2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites [2011.03.20 03:37:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Floodlight Games [2011.08.07 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\FreePDF [2011.02.24 00:34:03 | 000,000,000 | ---D | M] -- C:\ProgramData\GameHouse [2011.02.25 01:20:54 | 000,000,000 | ---D | M] -- C:\ProgramData\GamersDigital [2011.01.31 18:00:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin [2010.11.12 22:48:32 | 000,000,000 | ---D | M] -- C:\ProgramData\HP [2010.11.12 22:49:42 | 000,000,000 | ---D | M] -- C:\ProgramData\HPSSUPPLY [2011.02.25 00:13:44 | 000,000,000 | ---D | M] -- C:\ProgramData\LittleGamesCompany [2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX [2012.10.16 19:11:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes [2012.10.24 18:55:47 | 000,000,000 | ---D | M] -- C:\ProgramData\MFAData [2012.07.13 21:11:56 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft [2010.12.13 04:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero [2010.10.05 19:39:12 | 000,000,000 | ---D | M] -- C:\ProgramData\NVIDIA [2010.10.17 18:51:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Office Genuine Advantage [2010.10.05 22:10:50 | 000,000,000 | ---D | M] -- C:\ProgramData\PC Drivers HeadQuarters [2011.06.24 21:34:21 | 000,000,000 | ---D | M] -- C:\ProgramData\PlayFirst [2011.01.13 04:55:15 | 000,000,000 | ---D | M] -- C:\ProgramData\regid.1986-12.com.adobe [2012.07.18 20:00:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype [2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu [2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Startmenü [2010.10.05 19:28:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Sun [2012.09.16 00:16:26 | 000,000,000 | ---D | M] -- C:\ProgramData\TEMP [2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates [2012.09.15 23:52:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Top Evidence [2012.10.06 01:30:50 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software [2010.11.12 22:42:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Uniblue [2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Vorlagen [2012.04.07 04:36:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom [2010.12.17 02:30:49 | 000,000,000 | ---D | M] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2012.10.06 01:30:37 | 000,000,000 | -HSD | M] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2012.10.17 17:37:47 | 000,000,000 | -HSD | M] -- C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F} [2011.08.23 22:00:34 | 000,000,000 | ---D | M] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86 [2011.08.23 22:00:34 | 000,000,000 | ---D | M] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\x86 [2011.01.14 03:00:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\AAMUpdater [2011.11.25 01:51:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Acrobat [2011.01.13 04:53:15 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\AIR [2012.10.21 22:50:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM [2011.01.13 04:52:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Extension Manager CS5 [2011.11.26 12:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Setup [2012.10.17 22:15:00 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\SLStore [2010.10.05 19:24:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Updater6 [2011.01.14 03:00:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\AAMUpdater\1.0 [2011.11.25 01:51:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Acrobat\10.0 [2011.11.25 01:51:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Acrobat\10.0\Replicate [2011.11.25 01:51:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Acrobat\10.0\Replicate\Security [2011.01.13 04:53:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\AIR\Updater [2011.04.03 17:56:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.0.0 [2011.11.26 12:28:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.0.1 [2012.01.24 22:51:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.1 [2012.10.16 20:40:15 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.2 [2012.10.21 22:51:17 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.4 [2011.11.26 12:28:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.0.1\20891 [2011.11.26 12:28:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.0.1\24525 [2012.01.24 11:03:15 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.1\1288 [2012.01.24 18:17:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.1\20745 [2012.01.23 17:53:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.1\28933 [2011.03.20 02:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Alawar Stargaze\Twisted Lands - Shadow Town Collector's Edition [2011.03.20 02:28:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Alawar Stargaze\Twisted Lands - Shadow Town Collector's Edition\saves [2011.02.24 23:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\AlawarSouthpoint\Dancing Craze [2011.08.23 22:00:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer\Installer Cache [2012.08.10 02:16:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer\iTunes [2011.08.23 22:00:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer\Installer Cache\iTunes 10.4.1.10 [2011.08.23 21:57:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer\Installer Cache\QuickTime 7.70.80.34 [2012.08.10 02:16:01 | 000,000,000 | -H-D | M] -- C:\ProgramData\Apple Computer\iTunes\SC Info [2011.08.23 21:58:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache [2010.12.17 02:28:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\Apple Mobile Device Support 3.3.0.69 [2011.02.08 21:41:17 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\Apple Mobile Device Support 3.3.1.3 [2011.08.23 21:58:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\Apple Mobile Device Support 3.4.1.2 [2011.08.23 21:55:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\Apple Software Update 2.1.3.127 [2010.12.17 02:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\AppleApplicationSupport 1.4.1 [2011.08.23 21:56:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\AppleApplicationSupport 2.0.1 [2011.08.23 21:58:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\Bonjour 3.0.0.2 [2012.10.17 22:17:08 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG\AWL [2012.10.17 22:18:08 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG\AWL2012 [2012.10.17 22:17:07 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG\AWL\Program Statistics [2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\admincli [2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Antispam [2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\avgam [2012.10.23 21:38:48 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Cfg [2012.10.17 17:36:22 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\cfgall [2012.10.24 09:46:25 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Chjw [2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Dumps [2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\EMC [2012.10.24 09:08:26 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\fet [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS [2012.10.24 18:52:28 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\log [2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\lsdb [2012.10.21 17:57:25 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\scanlogs [2012.09.19 09:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\SetupBackup [2012.10.24 18:59:40 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Temp [2011.11.25 02:16:17 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\update [2012.10.24 14:51:56 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Chjw\b414e05114e0185e [2012.10.24 18:52:17 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\config [2012.09.03 19:33:10 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\download [2012.10.24 14:51:57 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\malwareprofile [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox [2012.10.24 19:03:36 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\profile [2012.10.16 20:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\quarantine [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\0 [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\1 [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\2 [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\3 [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\4 [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\5 [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\6 [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\7 [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\8 [2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\9 [2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\lsdb\prev [2012.10.18 20:05:50 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\update\backup [2012.10.24 18:55:47 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\update\download [2012.10.24 18:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\update\prepare [2012.09.16 00:16:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources [2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\da_DK [2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\de_DE [2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\en_US [2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\es_ES [2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\fr_FR [2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images [2012.09.15 14:56:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\it_IT [2012.09.15 14:56:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\javascript [2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\ja_JP [2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\nl_NL [2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\pt_BR [2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\sv_SE [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\br [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\de [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\dk [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\en [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\es [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\fr [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\it [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\jp [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\nl [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\se [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\br\screen [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\de\screen [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\dk\screen [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\en\screen [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\es\screen [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\fr\screen [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\it\screen [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\jp\screen [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\nl\screen [2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\se\screen [2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\fonts [2012.09.15 14:55:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m [2012.09.15 14:00:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\p [2012.09.15 14:56:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s [2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\content_header [2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\download_queue [2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\game_rows [2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\gyb_bottom [2012.09.15 14:55:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\header [2012.09.15 14:55:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\left_nav [2012.09.15 14:55:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\overlay [2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s\ads [2012.09.15 14:56:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s\bg [2012.09.15 14:56:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s\boxes [2012.09.15 14:56:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s\felix [2012.09.15 14:56:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s\pointytips [2012.09.15 14:56:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\javascript\bfg [2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\javascript\bfg\screen [2010.11.12 23:09:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Easy Driver Pro\Easy Driver Pro [2011.03.20 03:37:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Floodlight Games\SED [2011.02.23 23:27:27 | 000,000,000 | ---D | M] -- C:\ProgramData\GameHouse\Campfire Legends II [2011.02.24 00:34:03 | 000,000,000 | ---D | M] -- C:\ProgramData\GameHouse\Games [2011.02.24 00:34:03 | 000,000,000 | ---D | M] -- C:\ProgramData\GameHouse\Games\HeartsMedicine [2011.02.24 00:34:16 | 000,000,000 | ---D | M] -- C:\ProgramData\GameHouse\Games\HeartsMedicine\players [2011.02.25 01:20:54 | 000,000,000 | ---D | M] -- C:\ProgramData\GamersDigital\Jack the Ripper [2011.05.14 00:26:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps [2011.05.14 00:27:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap [2011.05.14 00:27:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\CNEuroNT_2011_30_mdr [2011.05.14 00:27:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1 [2011.05.14 00:27:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356202 [2011.05.14 00:27:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356206 [2011.05.14 00:27:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356207 [2011.05.14 00:27:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356209 [2011.05.14 00:27:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356210 [2011.05.14 00:27:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356211 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356212 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356213 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356214 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356215 [2011.05.14 00:27:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356216 [2011.05.14 00:27:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356217 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356218 [2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356219 [2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356220 [2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356221 [2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356222 [2011.05.14 00:27:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356223 [2011.05.14 00:27:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356224 [2011.05.14 00:27:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356225 [2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356226 [2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356227 [2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356228 [2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356229 [2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356230 [2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356231 [2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356232 [2011.05.14 00:27:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356233 [2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356234 [2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356235 [2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356236 [2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356237 [2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356238 [2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356239 [2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356240 [2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356241 [2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356242 [2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356243 [2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356244 [2011.05.14 00:27:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356245 [2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356246 [2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356247 [2011.05.14 00:27:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356248 [2011.05.14 00:27:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356249 [2011.05.14 00:27:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356250 [2011.05.14 00:27:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356251 [2011.05.14 00:27:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356252 [2011.05.14 00:27:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356253 [2011.05.14 00:27:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356254 [2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356255 [2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356256 [2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356257 [2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356258 [2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356259 [2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356260 [2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356261 [2011.05.14 00:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356262 [2011.05.14 00:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356263 [2011.05.14 00:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356264 [2011.05.14 00:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356265 [2011.05.14 00:27:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356266 [2011.05.14 00:27:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356267 [2011.05.14 00:27:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356268 [2011.05.14 00:27:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356269 [2011.05.14 00:27:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356270 [2011.05.14 00:27:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356271 [2011.05.14 00:27:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356272 [2011.05.14 00:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356273 [2011.05.14 00:27:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356274 [2011.05.14 00:27:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356275 [2011.05.14 00:27:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356276 [2011.05.14 00:27:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356277 [2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356278 [2011.05.14 00:27:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356279 [2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356280 [2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356281 [2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356282 [2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356283 [2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356284 [2011.05.14 00:27:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356285 [2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356286 [2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356287 [2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356288 [2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356289 [2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356290 [2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356291 [2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356292 [2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356293 [2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356294 [2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356295 [2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356296 [2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356297 [2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356298 [2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356299 [2011.05.14 00:26:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356300 [2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356301 [2011.05.14 00:26:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356302 [2011.05.14 00:26:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356303 [2011.05.14 00:26:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356304 [2011.05.14 00:26:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356305 [2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356306 [2011.05.14 00:26:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356307 [2011.05.14 00:26:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356308 [2011.05.14 00:26:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356309 [2011.05.14 00:26:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356310 [2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356311 [2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356312 [2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356313 [2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356314 [2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356315 [2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356316 [2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356317 [2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356318 [2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356319 [2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356320 [2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356321 [2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356322 [2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356323 [2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356324 [2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356325 [2011.05.14 00:26:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356326 [2011.05.14 00:26:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356327 [2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356328 [2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356329 [2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356330 [2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356331 [2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356334 [2011.05.14 00:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356335 [2011.05.14 00:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356336 [2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356337 [2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356338 [2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356339 [2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356340 [2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356341 [2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356342 [2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356343 [2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356344 [2011.05.14 00:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356345 [2011.05.14 00:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356346 [2011.05.14 00:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356347 [2011.05.14 00:26:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356348 [2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356349 [2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356350 [2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356351 [2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356352 [2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356353 [2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356354 [2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356355 [2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356356 [2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356357 [2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356358 [2011.05.14 00:26:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356359 [2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356360 [2011.05.14 00:26:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356361 [2011.05.14 00:26:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356362 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356363 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356364 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356365 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356366 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356367 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356368 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356369 [2011.05.14 00:26:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356370 [2011.05.14 00:26:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356371 [2011.05.14 00:26:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356372 [2011.05.14 00:26:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356373 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356374 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356375 [2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356376 [2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356377 [2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356378 [2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356379 [2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356380 [2011.05.14 00:26:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356381 [2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356382 [2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356383 [2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356384 [2011.05.14 00:26:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356385 [2011.05.14 00:26:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356386 [2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356387 [2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356388 [2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356389 [2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356390 [2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356391 [2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356392 [2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356393 [2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356394 [2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356395 [2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356396 [2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356397 [2011.05.14 00:26:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356398 [2011.05.14 00:26:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356399 [2011.05.14 00:26:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356400 [2011.05.14 00:26:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356401 [2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356402 [2011.05.14 00:26:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356403 [2011.05.14 00:26:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356404 [2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356405 [2011.05.14 00:28:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356406 [2011.05.14 00:28:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356407 [2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356408 [2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356409 [2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356410 [2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356411 [2011.05.14 00:28:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356412 [2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356413 [2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356414 [2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356415 [2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356416 [2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356417 [2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356418 [2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356419 [2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356420 [2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356421 [2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356422 [2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356423 [2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356424 [2011.05.14 00:28:10 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356425 [2011.05.14 00:28:10 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356426 [2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356427 [2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356428 [2011.05.14 00:28:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356429 [2011.05.14 00:28:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356430 [2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356431 [2011.05.14 00:28:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356432 [2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356433 [2011.05.14 00:28:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356434 [2011.05.14 00:28:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356435 [2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356436 [2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356437 [2011.05.14 00:28:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356438 [2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356439 [2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356440 [2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356441 [2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356442 [2011.05.14 00:28:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356443 [2011.05.14 00:28:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356444 [2011.05.14 00:28:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356445 [2011.05.14 00:28:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356446 [2011.05.14 00:28:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356449 [2011.05.14 00:28:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356450 [2011.05.14 00:28:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356451 [2011.05.14 00:28:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356453 [2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356455 [2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356456 [2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356457 [2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356458 [2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356459 [2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356460 [2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356461 [2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356462 [2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356463 [2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356464 [2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356465 [2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356466 [2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356468 [2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356469 [2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356470 [2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356471 [2011.05.14 00:27:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356472 [2011.05.14 00:27:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356473 [2011.05.14 00:27:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356474 [2011.05.14 00:27:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356476 [2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356477 [2011.05.14 00:27:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356478 [2011.05.14 00:27:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356479 [2011.05.14 00:27:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356480 [2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356481 [2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356482 [2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356483 [2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356484 [2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356485 [2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356486 [2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356487 [2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356488 [2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356489 [2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356490 [2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356491 [2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356492 [2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356493 [2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356494 [2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356495 [2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356496 [2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356497 [2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356498 [2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356499 [2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356500 [2011.05.14 00:27:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356501 [2011.05.14 00:27:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356502 [2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356503 [2011.05.14 00:28:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356505 [2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356506 [2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356507 [2011.05.14 00:28:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356508 [2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356509 [2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356510 [2011.05.14 00:28:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356517 [2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356518 [2011.05.14 00:28:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356521 [2011.05.14 00:28:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356522 [2011.05.14 00:28:10 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356526 [2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356527 [2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356528 [2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356529 [2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361746 [2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361765 [2011.05.14 00:28:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361768 [2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361816 [2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361824 [2011.05.14 00:28:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361825 [2011.05.14 00:27:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361828 [2011.05.14 00:27:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361829 [2011.05.14 00:28:00 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00370354 [2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00370355 [2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\CNEuroNT_2011_30 [2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\Logos [2010.11.12 22:48:32 | 000,000,000 | ---D | M] -- C:\ProgramData\HP\Installer [2010.11.12 23:10:39 | 000,000,000 | ---D | M] -- C:\ProgramData\HP\Installer\Temp [2011.02.25 00:13:44 | 000,000,000 | ---D | M] -- C:\ProgramData\LittleGamesCompany\NightmareOnThePacific_CollectorsEdition [2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX\Common [2012.05.30 00:19:38 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX\Foto_Designer_7 [2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX\Common\Communities [2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX\Common\News Feed Info [2011.04.14 17:40:43 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX\Foto_Designer_7\7.0 |
|
24.10.2012, 18:49
| #18 |
| | PC nach Trojanerbefall wirklich sauber? Teil 2:
__________________Code:
ATTFilter [2010.10.17 17:59:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2011.06.16 20:04:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2010.12.13 04:26:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
[2010.12.12 17:48:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nice PDF Compressor
[2012.02.04 19:32:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Blender
[2011.08.06 23:52:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
[2010.10.05 22:17:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
[2011.08.23 21:57:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2012.03.02 21:44:04 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2009.07.14 06:41:57 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
[2011.08.09 15:19:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2009.07.14 09:48:45 | 000,000,000 | RH-D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
[2011.08.14 04:50:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Valve
[2010.10.05 19:30:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2012.09.10 23:19:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waldmeister Sause Ballermann XS
[2010.10.09 22:39:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.08.09 13:24:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WordToPDF
[2012.10.17 22:20:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zylom
[2009.07.14 06:42:30 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility
[2009.07.14 06:42:29 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools
[2010.10.05 19:15:34 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC
[2009.07.14 06:46:36 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell
[2011.08.09 13:06:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert Image To PDF\Example Conversion Jobs
[2011.08.09 13:06:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert Image To PDF\Help
[2011.08.09 13:06:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert Image To PDF\Help\Additional Conversion Tools
[2012.07.13 22:24:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative\Creative WebCam
[2012.10.20 09:29:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Tools
[2010.10.05 22:30:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Tools
[2010.12.13 04:26:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 10
[2010.12.13 04:26:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 10\Handbücher
[2010.12.13 04:26:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 10\Handbücher\Nero ControlCenter Handbücher
[2011.08.14 04:50:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Valve\Steam
[2012.10.06 17:57:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive
[2012.10.06 17:57:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportQueue
[2011.11.25 02:08:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_74ec4b9d4ec83a35af0b04bb94097803020458d_04aed052
[2011.11.25 02:08:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_74ec4b9d4ec83a35af0b04bb94097803020458d_04aef07d
[2011.11.25 02:08:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af0405
[2011.11.25 02:08:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af17ac
[2011.11.25 02:08:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af2b24
[2011.11.25 02:08:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af34d9
[2011.11.25 02:08:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af3e9d
[2011.11.25 02:08:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af4851
[2011.11.25 02:08:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af5206
[2012.10.06 17:57:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_TuneUpUtilitiesS_8d14d31c7991889751ba265d26e323166b08e58_049c767d
[2011.11.25 02:08:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_6.1.7600.16385_17f36b1270c6d8ae3c5bb4b951d855d44514b4_04af69d3
[2011.11.25 02:08:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_6.1.7600.16385_7af5b667aece2d9bf3901c29203f1344b9b35e4f_04af7db9
[2011.12.02 17:14:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_6.1.7600.16385_815e9586b06f6f2ab1c6be44c2b06399f7ef6e4e_04bce81e
[2011.12.02 17:14:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_6.1.7600.16385_de418d6c9fd330dfc5d343e86be259a35bc1e3_04bcfb77
[2012.07.13 22:23:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_demo32.exe_f6b7bcc615555b6ce9697d9e8ad1e246ee284e_16df7147
[2011.11.25 02:09:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_4241_enu_w2k_xp._d04ec2d96e46333b84593248b938ff876af472_04af9170
[2011.11.25 02:09:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.3.7600.16385_22a967544ad93cc17e8a851ea151dd8b291d94_04af9c0f
[2011.11.25 02:09:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.3.7600.16385_314dba050848b59681e9c7fb2de59bda0fea8f0_04afa630
[2011.11.25 02:09:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.3.7600.16385_314dba050848b59681e9c7fb2de59bda0fea8f0_04afafe5
[2011.11.25 02:09:15 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.3.7600.16385_ea4ffeefbcb2e92c67e4415830263c11e0f3da7f_04afbfe3
[2011.11.25 02:09:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.3.7600.16385_f532f6c89e72ddbcd24855325bd9e639dd417ddb_04afc9a7
[2011.11.25 02:08:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_80072ee2_dfe7f2364827e3178b198f8adf5f79af1838fb3_036973ed
[2011.11.25 02:08:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_8024402c_a728027ac40dacf25be0b7dcff722b28db819_03949cec
[2012.07.13 22:28:04 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_CtDrvIns.exe_7a9d87cc72e2838c3d3d5ac1ef05a3148de3c98_0fbbc2de
[2011.11.25 02:09:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Macromedia_Flash_75108bb91569bcca25d820189b41a8e58495d62_04afd3c8
[2011.11.25 02:09:24 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft Corpor_191f28d52b3f46d0b12439531b5518b4b6c4d0c0_04afe2fb
[2011.12.02 17:42:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft Corpor_bfaaf118574187e22f1f1a82cfa0cf3a35733e_0c4b2e22
[2011.12.02 17:13:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft Corpor_bfaaf118574187e22f1f1a82cfa0cf3a35733e_0ed095f7
[2011.12.02 17:30:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft Corpor_bfaaf118574187e22f1f1a82cfa0cf3a35733e_10479b9b
[2011.11.25 02:09:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a00085
[2011.11.25 02:09:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a00a49
[2011.11.25 02:09:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a0141d
[2011.11.25 02:09:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a01dd1
[2011.11.25 02:09:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a027a5
[2011.11.25 02:09:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a03169
[2011.11.25 02:09:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04afecee
[2011.11.25 02:09:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04aff6b2
[2011.11.25 02:09:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_54f9284bc7537a39acaef3b8d2616f34f8fd4a86_04a03b3d
[2011.11.25 02:09:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_54f9284bc7537a39acaef3b8d2616f34f8fd4a86_04a04510
[2011.11.25 02:09:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_54f9284bc7537a39acaef3b8d2616f34f8fd4a86_04a04ed4
[2011.11.25 02:09:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_55f3b0fe6ba96fe294402a76bf6480aa117ef252_04a058a8
[2011.11.25 02:09:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a0628b
[2011.11.25 02:09:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a06c6e
[2011.11.25 02:10:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a07623
[2011.11.25 02:10:04 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a07fe7
[2011.11.25 02:10:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a0899b
[2011.11.25 02:10:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a0935f
[2011.11.25 02:10:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a09d14
[2011.11.25 02:10:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a0a6c8
[2011.11.25 02:10:17 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a0b08c
[2011.11.25 02:10:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0ba50
[2011.11.25 02:10:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0c404
[2011.11.25 02:10:24 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0cdc8
[2011.11.25 02:10:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0d829
[2011.11.25 02:10:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0e1dd
[2011.11.25 02:10:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0eba1
[2011.11.25 02:10:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0f565
[2011.11.25 02:10:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_WUNX_PCDrv_A2_1__f91f3f4fc0ac7fe2c258ddd7c2f8efb5f8ef76_04a0ff19
[2011.11.25 02:10:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_x86_d8dda76ece474b3d189b376fb74a062abc2942d_04a108ce
[2012.07.13 21:14:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\WLSetup\CabLogs
[2012.07.13 21:09:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\WLSetup\Logs
[2009.07.14 06:52:30 | 000,000,000 | -H-D | M] -- C:\ProgramData\Microsoft\WwanSvc\Profiles
[2010.12.13 04:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero\Agent
[2010.12.13 04:26:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero\Nero 10
[2010.12.13 04:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero\Agent\Repository
[2010.12.13 04:26:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero\Nero 10\OnlineServices
[2010.12.13 04:26:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero\Nero 10\OnlineServices\PushMarketingFeeds
[2010.10.17 18:51:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Office Genuine Advantage\data
[2010.10.08 00:11:21 | 000,000,000 | ---D | M] -- C:\ProgramData\PC Drivers HeadQuarters\Driver Detective
[2011.06.24 21:34:21 | 000,000,000 | ---D | M] -- C:\ProgramData\PlayFirst\wedding-dash-4-ever
[2012.03.02 21:44:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps
[2010.10.05 20:55:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins
[2012.02.25 21:18:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\{AA59DDE4-B672-4621-A016-4C248204957A}
[2010.10.05 19:30:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\{D103C4BA-F905-437A-8049-DB24763BBE36}
[2011.07.15 23:55:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}
[2010.12.10 23:39:36 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
[2012.03.02 21:43:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
[2012.07.13 22:11:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login
[2012.07.13 22:11:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login\css
[2012.03.02 21:44:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login\images
[2012.07.13 22:11:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login\js
[2012.07.13 22:11:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login\languages
[2012.07.13 22:11:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login\css\platform
[2010.11.20 02:06:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Local Cache
[2010.10.05 19:30:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins
[2010.10.05 19:30:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Local Cache\Categories
[2010.10.05 20:55:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8
[2010.10.30 02:01:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games
[2010.10.05 20:55:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Local Cache
[2010.10.17 21:11:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\7FF10FD1D9E1467181402A0155363CB2
[2010.10.30 00:27:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\CA2E420582B3484EA454CB5E7A1C8892
[2010.10.30 02:01:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\EB659AD2FCC647F38E82982293E1663C
[2010.10.17 21:11:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\7FF10FD1D9E1467181402A0155363CB2\help
[2010.10.17 21:11:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\7FF10FD1D9E1467181402A0155363CB2\help\enu
[2010.10.17 21:11:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\7FF10FD1D9E1467181402A0155363CB2\help\enu\images
[2010.10.30 00:27:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\CA2E420582B3484EA454CB5E7A1C8892\help
[2010.10.30 00:27:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\CA2E420582B3484EA454CB5E7A1C8892\help\enu
[2010.10.30 00:27:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\CA2E420582B3484EA454CB5E7A1C8892\help\enu\images
[2010.10.30 02:01:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\EB659AD2FCC647F38E82982293E1663C\help
[2010.10.30 02:01:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\EB659AD2FCC647F38E82982293E1663C\help\enu
[2010.10.30 02:01:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\EB659AD2FCC647F38E82982293E1663C\help\enu\images
[2010.10.05 19:28:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Sun\Java
[2010.10.05 19:28:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Sun\Java\Java Update
[2012.09.15 23:52:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Top Evidence\WitchHuntersStolenBeautyCE
[2012.10.07 01:47:16 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software\TU2013
[2012.10.17 17:31:00 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software\TuneUp Utilities
[2012.10.17 17:31:22 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software\TuneUp Utilities 2013
[2012.10.17 17:30:04 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software\TuneUp Utilities\Program Statistics
[2010.11.12 22:42:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Uniblue\DriverScanner
[2012.04.07 04:36:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\Games
[2012.04.07 04:36:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer
[2012.04.07 04:36:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\Games\TextExpress2Web
[2012.04.07 04:36:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\Games\TextExpress2Web\players
[2012.04.07 04:43:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom
[2012.04.07 04:44:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\GTBExtension
[2012.04.07 04:36:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\MyZylomExtension
[2012.04.07 04:36:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2
[2010.12.05 17:31:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\ZylomDeluxeInstaller
[2012.04.07 04:36:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\ZylomExtension
[2012.04.07 04:40:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE
[2012.04.07 04:36:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media
[2012.04.07 04:36:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\data
[2012.04.07 04:36:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\fonts
[2012.04.07 04:36:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images
[2012.04.07 04:36:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\properties
[2012.04.07 04:36:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\sound
[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\dialogs
[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\gamescene
[2012.04.09 03:23:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\loadingscene
[2012.04.07 04:36:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\dialogs\advert
[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\dialogs\help
[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\dialogs\hint
[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\gamescene\effects
[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\gamescene\gui
[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\gamescene\levelend
[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\gamescene\train
< %allusersprofile%\Application Data\*. /s >
< %appdata%\*. /s >
[2011.08.06 21:35:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe
[2011.02.24 23:26:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AlawarSouthpoint
[2010.12.17 03:06:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer
[2012.10.17 17:38:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG
[2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG2012
[2012.09.15 22:39:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Boomzap
[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR120TWN
[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR330TWN
[2012.01.15 19:17:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Creative
[2010.12.13 05:02:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\DeepBurner
[2012.09.15 17:21:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\ERS Game Studios
[2011.03.20 03:37:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Floodlight Games
[2010.10.05 19:26:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit
[2010.10.05 19:26:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit Software
[2011.02.23 23:27:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GameHouse
[2011.02.25 01:20:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GamersDigital
[2011.01.31 18:04:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN
[2011.03.20 01:12:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Gogii
[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Identities
[2010.10.05 19:27:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\IrfanView
[2011.02.25 00:13:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\LittleGamesCompany
[2010.10.05 21:15:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia
[2011.04.14 17:40:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MAGIX
[2012.10.16 19:11:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Malwarebytes
[2009.07.14 09:48:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Media Center Programs
[2011.07.11 22:29:58 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft
[2010.10.05 19:26:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla
[2012.09.15 15:31:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MumboJumbo
[2010.12.13 04:28:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Nero
[2010.10.05 19:29:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera
[2012.09.15 18:18:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Orneon
[2012.05.29 22:03:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\PhotoScape
[2011.06.24 21:34:21 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\PlayFirst
[2012.09.10 22:42:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\RenPy
[2011.02.23 20:35:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skip-Bo
[2012.10.17 21:08:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype
[2010.12.11 01:00:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\skypePM
[2011.08.09 13:06:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Softinterface, Inc
[2012.05.29 21:58:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall
[2012.09.15 23:52:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Top Evidence
[2012.10.06 01:30:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software
[2010.11.12 22:42:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Uniblue
[2012.09.15 14:08:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games
[2011.03.20 03:55:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\VampireSaga
[2011.11.30 03:23:05 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\vlc
[2012.10.20 15:18:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp
[2010.10.09 22:42:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\WinRAR
[2011.08.09 13:24:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\WordToPDF
[2011.08.06 23:17:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\XnView
[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom
[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe PDF
[2011.01.13 04:57:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5
[2011.01.13 05:00:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\AIR
[2011.01.13 05:03:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CameraRaw
[2011.08.06 23:58:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Color
[2011.01.13 04:53:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager
[2011.01.13 04:52:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\ExtendScript Toolkit
[2011.01.13 04:52:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Extension Manager CS5
[2012.07.22 03:14:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Flash Player
[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Headlights
[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Linguistics
[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\LogTransport2
[2011.08.06 21:35:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Plugins
[2011.01.13 04:51:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\SwitchBoard
[2012.10.22 00:21:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0
[2011.01.23 01:33:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\Collab
[2011.07.12 13:11:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\Forms
[2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts
[2012.10.22 00:21:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\JSCache
[2012.10.21 22:50:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\Security
[2011.07.11 22:35:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\Stamps
[2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe PDF\Settings
[2011.08.06 23:58:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Adobe Photoshop CS5 Settings
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets
[2011.01.13 04:57:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Adobe Photoshop CS5 Settings\WorkSpaces
[2011.01.13 05:10:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Adobe Photoshop CS5 Settings\WorkSpaces (Modified)
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Actions
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Black and White
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Brushes
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Channel Mixer
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Color Swatches
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Contours
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Curves
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Custom Shapes
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Duotones
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Exposure
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Gradients
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\HDR Toning
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Hue and Saturation
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Keyboard Shortcuts
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Levels
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Lights
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Materials
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Menu Customization
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Patterns
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Render Settings
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Selective Color
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Styles
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Tools
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Volumes
[2011.01.13 05:00:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\AIR\CRLCache
[2011.01.13 04:53:01 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\AIR\Updater
[2011.01.13 05:03:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CameraRaw\Defaults
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Color\Proofing
[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Color\Settings
[2011.01.13 04:57:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\cache
[2011.01.13 04:52:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\configuration
[2011.01.13 04:53:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\extensions
[2011.01.13 04:57:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\logs
[2011.01.13 04:52:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\preference
[2011.01.13 04:52:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\StageManager
[2011.01.13 04:57:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\cache\ConnectionsHome
[2011.01.13 04:57:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\cache\ExtensionManifest
[2011.01.13 04:57:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\ExtendScript Toolkit\3.5
[2012.07.22 03:14:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Flash Player\AFCache
[2010.10.05 21:15:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Flash Player\AssetCache
[2012.10.19 00:03:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Flash Player\AssetCache\7TSBTUSB
[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Linguistics\Dictionaries
[2011.08.06 21:35:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Plugins\Adobe Dicom CS5
[2011.08.06 21:36:28 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Plugins\Adobe Dicom CS5\Photoshop
[2011.02.24 23:27:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AlawarSouthpoint\Dancing Craze
[2012.08.10 02:46:18 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer\iTunes
[2012.08.10 02:16:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer\Logs
[2012.08.10 02:16:23 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer\Preferences
[2012.08.10 02:46:18 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer\iTunes\Cookies
[2010.12.17 02:31:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer\iTunes\iTunes Plug-ins
[2012.10.17 17:39:28 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG\AWL2012
[2012.10.17 17:43:18 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG\AWL2012\Backups
[2012.10.17 17:39:48 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG\AWL2012\Dashboard
[2012.10.17 17:39:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG\AWL2012\StartUp Manager
[2012.10.17 17:39:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG\AWL2012\TuningIndex
[2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG2012\cfgall
[2012.09.15 22:39:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Boomzap\Awakening_SkywardCastle
[2012.09.15 23:32:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Boomzap\Awakening_SkywardCastle\CE
[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR120TWN\Images
[2012.01.15 19:17:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Creative\Monitor
[2010.10.05 21:41:00 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Creative\WebCam Center
[2012.09.15 17:21:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\ERS Game Studios\Gothic Fiction
[2012.09.15 18:02:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\ERS Game Studios\Gothic Fiction\CE
[2012.09.15 17:21:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\ERS Game Studios\Gothic Fiction\CE\data
[2011.03.20 03:37:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Floodlight Games\SED
[2011.03.20 03:39:12 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Floodlight Games\SED\Saves
[2010.12.14 16:15:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit Software\Foxit Reader
[2010.10.05 19:26:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit\images
[2011.02.23 23:27:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GameHouse\Campfire Legends II
[2011.02.25 01:20:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GamersDigital\Jack the Ripper
[2011.01.30 15:59:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\Devices
[2011.05.14 00:03:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\Map Update
[2011.01.31 18:04:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\MapInstall
[2011.05.14 00:32:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\Maps
[2011.01.31 18:03:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\MapSource
[2011.01.31 18:04:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\MapInstall\TileCache
[2011.05.14 00:33:09 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\MapSource\TileCache
[2011.03.20 01:12:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Gogii\Trapped
[2011.03.20 01:12:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Gogii\Trapped\Zylom
[2011.03.20 02:11:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Gogii\Trapped\Zylom\data
[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Identities\{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVNK}
[2010.12.03 23:45:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Identities\{000HQ7FF-AD7A-3FG3-4A90-24BL1LF8IVV1}
[2010.10.05 19:18:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Identities\{72EBA75F-4626-4E3A-BF7C-2A65325BC5FF}
[2011.02.25 00:16:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\LittleGamesCompany\NightmareOnThePacific_CollectorsEdition
[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player
[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\#SharedObjects
[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com
[2012.10.24 08:12:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\QZR24LPR
[2012.10.24 08:26:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\QZR24LPR\aka-cdn-ns.adtech.de
[2012.10.24 18:55:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\QZR24LPR\s.ytimg.com
[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support
[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer
[2012.10.24 08:12:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
[2012.10.24 08:12:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#aka-cdn-ns.adtech.de
[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com
[2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MAGIX\Foto_Designer_7
[2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MAGIX\Foto_Designer_7\UserData
[2012.10.16 19:11:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware
[2012.10.20 10:24:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs
[2012.10.16 20:35:16 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine
[2011.07.12 13:08:05 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Access
[2010.10.06 00:30:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\AddIns
[2010.11.29 00:28:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Clip Organizer
[2010.10.05 21:21:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\CLR Security Config
[2010.10.05 19:18:42 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Credentials
[2010.10.05 19:28:43 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Crypto
[2010.10.08 02:46:21 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\eHome
[2012.09.23 15:26:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Excel
[2010.12.13 05:03:07 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\HTML Help
[2010.10.17 23:32:33 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IdentityCRL
[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IME12
[2011.07.11 22:29:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IMJP10
[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IMJP12
[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IMJP8_1
[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IMJP9_0
[2011.10.19 18:23:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer
[2010.10.05 19:20:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\MMC
[2012.10.17 21:08:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\MSN Messenger
[2010.10.05 19:19:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Network
[2012.10.17 21:08:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Office
[2011.01.27 14:39:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\OIS
[2011.02.19 23:00:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\PowerPoint
[2012.10.23 21:41:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Proof
[2010.10.05 19:18:51 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Protect
[2012.02.18 02:07:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Publisher
[2012.10.17 20:23:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Speech
[2010.10.05 19:19:39 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\SystemCertificates
[2010.10.25 16:25:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Templates
[2012.10.23 22:11:12 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Vorlagen
[2010.10.05 19:18:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows
[2012.10.23 22:11:12 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Word
[2010.12.12 18:14:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312
[2010.10.05 19:28:43 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Crypto\RSA
[2012.10.17 22:20:54 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-4070557579-1729641792-2656704333-1001
[2011.03.15 20:03:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Excel\XLSTART
[2012.07.13 21:11:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IdentityCRL\production
[2012.10.16 23:07:40 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
[2012.10.17 21:08:29 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\UserData
[2010.10.05 21:30:26 | 000,000,000 | -H-D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2010.10.05 22:19:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts
[2012.10.06 01:12:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu
[2012.10.17 21:22:11 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar
[2010.10.05 22:19:38 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3
[2012.10.17 21:08:29 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low
[2010.10.14 22:15:48 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\MSN Messenger\3024787189
[2010.10.05 19:19:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Network\Connections
[2010.10.05 19:19:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Network\Connections\Pbk
[2010.10.05 19:19:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk
[2012.10.24 08:49:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Office\Zuletzt verwendet
[2012.09.10 19:28:21 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Protect\S-1-5-21-4070557579-1729641792-2656704333-1001
[2012.10.17 20:23:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Speech\Files
[2012.10.17 20:23:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Speech\Files\UserLexicons
[2010.10.05 19:19:39 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\SystemCertificates\My
[2010.10.05 19:19:39 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates
[2010.10.05 19:19:39 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs
[2010.10.05 19:19:39 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs
[2012.10.20 12:09:05 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Cookies
[2012.10.17 22:17:49 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\IECompatCache
[2012.10.17 21:22:21 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\IETldCache
[2011.09.17 12:59:28 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Libraries
[2009.07.14 04:04:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Network Shortcuts
[2009.07.14 04:04:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
[2012.10.17 22:17:52 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\PrivacIE
[2012.10.22 01:30:53 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Recent
[2012.05.30 00:19:57 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\SendTo
[2012.10.06 01:39:35 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu
[2009.07.14 04:04:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Templates
[2011.01.26 06:29:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Themes
[2012.10.17 21:08:28 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Cookies\Low
[2012.10.17 17:36:28 | 000,000,000 | -H-D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\IECompatCache\Low
[2011.01.26 03:43:11 | 000,000,000 | -H-D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\IETldCache\Low
[2011.01.26 03:43:11 | 000,000,000 | -H-D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\PrivacIE\Low
[2012.10.21 22:50:16 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations
[2012.10.24 18:55:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations
[2010.10.05 19:18:40 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
[2012.10.17 22:20:00 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
[2009.07.14 06:42:04 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.09.17 12:59:28 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012.09.15 22:37:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Awakening - The Skyward Castle Collector's Edition
[2011.02.25 01:15:06 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2011.09.15 23:45:11 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2010.10.05 19:27:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
[2009.07.14 06:37:42 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012.02.04 19:32:37 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Blender
[2011.01.23 01:40:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge
[2011.08.07 00:30:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\pdfFactory
[2011.09.17 12:59:28 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.08.14 04:50:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Valve
[2010.10.05 22:16:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
[2010.10.09 22:39:12 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2009.07.14 06:41:43 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility
[2010.10.05 19:19:00 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools
[2011.08.14 04:50:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Valve\Steam
[2010.10.06 00:30:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Word\STARTUP
[2010.10.05 19:26:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Extensions
[2010.10.05 19:26:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox
[2010.10.05 19:26:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2011.09.07 18:18:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Crash Reports
[2010.10.05 19:26:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles
[2011.08.14 11:49:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Crash Reports\pending
[2012.10.21 17:57:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default
[2011.09.15 17:09:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\bookmarkbackups
[2010.10.05 19:26:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\chrome
[2011.09.15 21:35:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\extensions
[2011.08.19 21:56:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\minidumps
[2010.10.05 22:32:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.10.05 22:32:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}\chrome
[2012.09.15 15:31:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MumboJumbo\Angelica Weaver - Catch Me When You Can CE
[2010.12.14 20:21:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Nero\Nero 10
[2010.12.16 02:53:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Nero\Nero 10\Nero BurnLite
[2010.12.13 04:39:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Nero\Nero 10\OnlineServices
[2011.01.31 21:51:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Nero\Nero 10\OnlineServices\FeedManager
[2012.10.24 18:55:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera
[2011.02.22 13:36:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\dictionaries
[2012.10.17 21:08:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\pstorage
[2012.10.24 18:55:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\sessions
[2010.10.05 19:29:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\styles
[2012.09.11 20:56:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\toolbar
[2010.10.05 19:29:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\webserver
[2010.10.05 19:29:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\styles\user
[2012.09.15 18:18:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Orneon\The Agency of Anomalies - The Last Performance
[2012.09.15 18:55:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Orneon\The Agency of Anomalies - The Last Performance\CE
[2011.06.24 21:38:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\PlayFirst\wedding-dash-4-ever
[2012.09.10 22:59:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\RenPy\MagicalDiaryHorseHall
[2010.10.05 21:27:37 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\Content
[2012.09.29 21:23:31 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\DbTemp
[2012.09.29 21:23:31 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987
[2010.10.05 20:55:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\My Skype Received Files
[2012.06.25 21:07:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\Pictures
[2011.12.07 01:08:13 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577
[2012.10.06 01:27:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_dynco
[2011.07.15 23:56:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_html
[2012.10.06 01:27:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_httpfe
[2011.12.13 21:39:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya
[2012.07.13 23:38:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync
[2010.10.05 20:55:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\httpfe
[2010.10.05 20:55:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\voicemail
[2010.11.28 03:07:56 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\03
[2011.12.16 22:44:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\05
[2010.10.29 21:25:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\06
[2012.02.25 21:29:31 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\08
[2011.02.28 20:13:09 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\09
[2012.04.06 19:45:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\0c
[2012.01.15 18:47:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\0e
[2011.02.18 14:33:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\13
[2011.03.10 23:47:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\15
[2011.08.04 13:44:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\17
[2011.03.06 17:21:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\1d
[2011.02.28 20:19:06 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\22
[2011.02.25 22:12:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\28
[2012.06.25 19:33:28 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\2b
[2011.03.02 21:51:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\2d
[2011.03.06 16:46:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\30
[2011.01.28 21:04:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\31
[2011.03.05 21:45:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\33
[2011.02.18 14:52:05 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\34
[2011.02.28 20:19:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\38
[2011.02.25 22:12:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\3d
[2011.01.16 00:18:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\3e
[2011.03.06 16:46:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\43
[2012.07.13 23:31:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\4a
[2012.04.04 19:31:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\4d
[2010.12.01 23:52:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\53
[2011.06.08 03:04:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\54
[2011.07.16 02:57:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\56
[2011.02.18 14:33:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\57
[2011.02.18 14:33:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\5b
[2011.03.12 02:11:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\5e
[2011.02.03 23:23:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\5f
[2011.03.05 21:45:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\60
[2012.06.25 19:09:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\61
[2011.06.08 03:04:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\65
[2012.04.28 18:30:23 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\6d
[2011.02.03 23:23:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\6f
[2011.03.05 21:46:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\7d
[2011.03.06 16:46:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\82
[2011.02.28 20:19:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\83
[2011.06.08 03:04:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\84
[2010.11.28 03:07:56 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\86
[2011.02.08 23:19:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\89
[2010.11.29 17:43:21 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\8a
[2011.03.12 01:11:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\8e
[2012.07.13 23:38:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\94
[2010.12.12 01:27:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\a0
[2011.02.22 18:04:33 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\a1
[2011.03.04 19:09:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b0
[2011.03.04 21:33:06 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b2
[2011.02.18 01:20:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b4
[2011.07.16 00:05:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b5
[2011.03.06 17:18:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b8
[2011.03.02 21:51:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b9
[2010.10.07 21:16:33 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\ba
[2012.04.15 21:30:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\bc
[2011.02.28 20:13:09 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\bd
[2012.03.01 22:55:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\c1
[2011.02.06 02:52:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\c2
[2010.10.10 23:02:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\c3
[2011.02.18 14:33:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\c8
[2011.02.18 01:20:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\c9
[2012.01.13 16:16:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\ca
[2011.02.03 23:23:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\cf
[2010.11.18 22:44:07 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\d0
[2012.06.25 19:33:28 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\d2
[2012.05.01 21:20:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\d4
[2010.10.31 02:00:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\d6
[2011.02.22 18:04:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\d9
[2011.06.08 03:04:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\db
[2010.10.29 21:26:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\df
[2011.03.06 17:18:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\e4
[2011.07.24 17:17:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\e6
[2010.11.23 00:59:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\eb
[2010.11.18 22:44:07 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\f0
[2011.02.16 19:51:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\f1
[2012.05.07 23:08:48 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\ff
[2011.12.06 21:13:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync
[2011.09.30 23:09:18 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\httpfe
[2011.09.30 23:06:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\voicemail
[2011.10.12 13:35:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\02
[2011.11.15 22:59:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\0f
[2011.10.12 13:35:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\10
[2011.10.29 20:47:37 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\1a
[2011.10.03 19:29:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\1e
[2011.11.03 14:16:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\23
[2011.10.05 10:16:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\47
[2011.11.03 14:05:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\4c
[2011.10.04 12:21:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\4e
[2011.10.04 12:19:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\56
[2011.10.07 20:57:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\66
[2011.10.03 19:29:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\77
[2011.09.30 23:08:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\7a
[2011.11.30 19:56:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\7b
[2011.12.06 19:08:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\7d
[2011.10.03 19:29:48 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\82
[2011.12.06 16:24:01 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\8a
[2011.10.12 13:35:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\96
[2011.12.06 21:13:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\9e
[2011.10.25 19:53:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\a1
[2011.11.21 13:00:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\ae
[2011.10.05 16:13:09 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\b5
[2011.10.12 14:33:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\b9
[2011.12.06 21:13:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\ca
[2011.10.03 19:29:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\cc
[2011.11.03 14:05:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\ce
[2011.12.06 19:11:11 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\d4
[2011.11.09 18:46:32 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\da
[2011.11.16 19:14:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\ea
[2011.10.03 19:29:31 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\f2
[2011.10.07 20:16:23 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\f3
[2011.10.29 20:47:37 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\f5
[2011.10.12 13:35:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\fe
[2011.07.15 23:56:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_html\skypehome
[2011.07.15 23:56:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_html\skypehome\i
[2011.07.15 23:56:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_html\skypehome\i\production
[2011.12.13 21:22:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync
[2011.10.03 19:29:12 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\httpfe
[2011.10.03 18:47:16 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\voicemail
[2011.12.06 19:21:11 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\07
[2011.11.15 22:14:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\0c
[2011.11.09 18:47:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\0d
[2011.10.25 19:51:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\1c
[2011.10.25 20:33:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\31
[2011.11.01 22:34:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\32
[2011.10.22 23:58:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\53
[2011.10.07 20:08:05 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\5c
[2011.10.03 19:31:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\5e
[2011.11.15 20:48:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\6e
[2011.11.16 18:44:07 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\7d
[2011.11.13 19:39:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\8d
[2011.11.28 15:25:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\98
[2011.12.12 20:39:56 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\a1
[2011.10.07 15:01:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\aa
[2011.12.06 19:21:32 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\af
[2011.10.03 19:31:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\b0
[2011.10.12 15:35:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\bc
[2011.10.22 23:58:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\d1
[2011.11.28 15:25:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\d4
[2011.12.13 21:22:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\da
[2011.10.03 18:48:00 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\f8
[2011.10.07 20:17:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\fc
[2011.08.09 13:06:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Softinterface, Inc\Convert Image To PDF
[2012.05.29 21:58:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall\PhotoScape
[2012.05.29 21:58:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall\PhotoScape\%ProgramFilesDir%
[2012.05.29 21:58:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall\PhotoScape\SKEL
[2012.05.29 21:58:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall\PhotoScape\%ProgramFilesDir%\PhotoScape
[2012.05.29 21:59:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall\PhotoScape\%ProgramFilesDir%\PhotoScape\frame
[2012.09.15 23:52:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Top Evidence\WitchHuntersStolenBeautyCE
[2012.10.06 01:40:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software\TU2013
[2012.10.06 01:30:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software\TU2013\Backups
[2012.10.06 01:40:18 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software\TU2013\Dashboard
[2012.10.06 01:40:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software\TU2013\StartUp Manager
[2012.10.06 01:36:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software\TU2013\TuningIndex
[2010.11.12 22:42:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Uniblue\DriverScanner
[2010.11.12 22:42:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Uniblue\DriverScanner\drivers
[2010.11.12 22:42:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Uniblue\DriverScanner\_temp
[2012.09.15 14:08:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games\Mystery Heritage - Sign of the Spirit
[2012.09.15 14:08:21 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games\Mystery Heritage - Sign of the Spirit\CE
[2012.09.15 14:08:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games\Mystery Heritage - Sign of the Spirit\CE\Players
[2012.09.15 14:46:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games\Mystery Heritage - Sign of the Spirit\CE\Players\1
[2011.03.20 03:56:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\VampireSaga\eng
[2011.03.20 03:56:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\VampireSaga\eng\profiles
[2012.10.17 21:08:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\vlc\art
[2011.12.14 04:52:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins
[2011.12.14 04:52:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\Gracenote
[2012.10.20 15:18:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\ml
[2010.10.05 23:22:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\omBrowser
[2010.10.05 23:22:28 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\ml\cache
[2010.10.05 23:22:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\omBrowser\cache
[2010.10.05 23:22:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\omBrowser\cache\thumbnails
[2010.12.03 23:45:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2080
[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2573
[2010.12.03 23:45:01 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\ZylomGamesPlayer
[2010.12.03 23:45:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2080\zgw
[2010.12.03 23:45:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2080\zgw\ads
[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2573\zgw
[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2573\zgw\ads
< %systemroot%\Installer\*. /s >
[2010.10.05 19:23:24 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$
[2011.01.13 04:51:17 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
[2011.08.09 15:19:45 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}
[2011.01.13 04:51:01 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}
[2011.01.13 04:52:58 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}
[2010.12.13 04:26:20 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}
[2012.10.17 20:10:52 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{26A24AE4-039D-4CA4-87B4-2F83217009FF}
[2010.10.05 19:26:31 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{3D3E663D-4E7E-4577-A560-7ECDDD45548A}
[2010.10.08 00:11:25 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{4640FDE1-B83A-4376-84ED-86F86BEE2D41}
[2011.01.31 18:01:59 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{499A37A3-9A0D-4929-AA3E-588FA230D66F}
[2010.12.13 04:26:34 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}
[2011.08.23 21:57:51 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{57752979-A1C9-4C02-856B-FBB27AC4E02C}
[2011.01.13 04:51:23 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
[2010.12.13 04:26:39 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
[2011.01.30 15:59:14 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}
[2011.08.23 22:00:34 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{69995C7A-062A-4A90-A4DF-8C22895DF522}
[2011.08.23 21:56:45 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{6A3F9D74-BB80-4451-8CA1-4B3A857F1359}
[2010.12.13 04:26:12 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{6DFB899F-17A2-48F0-A533-ED8D6866CF38}
[2011.08.23 21:55:50 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
[2010.12.13 04:26:06 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}
[2010.12.13 14:02:37 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
[2011.06.16 20:04:20 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
[2011.06.11 00:51:28 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}
[2011.06.11 00:51:38 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}
[2011.01.13 04:50:57 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
[2010.12.13 04:26:28 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}
[2012.10.16 20:42:52 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{AC76BA86-7AD7-1031-7B44-AA1000000001}
[2011.01.30 15:59:15 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{B1EE1CC5-6CED-4801-BFFF-8454F21A245A}
[2011.08.23 21:58:54 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{C23CD6DA-1958-43A5-ADD0-59396572E02E}
[2011.08.23 21:57:41 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{C9E14402-3631-4182-B377-6B0DFB1C0339}
[2011.08.23 21:58:35 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{D03482C5-9AD8-496D-B388-692AE04C93AF}
[2011.01.13 04:51:14 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}
[2011.01.13 04:51:10 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}
[2010.10.05 19:39:03 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{DA97BDF9-BC72-46FD-8E76-427F2BB951EE}
[2012.07.13 21:13:44 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}
[2012.07.18 20:00:48 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
[2010.12.13 14:02:23 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
[2010.11.12 23:10:01 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{FD27D456-ED8A-4027-A1E4-BBF95FAF4799}
[2012.10.17 17:31:22 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed
[2010.10.26 21:45:45 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC
[2010.10.17 23:32:00 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021599B0090400000000000F01FEC
[2011.09.18 13:30:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC
[2012.07.13 21:13:56 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0EE4E59FE6C037246B9B19DFF670D167
[2012.07.13 21:13:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\11F12B5E3396B0E42AC597363E0CD711
[2011.04.13 18:17:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\20B91A1DE71869244AB57058F37DD475
[2011.04.13 18:17:35 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\25BBB29DFF28DE24A8C3E460F249A47B
[2010.12.13 14:02:21 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\2FA726BAE7C9DBD418B6B362648BE198
[2011.10.19 18:21:32 | 000,000,000 | ---D | M] -- C:\Windows\Installer\$PatchCache$\Managed\3339386520806D04A905BE9BBEB25F14
[2012.07.13 21:12:20 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3D04254D3B6B9FF42B3445CE3E1E0066
[2011.06.11 00:48:26 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\47D9F3A608BB1544C81AB4A358F73195
[2012.07.13 21:14:02 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\4CD7BA2CE9849EB488A72562F2ABBD0E
[2011.04.13 18:14:52 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A
[2012.07.13 21:13:50 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\61B33B7353527E949809236678800A3A
[2011.06.24 13:45:22 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\689C057F0135A5A3598FE47CC1A80CC1
[2010.10.05 19:25:15 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA71301B7449A0300000010
[2011.11.30 03:23:06 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA71301B744AA0100000010
[2012.10.20 09:29:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware
[2012.10.20 09:29:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Configuration
[2012.10.24 07:25:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs
[2012.10.16 19:12:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine
[2012.06.09 17:08:10 | 000,000,000 | ---D | M] -- C:\ProgramData\MFAData\logs
[2009.07.14 06:57:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Assistance
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Crypto
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage
[2009.07.14 04:05:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\DeviceSync
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\DRM
[2010.10.08 02:46:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\eHome
[2011.08.09 13:07:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\HTML Help
[2010.10.14 21:54:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\IdentityCRL
[2010.10.05 19:18:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\IlsCache
[2009.07.14 06:54:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Media Player
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\MF
[2010.10.05 22:29:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\MSDAIPP
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Network
[2010.10.05 22:29:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\OFFICE
[2010.10.05 19:30:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\PlayReady
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\RAC
[2010.10.05 19:18:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search
[2010.10.05 19:18:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\User Account Pictures
[2009.07.14 04:04:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Vault
[2010.10.05 19:14:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows
[2011.10.19 18:20:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender
[2012.07.13 21:11:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Live
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT
[2012.07.13 21:14:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\WLSetup
[2010.10.05 19:18:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\WPD
[2009.07.14 06:52:30 | 000,000,000 | -H-D | M] -- C:\ProgramData\Microsoft\WwanSvc
[2009.07.14 06:57:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Assistance\Client
[2010.10.06 05:11:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Assistance\Client\1.0
[2011.09.17 12:58:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE
[2011.09.17 12:58:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Crypto\DSS
[2012.06.26 07:19:19 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft\Crypto\Keys
[2010.10.05 19:18:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Crypto\RSA
[2009.07.14 04:04:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Crypto\DSS\MachineKeys
[2012.10.24 18:52:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys
[2012.10.24 18:52:15 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Device
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\de-DE
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\de-DE
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US
[2009.07.14 04:04:35 | 000,000,000 | -HSD | M] -- C:\ProgramData\Microsoft\DRM\Server
[2012.10.17 21:08:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\eHome\logs
[2010.10.08 02:46:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\eHome\mcepg2-0
[2010.10.08 02:46:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\eHome\RecoveryTasks
[2010.10.08 02:46:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\eHome\SharedSBE
[2012.07.13 21:13:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\IdentityCRL\production
[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\IdentityCRL\production\temp
[2010.10.05 22:29:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\MSDAIPP\OFFLINE
[2009.07.14 04:04:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Network\Connections
[2009.07.14 06:55:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Network\Downloader
[2010.10.06 00:30:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\OFFICE\DATA
[2009.07.14 04:05:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\RAC\Outbound
[2011.09.15 17:00:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\RAC\PublishedData
[2011.09.15 17:00:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\RAC\StateData
[2012.10.24 18:59:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\RAC\Temp
[2010.10.05 19:18:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data
[2012.10.17 21:22:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications
[2012.10.24 18:52:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Temp
[2012.10.24 18:52:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows
[2012.10.17 21:22:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Config
[2012.10.17 21:22:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs
[2012.10.17 21:22:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects
[2012.10.24 07:25:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex
[2012.10.17 21:22:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex
[2012.10.17 21:22:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer
[2012.10.17 21:22:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap
[2012.10.17 21:22:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore
[2012.10.24 18:55:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles
[2012.10.24 18:52:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\User Account Pictures\Default Pictures
[2011.10.11 08:09:24 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Definition Updates
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\LocalCopy
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Quarantine
[2011.10.11 08:09:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans
[2012.10.17 21:08:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Support
[2010.10.15 14:20:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates
[2011.10.19 18:09:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{70337400-8CA2-49B2-97B6-70B9F449B0E4}
[2010.10.05 20:29:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History
[2011.09.29 15:57:10 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager
[2010.10.09 04:31:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results
[2010.12.15 13:51:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service
[2010.10.05 20:29:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History\Store
[2012.10.17 21:08:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick
[2012.07.13 21:11:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Live\SOXE
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSScan
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\ActivityLog
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\Inbox
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\Queue
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\SentItems
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\de-DE
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\en-US
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\de-DE
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\en-US
[2009.07.14 04:05:17 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft\Windows\AIT
[2011.09.17 12:59:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Caches
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\DeviceMetadataStore
[2010.10.05 19:19:10 | 000,000,000 | -HSD | M] -- C:\ProgramData\Microsoft\Windows\DRM
[2009.07.14 04:04:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\GameExplorer
[2012.10.17 20:56:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Power Efficiency Diagnostics
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Ringtones
[2010.10.05 19:14:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Sqm
[2010.10.05 19:18:20 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu
[2009.07.14 04:04:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Templates
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER
[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\DeviceMetadataStore\en-US
[2009.07.14 06:52:30 | 000,000,000 | -HSD | M] -- C:\ProgramData\Microsoft\Windows\DRM\Cache
[2010.10.05 19:14:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Sqm\Manifest
[2010.10.05 19:14:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Sqm\Sessions
[2010.10.05 19:14:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Sqm\Upload
[2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme
[2012.10.17 22:20:28 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs
[2010.10.05 19:21:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2011.11.30 03:23:07 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
[2010.10.05 19:15:39 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.01.13 04:53:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
[2012.09.11 09:57:36 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
[2012.09.15 22:37:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Awakening - The Skyward Castle Collector's Edition
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BroadGun Software
[2011.08.09 13:06:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert Image To PDF
[2012.07.13 22:19:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
[2012.10.17 17:42:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeepBurner
[2010.10.05 19:26:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
[2011.01.22 19:15:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePDF
[2012.10.17 22:20:00 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
[2011.01.31 18:02:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
[2010.10.05 19:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
[2011.08.23 22:00:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2009.07.14 06:42:30 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012.10.20 09:29:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
|
|
24.10.2012, 18:51
| #19 |
| | PC nach Trojanerbefall wirklich sauber? Teil 3: Code:
ATTFilter [2010.10.17 10:50:08 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\7040110900063D11C8EF10054038389C
[2012.07.13 21:12:28 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\7B292C385A83B0447A137070E0186AF4
[2011.04.13 18:17:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\8F7463F0D15ECCF48826A9D8C0A5FC52
[2011.04.13 18:14:21 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\91785D291CBB3CC40AB8659C8E48CCC2
[2011.08.23 22:00:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\A7C59996A26009A44AFDC82298D55F22
[2012.07.13 21:13:17 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\B6ACDB9A3563B764CA384963D73AFB3E
[2011.06.16 20:04:25 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\c1c4f01781cc94c4c8fb1542c0981a2a
[2012.07.13 21:14:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\CDBD1AB11345DF646AF61AE71B4C93EE
[2010.10.05 19:29:57 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100
[2010.12.13 14:02:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DDA39468D428E8B4DB27C8D5DC5CA217
[2012.07.13 21:12:36 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\E97A59ECCF4EFFF4A857920FB449F22F
[2012.07.13 21:13:00 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F132F0B0A6ECD384AA32773B467F9571
[2012.07.13 21:12:05 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F4E3B286A696ED244AC1C470AE61874B
[2011.06.11 00:51:38 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6514
[2010.10.17 23:32:00 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021599B0090400000000000F01FEC\12.0.6012
[2011.09.18 13:30:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130
[2012.07.13 21:13:56 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0EE4E59FE6C037246B9B19DFF670D167\15.4.3502
[2012.07.13 21:13:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\11F12B5E3396B0E42AC597363E0CD711\15.4.3538
[2011.04.13 18:17:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\20B91A1DE71869244AB57058F37DD475\8.0.50727
[2011.04.13 18:17:35 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\25BBB29DFF28DE24A8C3E460F249A47B\8.0.50727
[2010.12.13 14:02:21 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\2FA726BAE7C9DBD418B6B362648BE198\10.0.10500
[2011.10.19 18:21:33 | 000,000,000 | ---D | M] -- C:\Windows\Installer\$PatchCache$\Managed\3339386520806D04A905BE9BBEB25F14\12.0.2085
[2012.07.13 21:12:20 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3D04254D3B6B9FF42B3445CE3E1E0066\15.4.3502
[2011.06.11 00:48:26 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\47D9F3A608BB1544C81AB4A358F73195\2.0.1
[2012.07.13 21:14:01 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\4CD7BA2CE9849EB488A72562F2ABBD0E\15.4.3502
[2011.09.17 15:15:15 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319
[2012.07.13 21:13:50 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\61B33B7353527E949809236678800A3A\15.4.3508
[2011.06.24 13:47:15 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\689C057F0135A5A3598FE47CC1A80CC1\4.0.30319
[2012.10.16 20:43:32 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA71301B744AA0100000010\10.1.0
[2010.10.17 17:58:53 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\7040110900063D11C8EF10054038389C\11.0.5614
[2011.07.13 11:47:59 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\7040110900063D11C8EF10054038389C\11.0.8173
[2012.07.13 21:12:28 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\7B292C385A83B0447A137070E0186AF4\15.4.3508
[2011.04.13 18:17:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\8F7463F0D15ECCF48826A9D8C0A5FC52\8.0.50727
[2011.04.13 18:14:21 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\91785D291CBB3CC40AB8659C8E48CCC2\8.0.50727
[2011.08.23 22:00:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\A7C59996A26009A44AFDC82298D55F22\10.4.1
[2012.07.13 21:13:17 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\B6ACDB9A3563B764CA384963D73AFB3E\15.4.3502
[2011.06.16 20:04:25 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\c1c4f01781cc94c4c8fb1542c0981a2a\8.0.61001
[2012.07.13 21:14:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\CDBD1AB11345DF646AF61AE71B4C93EE\15.4.3538
[2010.10.05 19:29:57 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0
[2010.12.13 14:02:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DDA39468D428E8B4DB27C8D5DC5CA217\4.20.9870
[2012.07.13 21:12:36 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\E97A59ECCF4EFFF4A857920FB449F22F\15.4.3502
[2012.07.13 21:13:00 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F132F0B0A6ECD384AA32773B467F9571\15.4.3502
[2012.07.13 21:12:05 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F4E3B286A696ED244AC1C470AE61874B\15.4.3502
< %systemroot%\system32\*. /s >
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\0407
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\0409
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\AdvancedInstallers
[2010.10.05 21:46:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\appmgmt
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\ar-SA
[2009.07.14 04:37:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\bg-BG
[2011.09.17 12:54:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\Boot
[2012.10.17 20:06:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot
[2012.10.17 22:18:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot2
[2011.11.30 03:23:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\CodeIntegrity
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\com
[2012.10.24 14:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\config
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\cs-CZ
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\da-DK
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\de
[2012.10.17 20:16:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Dism
[2012.10.21 16:01:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers
[2012.04.27 20:52:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore
[2010.12.17 02:30:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DRVSTORE
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\el-GR
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\en
[2012.10.17 20:16:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\es-ES
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\et-EE
[2011.09.17 11:35:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\fi-FI
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\fr-FR
[2009.07.14 06:42:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\FxsTmp
[2009.07.14 04:03:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\GroupPolicy
[2009.07.14 04:03:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\GroupPolicyUsers
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\he-IL
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\hr-HR
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\hu-HU
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\ias
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\icsxml
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME
[2009.07.14 04:05:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\inetsrv
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\it-IT
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\ja-JP
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\ko-KR
[2011.09.16 11:23:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\lt-LT
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\lv-LV
[2010.10.05 19:26:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\Macromed
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\manifeststore
[2009.07.14 06:34:06 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\Msdtc
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\MUI
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\nb-NO
[2011.10.03 16:16:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\NDF
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\NetworkList
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\nl-NL
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\oobe
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\pl-PL
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Printing_Admin_Scripts
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\pt-BR
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\pt-PT
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\ras
[2010.10.05 19:18:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\Recovery
[2010.10.05 19:22:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\restore
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\ro-RO
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\ru-RU
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\Setup
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\sk-SK
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\sl-SI
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\slmgr
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\SMI
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech
[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\sppui
[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\sr-Latn-CS
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\sv-SE
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep
[2012.10.17 22:20:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\th-TH
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\tr-TR
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\uk-UA
[2010.10.17 03:00:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\Wat
[2011.11.30 03:23:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WCN
[2010.10.16 21:25:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi
[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\wfp
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\WinBioDatabase
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WinBioPlugIns
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\winevt
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\winrm
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\XPSViewer
[2009.07.14 04:37:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-CN
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-HK
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-TW
[2010.10.05 21:46:07 | 000,000,000 | --SD | M] -- C:\Windows\system32\appmgmt\MACHINE
[2010.10.05 21:46:07 | 000,000,000 | --SD | M] -- C:\Windows\system32\appmgmt\S-1-5-18
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Boot\de-DE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\Boot\en-US
[2009.07.14 06:55:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
[2012.10.17 20:06:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\com\de-DE
[2009.07.14 04:04:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\com\dmp
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\com\en-US
[2009.07.14 04:04:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\Journal
[2012.10.17 20:53:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\RegBack
[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile
[2011.11.29 18:24:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\TxR
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData
[2011.08.07 00:41:08 | 000,000,000 | R--D | M] -- C:\Windows\system32\config\systemprofile\Favorites
[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local
[2012.07.10 19:45:18 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow
[2010.12.17 02:28:21 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming
[2011.04.22 14:42:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Google
[2011.12.02 17:27:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft
[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\pdfMachine
[2011.04.22 14:37:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Google\CrashReports
[2010.11.23 12:48:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Google\GBScreensaver
[2012.10.17 21:28:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Device Metadata
[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL
[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer
[2010.10.15 14:33:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\OFFICE
[2010.10.14 14:22:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Portable Devices
[2009.07.14 06:41:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows
[2011.12.02 17:27:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Device Metadata\dmrccache
[2011.12.02 17:27:48 | 000,000,000 | -H-D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Device Metadata\dmrccache\downloads
[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL\production
[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL\production\temp
[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery
[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High
[2011.08.07 00:41:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active
[2009.07.14 06:37:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches
[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History
[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files
[2009.07.14 06:41:53 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\Low
[2010.10.05 19:17:23 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low
[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized
[2012.10.17 20:56:53 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2L4UWCS7
[2010.10.05 19:17:23 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O3ZC791N
[2012.10.17 20:56:53 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q2Y5HK5G
[2010.11.11 19:44:19 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W9FYELDD
[2010.12.17 02:31:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Apple Computer
[2012.07.10 19:45:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG Secure Search
[2010.10.15 14:34:24 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun
[2010.12.17 02:31:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Apple Computer\QuickTime
[2012.08.30 19:54:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG Secure Search\cache
[2009.07.14 06:43:06 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache
[2010.10.15 14:34:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\Silverlight
[2012.10.16 21:45:30 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
[2012.10.16 21:45:30 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin
[2010.12.17 02:28:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Apple Computer
[2011.08.07 00:41:06 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft
[2012.10.24 18:52:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Apple Computer\Logs
[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL
[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows
[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL\production
[2012.10.20 09:14:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL\production\temp
[2011.08.07 00:41:06 | 000,000,000 | R--D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs
[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IECompatCache
[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\PrivacIE
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\Low
[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IECompatCache\Low
[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\Low
[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\PrivacIE\Low
[2011.08.07 00:41:08 | 000,000,000 | R--D | M] -- C:\Windows\system32\config\systemprofile\Favorites\Links
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\Enterprise
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\EnterpriseE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\EnterpriseN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomeBasic
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomeBasicE
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomeBasicN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomePremium
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomePremiumE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomePremiumN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\Professional
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\ProfessionalE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\ProfessionalN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\Starter
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\StarterE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\StarterN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\Ultimate
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\UltimateE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\UltimateN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\Enterprise
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\EnterpriseE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\EnterpriseN
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomeBasic
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomeBasicE
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomeBasicN
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomePremium
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomePremiumE
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomePremiumN
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\Professional
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\ProfessionalE
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\ProfessionalN
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\Starter
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\StarterE
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\StarterN
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\Ultimate
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\UltimateE
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\UltimateN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\Enterprise
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\EnterpriseE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\EnterpriseN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomeBasic
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomeBasicE
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomeBasicN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomePremium
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomePremiumE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomePremiumN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\Professional
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\ProfessionalE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\ProfessionalN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\Starter
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\StarterE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\StarterN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\Ultimate
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\UltimateE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\UltimateN
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Dism\de-DE
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Dism\en-US
[2012.10.24 18:55:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\AVG
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\de-DE
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\en-US
[2012.10.23 21:39:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\etc
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF\de-DE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF\en-US
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\de-DE
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\en-US
[2012.04.27 20:52:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository
[2012.04.27 20:52:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\Temp
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\1394.inf_x86_neutral_832ec31f25d91fee
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\61883.inf_x86_neutral_f2be571a17fa203a
[2011.09.17 12:54:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\acpi.inf_x86_neutral_a1f4891fe0de4401
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\acpipmi.inf_x86_neutral_71194ee3f26255a7
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\adp94xx.inf_x86_neutral_4928c8870f6a1577
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\adpahci.inf_x86_neutral_b082e95ec9f8c3f9
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\adpu320.inf_x86_neutral_4ea3d42a9839982a
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\af9035bda.inf_x86_neutral_aa11aa34552d1d4d
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\agp.inf_x86_neutral_a61b8b06718e8352
[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\amdsata.inf_x86_neutral_5c3d0d1e97e99e10
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\amdsata.inf_x86_neutral_67db50590108ebd9
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\amdsbs.inf_x86_neutral_5cae6933bef20aa8
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\angel.inf_x86_neutral_8bb84b2b92dfa947
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\angel2.inf_x86_neutral_6a809c9c7f9c8486
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\angelusb.inf_x86_neutral_7bfd84ec2b59623e
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\arc.inf_x86_neutral_11b52dec8e94d9aa
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\arcsas.inf_x86_neutral_c763887719bed95d
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\atiilhag.inf_x86_neutral_1d882551ede2c65b
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\atiriolh.inf_x86_neutral_cdb610d99bcbc631
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\avc.inf_x86_neutral_6ae951c52c898d14
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\averfx2h826d_noaverir.inf_x86_neutral_4663ffee9c09b012
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\averfx2hbtv.inf_x86_neutral_30c25b3574f8bcf5
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\averfx2swtv.inf_x86_neutral_c099b789396c5410
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\averfx2swtv_noavin.inf_x86_neutral_622d8263ea46770a
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\averhbh826_noaverir.inf_x86_neutral_620e8a01977ecb40
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\avmisdnc.inf_x86_neutral_e8031e434b323b61
[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\battery.inf_x86_neutral_5752155055c5e2d7
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bda.inf_x86_neutral_41c6262952846788
[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\blbdrive.inf_x86_neutral_1aa816fe7dc98c3f
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfcmdm.inf_x86_neutral_3b38c2e8e6f06c1b
[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfcmf.inf_x86_neutral_33717b093227cd8c
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfcsto.inf_x86_neutral_39ae61431a44cded
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfcumd.inf_x86_neutral_e78e46b32f6347a3
[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfcwia.inf_x86_neutral_2d38149df9cd17c4
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfport.inf_x86_neutral_401d08f12a7f8ee1
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bth.inf_x86_neutral_2d4ce84c4a0b8470
[2011.11.30 03:23:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bth.inf_x86_neutral_92c343c9dc681a74
[2012.04.27 20:52:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bthavrcp.inf_x86_neutral_ef3dde218c465a8f
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bthmtpenum.inf_x86_neutral_c70e85b87ee4ece9
[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bthpan.inf_x86_neutral_0ed0bba2c23dd70b
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bthprint.inf_x86_neutral_e8a51e97a7c39491
[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bthspp.inf_x86_neutral_c702854f7c2d88b2
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\circlass.inf_x86_neutral_5bbf290689fced8f
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\compositebus.inf_x86_neutral_a53ef080c39c3218
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cpu.inf_x86_neutral_729b871528391032
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\crcdisk.inf_x86_neutral_dd39b6b0a45226c4
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cxfalcon_ibv32.inf_x86_neutral_01ff517b4c863eb6
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cxfalpal_ibv32.inf_x86_neutral_809fe20c75cbdcae
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cxraptor_fm1216mk5_ibv32.inf_x86_neutral_d4097f19ee2b5d2f
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cxraptor_fm1236mk5_ibv32.inf_x86_neutral_beee91ccd1e8c623
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cxraptor_philipstuv1236d_ibv32.inf_x86_neutral_2af0839f9805ea5f
[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\dc21x4vm.inf_x86_neutral_8887242a56ee027e
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\digitalmediadevice.inf_x86_neutral_6fd673519d66ab20
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\disk.inf_x86_neutral_b431b61a11f8df6c
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\display.inf_x86_neutral_36353e26d7770ebb
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\divacx86.inf_x86_neutral_d9558f410186db36
[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\djsvs.inf_x86_neutral_836a3a3240941631
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\dot4.inf_x86_neutral_b079cf65ff1cb755
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\dot4prt.inf_x86_neutral_ff48d313003e46b8
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\eaphost.inf_x86_neutral_1123a0147c1e97cc
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ehstorcertdrv.inf_x86_neutral_2e1cecffae9c899a
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ehstorpwddrv.inf_x86_neutral_ecd233d7cabbdebf
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\elxstor.inf_x86_neutral_4263942b9dfe9077
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\faxca003.inf_x86_neutral_fd10e857c1342eac
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\faxcn001.inf_x86_neutral_7e5a499c236b8028
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\faxcn002.inf_x86_neutral_29a66691dd7a46a5
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\fdc.inf_x86_neutral_67322cb863995ea8
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\flpydisk.inf_x86_neutral_2102f5344367a352
[2011.01.22 19:16:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\freepdfxp.inf_x86_neutral_391ac37a3eb3478d
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\gameport.inf_x86_neutral_fe5c4f29488f121e
[2011.01.30 15:59:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\grmnusb.inf_x86_neutral_3e4b654f12f06d57
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hal.inf_x86_neutral_bf3422256b0b201d
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hcw72bda.inf_x86_neutral_8c31e8d2dc91b975
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hcw85bda.inf_x86_neutral_0c9092aa3e31c11c
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hcw85cir.inf_x86_neutral_e96b5c9f415a42b6
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hdaudbus.inf_x86_neutral_77479a4820fb8643
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hdaudio.inf_x86_neutral_5a5e688ecb9e273f
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hdaudss.inf_x86_neutral_3f3a26225c0b8f9c
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hidbth.inf_x86_neutral_96487048bb26cf0c
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hiddigi.inf_x86_neutral_12aaf5742a9969da
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hidir.inf_x86_neutral_a7b6b38a183ef6fe
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hidirkbd.inf_x86_neutral_b7b6ffb126da2654
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hidserv.inf_x86_neutral_32c4c73e5497e483
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hpoa1nd.inf_x86_neutral_7b6f40298882eaa3
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hpoa1sd.inf_x86_neutral_360cdfe0d1ef39bf
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hpoa1so.inf_x86_neutral_5b4a3ef5e5601b42
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hpoa1ss.inf_x86_neutral_b8a0ac47cc2c2b5d
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hpsamd.inf_x86_neutral_84ae149ecc9f8033
[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928
[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ibtfltcoexhs.inf_x86_neutral_ef26afc63105bc64
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\igdlh.inf_x86_neutral_2d255f193700d214
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\iirsp.inf_x86_neutral_25c14d33af7f54f1
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\iirsp2.inf_x86_neutral_9ed65fe0bab06b1b
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\image.inf_x86_neutral_7a389207019f8699
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\input.inf_x86_neutral_9e1eba5724be176f
[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ipmidrv.inf_x86_neutral_2084908fa838c2b9
[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\iscsi.inf_x86_neutral_7ad2bf0be3b9a90e
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\keyboard.inf_x86_neutral_50ad659974198591
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ks.inf_x86_neutral_2b583ce4a6a029a1
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\kscaptur.inf_x86_neutral_6cb3fb6811a3f83d
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ksfilter.inf_x86_neutral_92aac3fbbef4a5e4
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\lsi_fc.inf_x86_neutral_a7088f3644ca646a
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\lsi_sas.inf_x86_neutral_a4d6780f72cbd5b4
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\lsi_sas2.inf_x86_neutral_e12a5c4cfbe49204
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\lsi_scsi.inf_x86_neutral_cfbbf0b0b66ba280
[2011.09.17 12:54:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mchgr.inf_x86_neutral_185970e67258389c
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mcx2.inf_x86_neutral_8cf9cade8f7bba56
[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdm3com.inf_x86_neutral_61b1d2017160ceb3
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdm5674a.inf_x86_neutral_32e293dc839d3ea6
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmadc.inf_x86_neutral_ce6df7a95faad9ab
[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmagrm.inf_x86_neutral_8ff94c5737626019
[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmagrs.inf_x86_neutral_81c67a5080f3eef2
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmairte.inf_x86_neutral_5bc983e9703af897
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaiwa.inf_x86_neutral_c2d261f9c2b8299f
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaiwa3.inf_x86_neutral_836d7becdc26be7c
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaiwa4.inf_x86_neutral_9a20824e01be5808
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaiwa5.inf_x86_neutral_d60cbdef6ff206a0
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaiwat.inf_x86_neutral_ade95bcd36fc6206
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmar1.inf_x86_neutral_b0999a224b848025
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmarch.inf_x86_neutral_3ae8598a7913eec2
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmarn.inf_x86_neutral_661b8f49b2e37287
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmati.inf_x86_neutral_96d3e2f4c2326f0b
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmatm2k.inf_x86_neutral_50b7155b64dfef63
[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaus.inf_x86_neutral_a31a27eac8eac079
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmboca.inf_x86_neutral_d8d32cd62c998da9
[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr002.inf_x86_neutral_da2024ed84d3191d
[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr004.inf_x86_neutral_98c1a220af939228
[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr005.inf_x86_neutral_9d6675b8a97638e3
[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr006.inf_x86_neutral_ccf3e0108e39bf8b
[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr007.inf_x86_neutral_5d5fc97500c2267d
[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr008.inf_x86_neutral_7823bcb17f3813ee
[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr00a.inf_x86_neutral_f6d7a36091b1af37
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbsb.inf_x86_neutral_92cc2963ca6a905a
[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbtmdm.inf_x86_neutral_321fa2ecf7803227
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbug3.inf_x86_neutral_c29e5576244e2124
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbw561.inf_x86_neutral_aa3607cf9d93f8c0
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmc26a.inf_x86_neutral_60a854d64d6e68bf
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcdp.inf_x86_neutral_6388368bec8b4e3e
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcm28.inf_x86_neutral_57712de4f9c6d527
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcodex.inf_x86_neutral_b39ddfe03c7a0e60
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcom1.inf_x86_neutral_c239d64c485a0ad2
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcommu.inf_x86_neutral_2f1d25831bc469b5
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcomp.inf_x86_neutral_71908e78cff42441
[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcpq.inf_x86_neutral_9f203c20b6f0dabd
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcpq2.inf_x86_neutral_d5315a7393dd6002
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcpv.inf_x86_neutral_424f03b97cc007db
[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcrtix.inf_x86_neutral_c14a1ef4ed1fec95
[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcxav3.inf_x86_neutral_3c9275be906b01dd
[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcxhv3.inf_x86_neutral_15b13e9a734fb085
[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcxpv3.inf_x86_neutral_fb18b60a7ae25b18
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdcm5.inf_x86_neutral_f7e102d648101629
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdcm6.inf_x86_neutral_1d84a358e9409e1c
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdf56f.inf_x86_neutral_f29859e5e5332dfb
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdgitn.inf_x86_neutral_f557769cb87d8731
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdp2.inf_x86_neutral_b7c1bc32f986a5b3
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdsi.inf_x86_neutral_5352518dfa03c76f
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdyna.inf_x86_neutral_ae284d0cd38cec95
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmeiger.inf_x86_neutral_f5b5d816f4fe88d7
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmelsa.inf_x86_neutral_035934cfd6dd3122
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmeric.inf_x86_neutral_13608f1b6d6388d9
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmeric2.inf_x86_neutral_ac9c3cb0b5fb00a9
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmetech.inf_x86_neutral_5be2fe46e416a83e
[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmfj2.inf_x86_neutral_e800633dd6eedc16
[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgatew.inf_x86_neutral_c895ee8908d12f25
[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgcs.inf_x86_neutral_4274c7a3888cef70
[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgen.inf_x86_neutral_926d65c254079820
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl001.inf_x86_neutral_9209e816461a1a73
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl002.inf_x86_neutral_e204d4267d752eb7
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl003.inf_x86_neutral_4c78da9e48068043
[2009.07.14 06:51:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl004.inf_x86_neutral_1874f16002601f78
[2009.07.14 06:51:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl005.inf_x86_neutral_8b56291bfd2a4061
[2009.07.14 06:51:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl006.inf_x86_neutral_e5693eb731048022
[2009.07.14 06:51:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl007.inf_x86_neutral_935cd017fcb965ee
[2009.07.14 06:51:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl008.inf_x86_neutral_d225e15af1a594cd
[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl009.inf_x86_neutral_bed6224f27f5c478
[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl010.inf_x86_neutral_46f466c9e68abb4a
[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgsm.inf_x86_neutral_b9136824e071aa43
[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmhaeu.inf_x86_neutral_72bf10d025ec128d
[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmhandy.inf_x86_neutral_e43d5c3fa1774569
[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmhay2.inf_x86_neutral_4bc09702f318f9be
[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmhayes.inf_x86_neutral_e814828f9fb0d4df
[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdminfot.inf_x86_neutral_1403b0133ea862c7
[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmiodat.inf_x86_neutral_8f2918b26d48efb3
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmirmdm.inf_x86_neutral_b64ae6e8f8db8514
[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmisdn.inf_x86_neutral_c21e340225d7c6d5
[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmjf56e.inf_x86_neutral_be032a9152b5642f
[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmke.inf_x86_neutral_2ab6764455927942
[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmkortx.inf_x86_neutral_25bec1fb48843358
[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmlasat.inf_x86_neutral_28293794988ce599
[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmlasno.inf_x86_neutral_34eb90af717f869f
[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmlucnt.inf_x86_neutral_100c174a78c3e432
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmc288.inf_x86_neutral_904d48d44a7c5ecb
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmcd.inf_x86_neutral_55a9c55fb48473ce
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmcom.inf_x86_neutral_e973b9a1b51c2b2f
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmct.inf_x86_neutral_2175f3d457a013a9
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmega.inf_x86_neutral_056a7f9c2f8ec088
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmetri.inf_x86_neutral_ec5f50ab9ec6191a
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmhrtz.inf_x86_neutral_1c6813a32dde365f
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmhzel.inf_x86_neutral_d6658ac4c3567af0
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmminij.inf_x86_neutral_c8028d505d722f96
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmod.inf_x86_neutral_ff5c77294e038f67
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmoto1.inf_x86_neutral_abac121bbd78f10a
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmotou.inf_x86_neutral_77763577a40a11dc
[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmotsm.inf_x86_neutral_c1415d9789c54b89
[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmts.inf_x86_neutral_4f8efb8b21967e53
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmneuhs.inf_x86_neutral_693dc92cc3806779
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnis1u.inf_x86_neutral_21539a0b3ba8c6e3
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnis2u.inf_x86_neutral_2a8b0a751f385d39
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnis3t.inf_x86_neutral_7113f2971c91fbb8
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnis5t.inf_x86_neutral_d89a2aded51ecac3
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnokia.inf_x86_neutral_a8e9a41983d33a0b
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnova.inf_x86_neutral_81c772e3350d17f3
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmntt1.inf_x86_neutral_187b4c208d1a7adf
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttd2.inf_x86_neutral_697347a56d862efc
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttd6.inf_x86_neutral_1a7790e1a07b710e
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttme.inf_x86_neutral_78a105adf91770cf
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttp.inf_x86_neutral_e4d850f8a1a26fe6
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttp2.inf_x86_neutral_5e37ec17d0b5ace7
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttte.inf_x86_neutral_a29230c136fdaf8e
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmolic.inf_x86_neutral_f186913a5367cd56
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmomrn3.inf_x86_neutral_d41ffd65fdae5d15
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmoptn.inf_x86_neutral_6ab26061287b320d
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmosi.inf_x86_neutral_bf94271fafa0d646
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpace.inf_x86_neutral_f5caca1789a3c28b
[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpenr.inf_x86_neutral_8075aaa424f36192
[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpin.inf_x86_neutral_f0c406047f5a7dc5
[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpn1.inf_x86_neutral_40a7e43b0adc056b
[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpp.inf_x86_neutral_b53cc77015d962f0
[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpsion.inf_x86_neutral_26845d3968953608
[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmracal.inf_x86_neutral_b5b12e793f94f3f8
[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmrock.inf_x86_neutral_60e0e01cc11eeb89
[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmrock3.inf_x86_neutral_c345818f4520db06
[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmrock4.inf_x86_neutral_3428cf61c6a0bb23
[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmrock5.inf_x86_neutral_e6f3135f34c11cb2
[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsier.inf_x86_neutral_a6200371d3ecdb82
[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsii64.inf_x86_neutral_a32e605ab89d62e6
[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsmart.inf_x86_neutral_daedddd66ae49f4d
[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsonyu.inf_x86_neutral_b1ca4e47492f36bc
[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsun1.inf_x86_neutral_6dcf5920efcd8b9b
[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsun2.inf_x86_neutral_50c7c2b8719aaff8
[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsupr3.inf_x86_neutral_dc84399e03fbfcd4
[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsupra.inf_x86_neutral_7474084e6eaf04bc
[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsuprv.inf_x86_neutral_7d981ed202f564e1
[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdk.inf_x86_neutral_31cb3ae015c74d0a
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj2.inf_x86_neutral_1818c9080508de95
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj3.inf_x86_neutral_4af0d99c5345ea90
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj4.inf_x86_neutral_8df3f305ccbf60a5
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj5.inf_x86_neutral_213bea3d7d51bba1
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj6.inf_x86_neutral_2c282453839753e3
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj7.inf_x86_neutral_e82dbe2c7d660711
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtexas.inf_x86_neutral_c193921ec654db8b
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmti.inf_x86_neutral_dcb6f1180d313279
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtkr.inf_x86_neutral_9a6c721a56a4ae4a
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtron.inf_x86_neutral_898c23c643f818db
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmusrf.inf_x86_neutral_6fbcae4419a7e461
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmusrg.inf_x86_neutral_5953e856037c5639
[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmusrgl.inf_x86_neutral_cc23f8899b453d6c
[2009.07.14 06:51:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmusrk1.inf_x86_neutral_e1e41e3eef953389
[2009.07.14 06:51:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmusrsp.inf_x86_neutral_50208ddd73116ac1
[2009.07.14 06:51:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmvdot.inf_x86_neutral_1d02a3a1c47d9610
[2009.07.14 06:51:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmvv.inf_x86_neutral_ec2b9772b37353a3
[2009.07.14 06:51:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmwhql0.inf_x86_neutral_df7fb046fec7c967
[2009.07.14 06:51:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmx5560.inf_x86_neutral_f4f9ee69f0d60bfb
[2009.07.14 06:51:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmzoom.inf_x86_neutral_15bd73698ecdea29
[2009.07.14 06:51:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmzyp.inf_x86_neutral_c2db4af563e94b15
[2009.07.14 06:51:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmzyxel.inf_x86_neutral_a555079da4bd8392
[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmzyxlg.inf_x86_neutral_380073a54d79b567
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\megasas.inf_x86_neutral_395276dd9b7a7448
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\megasas2.inf_x86_neutral_599d713507780ed4
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\megasr.inf_x86_neutral_30b367f92ca46598
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\memory.inf_x86_neutral_0e5e977bd78905af
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mf.inf_x86_neutral_feb8c30ef59487a2
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\modemcsa.inf_x86_neutral_0243209867cd0efc
[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\monitor.inf_x86_neutral_f7168ca1d7f8ec24
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mpio.inf_x86_neutral_18f08f79e68b1972
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msclmd.inf_x86_neutral_1984ed5209e72520
[2009.07.14 09:47:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msdri.inf_x86_neutral_86bb50f34c49ae71
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msdsm.inf_x86_neutral_cacb427259f0d93e
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msdv.inf_x86_neutral_4322b3da4858d42a
[2011.09.17 12:54:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msmouse.inf_x86_neutral_7a9084e0177406eb
[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msports.inf_x86_neutral_c1a802e06677f73f
|
|
24.10.2012, 18:53
| #20 |
| | PC nach Trojanerbefall wirklich sauber? Teil 4: Code:
ATTFilter [2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mstape.inf_x86_neutral_b2cccf4ea41e4c0f
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mtconfig.inf_x86_neutral_4de24f49b5e60c45
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\multiprt.inf_x86_neutral_988a34fc912eab54
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net1k32.inf_x86_neutral_78f8b10949489fd3
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net1q32.inf_x86_neutral_18f9b5da166792ca
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net1y32.inf_x86_neutral_17f1bc814dc1043f
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net44x32.inf_x86_neutral_70a6663fd52fa256
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net8185.inf_x86_neutral_20a13cfe2956ed8a
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net8187bv32.inf_x86_neutral_4133912759f4531a
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net8187se86.inf_x86_neutral_dbc0aab1acd9c67e
[2011.08.23 21:58:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netaapl.inf_x86_neutral_b1e5350f88598904
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netathr.inf_x86_neutral_c6f6c3fd633fd5e7
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netb57vx.inf_x86_neutral_575b8ca932333f72
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netbc6.inf_x86_neutral_a7e1745ea707c8d1
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netbvbdx.inf_x86_neutral_6d29499ebc7c7338
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netbxndx.inf_x86_neutral_94ba965704caa228
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nete1e32.inf_x86_neutral_4bf5bdee9123a61d
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nete1g32.inf_x86_neutral_ce57dbaa251ea290
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netefe32.inf_x86_neutral_9590f3b23d1d64f3
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netevbdx.inf_x86_neutral_7f439b41eebc75ae
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netgb6.inf_x86_neutral_437f729e64df024b
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netimm.inf_x86_neutral_9b64397618841a19
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netirda.inf_x86_neutral_93a886f96cea2847
[2010.10.05 19:39:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netirsir.inf_x86_neutral_c4f5b1cfd8f589b3
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netk57x.inf_x86_neutral_5cfca89527c3f708
[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netl160x.inf_x86_neutral_cef6a4c5e38079d6
[2009.07.14 06:51:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netl1c86.inf_x86_neutral_49e2658f4a72e53f
[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netl1e86.inf_x86_neutral_a34f2431367128ea
[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netl260x.inf_x86_neutral_30b3156b81adc0bb
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netloop.inf_x86_neutral_856142fd87f1c21a
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netmyk01.inf_x86_neutral_a3f8c82b61266bbe
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netnvm32.inf_x86_neutral_163a5a97980bb89d
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netnvmx.inf_x86_neutral_7af3f06863f3b983
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netr28.inf_x86_neutral_980e8922b9be3562
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netr28u.inf_x86_neutral_b42b25ec42f762c2
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netr73.inf_x86_neutral_d8d856fa32ab7ec2
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netrndis.inf_x86_neutral_4c56d83f6e4d75b0
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netrtl32.inf_x86_neutral_79fee35a46b8dacd
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netrtx32.inf_x86_neutral_aa92429bfa083dca
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nettun.inf_x86_neutral_49694089c24355d2
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netvfx86.inf_x86_neutral_325ccb4cde393e5d
[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netvg62.inf_x86_neutral_4a0e9c58796bca8a
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netvwifibus.inf_x86_neutral_9d0740f32ce81d24
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netw5v32.inf_x86_neutral_a8056bed0ad979c3
[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netxe32.inf_x86_neutral_2d971e2b4a578e3d
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nfrd960.inf_x86_neutral_cfc8c0013e9ede68
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ntprint.inf_x86_neutral_88459cb66b0e2d44
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nulhpopr.inf_x86_neutral_ec00f8f18ac02be3
[2010.10.05 19:38:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nvmo.inf_x86_neutral_3cb41c50f61ecf58
[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14
[2010.10.05 19:26:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_a651bb730e78eedd
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nv_lh.inf_x86_neutral_bbe628dbdd6fce25
[2012.01.15 18:56:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\p1120dev.inf_x86_neutral_1f7f163763681028
[2010.10.05 21:25:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\p1120dev.inf_x86_neutral_d159b4813c8feae1
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\pcmcia.inf_x86_neutral_42dda5eb5768a3df
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc0.inf_x86_neutral_c24bcc939e6dfc23
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc1.inf_x86_neutral_662220c3016bb4d0
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc10.inf_x86_neutral_2c5d0c618dbfaf2a
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc11.inf_x86_neutral_bb18e5f134c40c68
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc12.inf_x86_neutral_ff7295ba5a46d63f
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc2.inf_x86_neutral_7621f5d62d77f42e
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc3.inf_x86_neutral_1da6abc36a79974f
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc4.inf_x86_neutral_310871d800afa82a
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc5.inf_x86_neutral_2270382453de2dbb
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc6.inf_x86_neutral_2818f7b3b62bdd39
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc7.inf_x86_neutral_348f512722c79525
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc8.inf_x86_neutral_c93e7023ef90e637
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc9.inf_x86_neutral_ff3a566e4b6ba035
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph6xib32c0.inf_x86_neutral_a7233f8f3a9f58ff
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph6xib32c1.inf_x86_neutral_569a6f95e9320f9c
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr002.inf_x86_neutral_1d14699bf2d4d936
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr003.inf_x86_neutral_21c4516754f2bda5
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr004.inf_x86_neutral_a976dec554a0be13
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr005.inf_x86_neutral_407befecac90c7f1
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr006.inf_x86_neutral_331a0c6df1c9d3e1
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr007.inf_x86_neutral_af94d26aafd1ca3a
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr008.inf_x86_neutral_87aae9d395393afd
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr009.inf_x86_neutral_3f6b69c8d1091fd8
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr00a.inf_x86_neutral_e9f0919e54780621
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca003.inf_x86_neutral_f0a023edfd5cd833
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00a.inf_x86_neutral_18bf309f5cc01a3a
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00b.inf_x86_neutral_c675b60dd45218c1
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00c.inf_x86_neutral_9339602328d9603b
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00d.inf_x86_neutral_8883e3ab4a33bfbb
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00e.inf_x86_neutral_a70781c21927bfb2
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00f.inf_x86_neutral_b94365c0e502f290
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00g.inf_x86_neutral_b19defbd7969a7c7
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00h.inf_x86_neutral_b859249f26c03a2f
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00i.inf_x86_neutral_ab67935506742738
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00x.inf_x86_neutral_4dacaa756f2a85fc
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00y.inf_x86_neutral_a6e2b48d7bbe4516
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00z.inf_x86_neutral_494753193fc9051a
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep002.inf_x86_neutral_9111d9b86cbd3f64
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep003.inf_x86_neutral_342be98eb74e1449
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep004.inf_x86_neutral_25623e649d146f5d
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep005.inf_x86_neutral_f4a4a2a89cb57323
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00a.inf_x86_neutral_d4494950448771ed
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00b.inf_x86_neutral_d0e9433101a2df79
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00c.inf_x86_neutral_92ff44dcbf1c760c
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00d.inf_x86_neutral_9fef51141804900a
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00e.inf_x86_neutral_2fbbb3b50e96331c
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00f.inf_x86_neutral_07f7a94e565e9af0
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00g.inf_x86_neutral_cb6ac931b3d225af
[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00l.inf_x86_neutral_3323920c1a72a42d
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnfx002.inf_x86_neutral_f83f67e1c22e557b
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnge001.inf_x86_neutral_51cbe14e4cdde8c2
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt002.inf_x86_neutral_a10ecaa46786286d
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt003.inf_x86_neutral_eeb0fb3ee2847db5
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt004.inf_x86_neutral_f7b569fe96e4f7ae
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp002.inf_x86_neutral_e6daa9c39ac001a3
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp003.inf_x86_neutral_8685826a5ca37e6b
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp004.inf_x86_neutral_95288ae6f32f1fe7
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp005.inf_x86_neutral_9307c57b91a7985e
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin002.inf_x86_neutral_b9fa18a8d63d5294
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin003.inf_x86_neutral_dca922447801904c
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin004.inf_x86_neutral_2aba7beb4ab9a9e8
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm002.inf_x86_neutral_ded1a36701bddc86
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm003.inf_x86_neutral_ea465b3729b37f54
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm004.inf_x86_neutral_b456c14d5367f83c
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm005.inf_x86_neutral_a2013031e279b6f6
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky002.inf_x86_neutral_141ca768bc51ceff
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky003.inf_x86_neutral_60797ae48ab1b87f
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky004.inf_x86_neutral_dfafbddbf301a9d0
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky005.inf_x86_neutral_8a163d363abb7d5a
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky006.inf_x86_neutral_141ee497dd7c43c1
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky007.inf_x86_neutral_68b0fb35c207d0a0
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky008.inf_x86_neutral_212e30a5479d6fcd
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky009.inf_x86_neutral_f01eb3bc43e6f348
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle002.inf_x86_neutral_e9f41ef23faed72b
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle003.inf_x86_neutral_a8106f7f3af21d88
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle004.inf_x86_neutral_60637fb8287b0bdb
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx002.inf_x86_neutral_b460391110491d41
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx003.inf_x86_neutral_336d87d2fe949d82
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx004.inf_x86_neutral_ce7ad6f91a9470d7
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx005.inf_x86_neutral_18db8f40f5f5b950
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx006.inf_x86_neutral_6e4dca7de1f2cbe6
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx007.inf_x86_neutral_6d0bcfb01c9e96a5
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx008.inf_x86_neutral_7777e9ad978d9704
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx009.inf_x86_neutral_b6bfd02f6a69918b
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00a.inf_x86_neutral_0a6bc7f26d808a89
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00b.inf_x86_neutral_cbb4d358ebfaa1a3
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00c.inf_x86_neutral_7bc7cec2e7b7c3ed
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00d.inf_x86_neutral_303d19e2d575a492
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00e.inf_x86_neutral_ecad95350ea4a9ce
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00v.inf_x86_neutral_52b9cad0a55731b7
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00w.inf_x86_neutral_600a5a25c538ae65
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00x.inf_x86_neutral_4c73c1f7a0f2d2cb
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00y.inf_x86_neutral_a307e415ad8916dc
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00z.inf_x86_neutral_fa9c724522edf9cf
[2009.07.14 06:42:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnms001.inf_x86_neutral_1dd3de102185d5d9
[2011.09.17 12:57:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnms001.inf_x86_neutral_a1ff1bc29207b04f
[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnms002.inf_x86_neutral_baa1493e6380688b
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr002.inf_x86_neutral_b9a1c43c0cb6c940
[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr003.inf_x86_neutral_02802729a95f0eed
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr004.inf_x86_neutral_15e7dc89d102e928
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnod002.inf_x86_neutral_c36a5fe1ac15a734
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnok002.inf_x86_neutral_436ff5d24333cca0
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc002.inf_x86_neutral_3fb2e6c401a9c7d8
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc003.inf_x86_neutral_e9198ff5f961d947
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc004.inf_x86_neutral_7d5665e9e43f678d
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc005.inf_x86_neutral_73b01a2655fdb5c5
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc006.inf_x86_neutral_404ca57b9d9c1e47
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc007.inf_x86_neutral_cfebba21b1c02dd7
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00a.inf_x86_neutral_7818fe41c7df6d84
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00b.inf_x86_neutral_354df7938905aa3b
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00c.inf_x86_neutral_d5646e537534e115
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsa002.inf_x86_neutral_db272f9cd17a383f
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsh002.inf_x86_neutral_c41038f4d2ab5958
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnso002.inf_x86_neutral_650312518f503b7b
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv002.inf_x86_neutral_ee0379dbd4a7194e
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv003.inf_x86_neutral_2011fa0a7f786266
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv004.inf_x86_neutral_3ee5a15023f3b3ed
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnts002.inf_x86_neutral_8f9e057c9ae8c777
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnts003.inf_x86_neutral_b5366a7425b89579
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnxx002.inf_x86_neutral_385ccd442fb8f3bb
[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\qd3x86.inf_x86_neutral_b4bd3d3a68e99799
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ql2300.inf_x86_neutral_ca8487daf77ff7cb
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ql40xx.inf_x86_neutral_77a826e5c0a07842
[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ql40xx2.inf_x86_neutral_b95932400326817e
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ramdisk.inf_x86_neutral_a5e0c07c2a8b4571
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\rawsilo.inf_x86_neutral_a625e7b9dcdf1780
[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\rdlsbuscbs.inf_x86_neutral_351e56205fd4c200
[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\rdpbus.inf_x86_neutral_27637529205407be
[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\rdvgwddm.inf_x86_neutral_345f205da00aaad5
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ricoh.inf_x86_neutral_925e66fc0306537d
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\rndiscmp.inf_x86_neutral_4ca64d28e1be8fa9
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sbp2.inf_x86_neutral_bfc02db3bc163c19
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\scrawpdo.inf_x86_neutral_18f3d1cd9736f87d
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\scsidev.inf_x86_neutral_174cd8d27b46ca16
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sdbus.inf_x86_neutral_47b152eccdb186c8
[2009.07.14 09:47:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sensorsalsdriver.inf_x86_neutral_e8b9902de1fb346a
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sffdisk.inf_x86_neutral_7e5210507f8fc265
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sisraid2.inf_x86_neutral_845e008c32615283
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sisraid4.inf_x86_neutral_65ab84e9830f6f4b
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\smartcrd.inf_x86_neutral_63e72c669d043f14
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\stexstor.inf_x86_neutral_80ee226e29362f51
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sti.inf_x86_neutral_6a74c91c1f723826
[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\synth3dvsc.inf_x86_neutral_bccbc5fb46a05558
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tape.inf_x86_neutral_2ad11993c0ac6624
[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tdibth.inf_x86_neutral_b67cdc538738f6b9
[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\termkbd.inf_x86_neutral_1125d2fa6c2adf13
[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\termmou.inf_x86_neutral_4cc2997d96f50d62
[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tpm.inf_x86_neutral_8d77c50b5c066979
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\transfercable.inf_x86_neutral_82f4c743c8996d67
[2011.09.17 12:53:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tsgenericusbdriver.inf_x86_neutral_10faa3d9ed6a6c29
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tsprint.inf_x86_neutral_c48d421ad2c1e3e3
[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tsusbhub.inf_x86_neutral_927afe150d9ff343
[2011.09.17 12:53:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tsusbhubfilter.inf_x86_neutral_a0ea34b6bcf6540e
[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ts_generic.inf_x86_neutral_4678e55cce9859ad
[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ts_wpdmtp.inf_x86_neutral_daa64ca27846aa23
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\umbus.inf_x86_neutral_79120b2cb6857971
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\umpass.inf_x86_neutral_8f915e601c25e75b
[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\unknown.inf_x86_neutral_aad5835b879ce7e4
[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usb.inf_x86_neutral_1584ed9878602b0f
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usb.inf_x86_neutral_2620fd493cad7d41
[2011.08.23 21:58:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbaapl.inf_x86_neutral_1e34817a8e80d76d
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbcir.inf_x86_neutral_43aeabd51df61d2c
[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbport.inf_x86_neutral_18e46bb8fd6f032e
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbport.inf_x86_neutral_f9abf85fd00186bd
[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbprint.inf_x86_neutral_203e16627752a160
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbstor.inf_x86_neutral_c77d41a490bdc63d
[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbstor.inf_x86_neutral_e6d53e776821c5b8
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbvideo.inf_x86_neutral_8fe3504355514e0c
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\vhdmp.inf_x86_neutral_efa659e9a38d5b8c
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\volsnap.inf_x86_neutral_42f862e05fcb0306
[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\volume.inf_x86_neutral_6dee0205881d1a1d
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\vsmraid.inf_x86_neutral_be11b7aaa746e92d
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\v_mscdsc.inf_x86_neutral_ef3a0c30c03f0225
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wave.inf_x86_neutral_a86dc645b68a1b2f
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wceisvista.inf_x86_neutral_3500779911f7f3ca
[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wd.inf_x86_neutral_81cae93d8afd51d5
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wdmaudio.inf_x86_neutral_aed2a4456700dfde
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wdma_usb.inf_x86_neutral_a721e4f3907a2769
[2011.09.17 12:54:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wdmvsc.inf_x86_neutral_a2cf745000e2ea92
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr002.inf_x86_neutral_001cc6b7e8835965
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr004.inf_x86_neutral_7d1d9b8c3c8f2a9e
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr005.inf_x86_neutral_ad07b12feea9a3ff
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr006.inf_x86_neutral_4eaab35acf775ef3
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr007.inf_x86_neutral_50c5638ba44de2c4
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr008.inf_x86_neutral_73557b9c99d61d54
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr009.inf_x86_neutral_f9fcfafc6cd98b47
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr00a.inf_x86_neutral_ac88c3f9903ef7c8
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00a.inf_x86_neutral_02cc6c151e42a79e
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00b.inf_x86_neutral_c60fc0e9500f223d
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00c.inf_x86_neutral_53fa05c2a4afede5
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00d.inf_x86_neutral_18a2362487e9d14a
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00e.inf_x86_neutral_460d611128d40de9
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00f.inf_x86_neutral_635bf81e41f3872f
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00i.inf_x86_neutral_caf094f37544a669
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiacn001.inf_x86_neutral_d961f50801bfb4ab
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaep002.inf_x86_neutral_f695353fd0a22a29
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaep003.inf_x86_neutral_eef30f8de263d9ad
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiahp001.inf_x86_neutral_dae31af07561f03f
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaky002.inf_x86_neutral_c4a21cbd41020ee5
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wialx002.inf_x86_neutral_1dc4f8e789cfb4f0
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wialx003.inf_x86_neutral_c74d32723c75b87b
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wialx004.inf_x86_neutral_f6a21289cb5f23b6
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wialx005.inf_x86_neutral_dfd299ed243bbc21
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wialx006.inf_x86_neutral_3a78b4761e61c040
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiasa002.inf_x86_neutral_d00cb75222cc8460
[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaxx002.inf_x86_neutral_47abc82fbe682ba5
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\windowssideshowenhanceddriver.inf_x86_neutral_184a2ef2a8f57c33
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\winusb.inf_x86_neutral_6cb50ae9f480775b
[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wnetvsc.inf_x86_neutral_548addf09cb466fa
[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wpdcomp.inf_x86_neutral_c74d9db8cbb3545c
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wpdfs.inf_x86_neutral_fc4ebadff3a40ae4
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wpdmtp.inf_x86_neutral_28f06ca2e38e8979
[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wpdmtphw.inf_x86_neutral_a7a22bb0bb81abb0
[2011.09.17 12:54:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ws3cap.inf_x86_neutral_dac7c9faa4fc2a78
[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wsdprint.inf_x86_neutral_05711b33589b27a9
[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wsdscdrv.inf_x86_neutral_93205116e7f7a608
[2011.09.17 12:54:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wstorflt.inf_x86_neutral_3db956c41708f7f5
[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wstorvsc.inf_x86_neutral_d7bf942e99bb1d41
[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wudfusbcciddriver.inf_x86_neutral_b961cfda3f3ba863
[2011.09.17 12:54:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wvmbus.inf_x86_neutral_fca91999602b0343
[2011.09.17 12:54:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wvmbushid.inf_x86_neutral_337ff5bbc81c06e8
[2011.09.17 12:54:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wvmbusvideo.inf_x86_neutral_1b297af3587246aa
[2011.09.17 12:54:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wvmic.inf_x86_neutral_b94eb92e8150fa35
[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\xcbdav.inf_x86_neutral_8e8664e62708b91f
[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\xnacc.inf_x86_neutral_13c4e272a96185a1
[2011.01.30 15:59:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\grmnusb.inf_x86_neutral_3e4b654f12f06d57\I386
[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ibtfltcoexhs.inf_x86_neutral_ef26afc63105bc64\Win32
[2011.09.17 12:53:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ntprint.inf_x86_neutral_88459cb66b0e2d44\I386
[2009.07.14 06:50:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr002.inf_x86_neutral_1d14699bf2d4d936\I386
[2009.07.14 06:50:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr003.inf_x86_neutral_21c4516754f2bda5\I386
[2009.07.14 06:50:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr004.inf_x86_neutral_a976dec554a0be13\I386
[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr005.inf_x86_neutral_407befecac90c7f1\I386
[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr006.inf_x86_neutral_331a0c6df1c9d3e1\I386
[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr007.inf_x86_neutral_af94d26aafd1ca3a\I386
[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr008.inf_x86_neutral_87aae9d395393afd\I386
[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr009.inf_x86_neutral_3f6b69c8d1091fd8\I386
[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr00a.inf_x86_neutral_e9f0919e54780621\I386
[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca003.inf_x86_neutral_f0a023edfd5cd833\I386
[2009.07.14 06:50:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00a.inf_x86_neutral_18bf309f5cc01a3a\I386
[2009.07.14 06:50:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00b.inf_x86_neutral_c675b60dd45218c1\I386
[2009.07.14 06:50:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00c.inf_x86_neutral_9339602328d9603b\I386
[2009.07.14 06:50:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00d.inf_x86_neutral_8883e3ab4a33bfbb\I386
[2009.07.14 06:50:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00e.inf_x86_neutral_a70781c21927bfb2\I386
[2009.07.14 06:50:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00f.inf_x86_neutral_b94365c0e502f290\I386
[2009.07.14 06:50:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00g.inf_x86_neutral_b19defbd7969a7c7\I386
[2009.07.14 06:50:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00h.inf_x86_neutral_b859249f26c03a2f\I386
[2009.07.14 06:50:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00i.inf_x86_neutral_ab67935506742738\I386
[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00x.inf_x86_neutral_4dacaa756f2a85fc\I386
[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00y.inf_x86_neutral_a6e2b48d7bbe4516\I386
[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00z.inf_x86_neutral_494753193fc9051a\I386
[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep002.inf_x86_neutral_9111d9b86cbd3f64\I386
[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep003.inf_x86_neutral_342be98eb74e1449\I386
[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep004.inf_x86_neutral_25623e649d146f5d\I386
[2009.07.14 06:51:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep005.inf_x86_neutral_f4a4a2a89cb57323\I386
[2009.07.14 06:51:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00a.inf_x86_neutral_d4494950448771ed\I386
[2009.07.14 06:51:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00b.inf_x86_neutral_d0e9433101a2df79\I386
[2009.07.14 06:51:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00c.inf_x86_neutral_92ff44dcbf1c760c\I386
[2009.07.14 06:51:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00d.inf_x86_neutral_9fef51141804900a\I386
[2009.07.14 06:51:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00e.inf_x86_neutral_2fbbb3b50e96331c\I386
[2009.07.14 06:51:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00f.inf_x86_neutral_07f7a94e565e9af0\I386
[2009.07.14 06:51:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00g.inf_x86_neutral_cb6ac931b3d225af\I386
[2009.07.14 06:51:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00l.inf_x86_neutral_3323920c1a72a42d\I386
[2009.07.14 06:51:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnfx002.inf_x86_neutral_f83f67e1c22e557b\I386
[2009.07.14 06:51:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnge001.inf_x86_neutral_51cbe14e4cdde8c2\I386
[2009.07.14 06:51:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt002.inf_x86_neutral_a10ecaa46786286d\I386
[2009.07.14 06:51:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt003.inf_x86_neutral_eeb0fb3ee2847db5\I386
[2009.07.14 06:51:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt004.inf_x86_neutral_f7b569fe96e4f7ae\I386
[2009.07.14 06:51:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp002.inf_x86_neutral_e6daa9c39ac001a3\I386
[2009.07.14 06:51:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp003.inf_x86_neutral_8685826a5ca37e6b\I386
[2009.07.14 06:51:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp004.inf_x86_neutral_95288ae6f32f1fe7\I386
[2009.07.14 06:51:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp005.inf_x86_neutral_9307c57b91a7985e\I386
[2009.07.14 06:51:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin002.inf_x86_neutral_b9fa18a8d63d5294\I386
[2009.07.14 06:51:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin003.inf_x86_neutral_dca922447801904c\I386
[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin004.inf_x86_neutral_2aba7beb4ab9a9e8\I386
[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm002.inf_x86_neutral_ded1a36701bddc86\I386
[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm003.inf_x86_neutral_ea465b3729b37f54\I386
[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm004.inf_x86_neutral_b456c14d5367f83c\I386
[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm005.inf_x86_neutral_a2013031e279b6f6\I386
[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky002.inf_x86_neutral_141ca768bc51ceff\I386
[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky003.inf_x86_neutral_60797ae48ab1b87f\I386
[2009.07.14 06:51:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky004.inf_x86_neutral_dfafbddbf301a9d0\I386
[2009.07.14 06:51:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky005.inf_x86_neutral_8a163d363abb7d5a\I386
[2009.07.14 06:51:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky006.inf_x86_neutral_141ee497dd7c43c1\I386
[2009.07.14 06:51:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky007.inf_x86_neutral_68b0fb35c207d0a0\I386
[2009.07.14 06:51:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky008.inf_x86_neutral_212e30a5479d6fcd\I386
[2009.07.14 06:51:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky009.inf_x86_neutral_f01eb3bc43e6f348\I386
[2009.07.14 06:51:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle002.inf_x86_neutral_e9f41ef23faed72b\I386
[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle003.inf_x86_neutral_a8106f7f3af21d88\I386
[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle004.inf_x86_neutral_60637fb8287b0bdb\I386
[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx002.inf_x86_neutral_b460391110491d41\I386
[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx003.inf_x86_neutral_336d87d2fe949d82\I386
[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx004.inf_x86_neutral_ce7ad6f91a9470d7\I386
[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx005.inf_x86_neutral_18db8f40f5f5b950\I386
[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx006.inf_x86_neutral_6e4dca7de1f2cbe6\I386
[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx007.inf_x86_neutral_6d0bcfb01c9e96a5\I386
[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx008.inf_x86_neutral_7777e9ad978d9704\I386
[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx009.inf_x86_neutral_b6bfd02f6a69918b\I386
[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00a.inf_x86_neutral_0a6bc7f26d808a89\I386
[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00b.inf_x86_neutral_cbb4d358ebfaa1a3\I386
[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00c.inf_x86_neutral_7bc7cec2e7b7c3ed\I386
[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00d.inf_x86_neutral_303d19e2d575a492\I386
[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00e.inf_x86_neutral_ecad95350ea4a9ce\I386
[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00v.inf_x86_neutral_52b9cad0a55731b7\I386
[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00w.inf_x86_neutral_600a5a25c538ae65\I386
[2009.07.14 06:51:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00x.inf_x86_neutral_4c73c1f7a0f2d2cb\I386
[2009.07.14 06:51:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00y.inf_x86_neutral_a307e415ad8916dc\I386
[2009.07.14 06:51:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00z.inf_x86_neutral_fa9c724522edf9cf\I386
[2011.09.17 12:53:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnms002.inf_x86_neutral_baa1493e6380688b\I386
[2009.07.14 06:51:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr002.inf_x86_neutral_b9a1c43c0cb6c940\I386
[2009.07.14 06:51:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr003.inf_x86_neutral_02802729a95f0eed\I386
[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr004.inf_x86_neutral_15e7dc89d102e928\I386
[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnod002.inf_x86_neutral_c36a5fe1ac15a734\I386
[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnok002.inf_x86_neutral_436ff5d24333cca0\I386
[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc002.inf_x86_neutral_3fb2e6c401a9c7d8\I386
[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc003.inf_x86_neutral_e9198ff5f961d947\I386
[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc004.inf_x86_neutral_7d5665e9e43f678d\I386
[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc005.inf_x86_neutral_73b01a2655fdb5c5\I386
[2009.07.14 06:51:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc006.inf_x86_neutral_404ca57b9d9c1e47\I386
[2009.07.14 06:51:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc007.inf_x86_neutral_cfebba21b1c02dd7\I386
[2009.07.14 06:51:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00a.inf_x86_neutral_7818fe41c7df6d84\I386
[2009.07.14 06:51:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00b.inf_x86_neutral_354df7938905aa3b\I386
[2009.07.14 06:51:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00c.inf_x86_neutral_d5646e537534e115\I386
[2009.07.14 06:51:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsa002.inf_x86_neutral_db272f9cd17a383f\I386
[2009.07.14 06:51:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsh002.inf_x86_neutral_c41038f4d2ab5958\I386
[2009.07.14 06:51:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnso002.inf_x86_neutral_650312518f503b7b\I386
[2009.07.14 06:51:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv002.inf_x86_neutral_ee0379dbd4a7194e\I386
[2009.07.14 06:51:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv003.inf_x86_neutral_2011fa0a7f786266\I386
[2009.07.14 06:51:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv004.inf_x86_neutral_3ee5a15023f3b3ed\I386
[2009.07.14 06:51:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnts002.inf_x86_neutral_8f9e057c9ae8c777\I386
[2009.07.14 06:51:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnts003.inf_x86_neutral_b5366a7425b89579\I386
[2009.07.14 06:51:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnxx002.inf_x86_neutral_385ccd442fb8f3bb\I386
[2011.09.17 12:53:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\transfercable.inf_x86_neutral_82f4c743c8996d67\x86
[2011.09.17 12:53:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tsprint.inf_x86_neutral_c48d421ad2c1e3e3\i386
[2009.07.14 06:42:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\Temp\{6f3fd468-5fcf-59bb-59ac-0d62d16bc66f}
[2010.12.17 02:30:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C
[2010.12.17 02:30:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\Enterprise
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\EnterpriseE
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\EnterpriseN
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomeBasic
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomeBasicE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomeBasicN
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomePremium
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomePremiumE
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomePremiumN
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\Professional
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\ProfessionalE
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\ProfessionalN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\Starter
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\StarterE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\StarterN
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\Ultimate
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\UltimateE
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\UltimateN
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\Enterprise
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\EnterpriseE
[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\EnterpriseN
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomeBasic
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomeBasicE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomeBasicN
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomePremium
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomePremiumE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomePremiumN
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\Professional
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\ProfessionalE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\ProfessionalN
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\Starter
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\StarterE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\StarterN
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\Ultimate
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\UltimateE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\UltimateN
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\Enterprise
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\EnterpriseE
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\EnterpriseN
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomeBasic
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomeBasicE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomeBasicN
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomePremium
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomePremiumE
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomePremiumN
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\Professional
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\ProfessionalE
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\ProfessionalN
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\Starter
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\StarterE
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\StarterN
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\Ultimate
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\UltimateE
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\UltimateN
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\ar-sa
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\bg-bg
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\cs-cz
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\da-dk
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\de-de
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\el-gr
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\en-us
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\es-es
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\et-ee
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\fi-fi
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\fr-fr
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\he-il
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\hr-hr
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\hu-hu
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\it-it
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\ja-jp
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\ko-kr
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\lt-lt
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\lv-lv
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\nb-no
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\nl-nl
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\pl-pl
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\pt-br
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\pt-pt
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\ro-ro
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\ru-ru
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\sk-sk
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\sl-si
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\sr-latn-cs
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\sv-se
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\th-th
[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\tr-tr
[2011.09.17 11:35:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\uk-ua
[2011.09.17 11:35:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\zh-cn
[2011.09.17 11:35:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\zh-hk
[2011.09.17 11:35:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\zh-tw
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMEJP10
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\imekr8
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMESC5
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMETC10
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\shared
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMEJP10\APPLETS
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\imekr8\applets
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\imekr8\dicts
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMESC5\applets
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMETC10\applets
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\shared\res
[2010.10.05 19:40:40 | 000,000,000 | --SD | M] -- C:\Windows\system32\LogFiles\AIT
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Fax
[2009.07.14 04:03:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Firewall
[2010.10.08 01:04:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\HTTPERR
[2011.10.19 18:20:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Scm
[2010.10.06 05:00:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\SQM
[2011.11.29 18:24:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Srt
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Windows Portable Devices
[2009.07.14 06:34:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\WMI
[2010.10.05 19:18:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\WUDF
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Fax\Incoming
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Fax\Outgoing
[2012.10.24 18:52:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\WMI\RtBackup
[2012.10.17 22:16:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\Macromed\Flash
[2010.10.08 02:46:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft\Protect
[2012.09.10 17:20:21 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft\Protect\S-1-5-18
[2012.09.10 19:26:57 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft\Protect\S-1-5-19
[2010.10.08 02:46:40 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft\Protect\S-1-5-20
[2012.09.10 17:19:01 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft\Protect\S-1-5-18\User
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\de-DE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\en-US
[2011.09.17 12:54:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT
[2011.09.17 12:54:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras\dlmanifests
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras\replacementmanifests
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras\dlmanifests\Microsoft-Windows-RasServer-MigPlugin
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras\replacementmanifests\Microsoft-Windows-RasApi-MigPlugin
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras\replacementmanifests\Microsoft-Windows-RasServer-MigPlugin
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\de-DE
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\en-US
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\PostMigRes
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\BITSExtensions-Server
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-ActiveDirectory-WebServices-DL
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-ADFS-DL
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-Bluetooth-Config
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-COM-ComPlus-Setup-DL
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-COM-DTC-Setup-DL
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-DHCPServerMigPlugin-DL
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-DirectoryServices-ADAM-DL
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-IasServer-MigPlugin
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-IE-ESC
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-IIS-DL
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-International-Core-DL
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer-DRM-DL
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-msmq-messagingcoreservice
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-NDIS
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-NetworkBridge
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-NetworkLoadBalancing-Core
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-OfflineFiles-DL
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-PerformanceCounterInfrastructure-DL
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-RasApi
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-RasConnectionManager
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-RasServer-MigPlugin
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-shmig-DL
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-StorageMigration
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-Sxs
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-TapiSetup
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-Unimodem-Config
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-WMI-Core
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Networking-MPSSVC-Svc
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\PostMigRes\data
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\PostMigRes\Web
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\PostMigRes\Web\base_images
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-activedirectory-webservices
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-international-core
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-windows-audio-mmecore-other
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\Microsoft-Windows-GameUXMig
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-windows-iis-rm
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-windows-ndis
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\Microsoft-Windows-OfflineFiles-Core
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-windows-shmig
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\Microsoft-Windows-TerminalServices-AppServer-Licensing
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\Microsoft-Windows-TerminalServices-LicenseServer
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\Usb
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\WindowsSearchEngine
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\Msdtc\Trace
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\MUI\0407
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\MUI\0409
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\MUI\dispspec
[2010.10.05 19:17:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\NetworkList\Icons
[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\NetworkList\Icons\StockIcons
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\oobe\de-DE
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\oobe\en-US
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Printing_Admin_Scripts\de-DE
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\Printing_Admin_Scripts\en-US
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Setup\de-DE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\Setup\en-US
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\slmgr\0407
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\slmgr\0409
[2009.07.14 04:04:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\SMI\Manifests
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\SMI\Schema
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\SMI\Store
[2012.10.17 20:15:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\SMI\Store\Machine
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\Common
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\Engines
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\SpeechUX
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\Engines\SR
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\Engines\SR\de-DE
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\Engines\SR\en-US
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\SpeechUX\de-DE
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\SpeechUX\en-gb
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\SpeechUX\en-us
[2011.08.07 00:29:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers
[2012.10.06 20:01:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\PRINTERS
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\prtprocs
[2009.07.14 06:41:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\SERVERS
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\tools
[2011.01.13 04:53:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\color
[2009.07.14 06:42:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\IA64
[2011.09.17 12:57:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86
[2011.08.07 00:29:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\WIN40
[2009.07.14 06:42:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\x64
[2011.09.17 12:57:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3
[2011.01.18 20:04:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\I386
[2011.09.18 08:58:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\PCC
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3\de-DE
[2009.07.14 09:49:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3\en-US
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3\mui
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3\mui\0407
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3\mui\0409
[2011.09.18 08:58:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\prtprocs\w32x86
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\prtprocs\w32x86\de-DE
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\prtprocs\w32x86\en-US
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\tools\de-DE
[2009.07.14 09:49:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\tools\en-US
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\tools\Microsoft XPS Document Writer
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\plugin-manifests-signed
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\channels
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\identity
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\issuance
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\pkeyconfig
[2011.09.18 08:58:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\ppdlic
[2009.07.14 09:49:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\skus
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\channels\OCUR
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\skus\Security-SPP-Component-SKU-Ultimate
[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\ar-sa
[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\bg-bg
[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\cs-cz
[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\da-dk
[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\de-de
[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\el-gr
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\en-us
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\es-es
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\et-ee
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\fi-fi
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\fr-fr
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\he-il
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\hr-hr
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\hu-hu
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\it-it
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\ja-jp
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\ko-kr
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\lt-lt
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\lv-lv
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\nb-no
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\nl-nl
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\pl-pl
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\pt-br
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\pt-pt
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\ro-ro
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\ru-ru
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\sk-sk
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\sl-si
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\sr-latn-cs
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\sv-se
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\th-th
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\tr-tr
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\uk-ua
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\zh-cn
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\zh-hk
[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\zh-tw
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep\de-DE
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep\en-US
[2010.10.05 19:15:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep\Panther
[2010.10.05 19:15:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep\Panther\IE
[2011.08.23 21:55:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Apple
[2012.07.13 21:11:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft
[2009.07.14 06:54:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\WPD
[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Office Genuine Advantage
[2010.10.17 03:00:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows
[2011.10.19 18:20:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows Defender
[2012.07.13 21:11:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows Live
[2012.07.13 21:11:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows Live\SOXE
[2009.07.14 06:41:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Active Directory Rights Management Services Client
[2009.07.14 06:42:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\AppID
[2009.07.14 06:41:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Application Experience
[2009.07.14 06:37:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Autochk
[2009.07.14 06:42:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Bluetooth
[2009.07.14 06:41:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\CertificateServicesClient
[2009.07.14 06:53:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Customer Experience Improvement Program
[2009.07.14 06:46:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Defrag
[2009.07.14 06:42:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Diagnosis
[2010.10.05 19:15:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\DiskDiagnostic
[2009.07.14 06:42:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Location
[2009.07.14 06:42:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Maintenance
[2010.10.08 02:46:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Media Center
[2009.07.14 06:41:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\MemoryDiagnostic
[2010.10.05 19:15:34 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\MobilePC
[2009.07.14 06:41:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\MUI
[2009.07.14 06:42:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Multimedia
[2009.07.14 06:42:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\NetTrace
[2009.07.14 06:53:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\NetworkAccessProtection
[2010.10.05 19:15:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Offline Files
[2009.07.14 06:42:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\PerfTrack
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\PLA
[2009.07.14 06:41:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics
[2009.07.14 06:53:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\RAC
[2009.07.14 06:37:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Ras
[2009.07.14 06:42:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Registry
[2009.07.14 04:05:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update
[2009.07.14 06:42:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\RemoteAssistance
[2009.07.14 06:53:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Shell
[2010.10.05 19:15:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\SideShow
[2009.07.14 06:37:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\SyncCenter
[2009.07.14 06:46:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\SystemRestore
[2009.07.14 06:41:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Task Manager
[2009.07.14 06:41:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Tcpip
[2009.07.14 06:41:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\TextServicesFramework
[2009.07.14 06:37:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Time Synchronization
[2009.07.14 06:37:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\UPnP
[2009.07.14 06:41:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\User Profile Service
[2009.07.14 06:37:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\WDI
[2011.10.19 18:02:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Windows Activation Technologies
[2009.07.14 06:37:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Windows Error Reporting
[2009.07.14 06:37:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Windows Filtering Platform
[2009.07.14 06:46:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Windows Media Sharing
|
|
24.10.2012, 18:55
| #21 |
| | PC nach Trojanerbefall wirklich sauber? Nun der 5 und letzte Teil: Code:
ATTFilter [2009.07.14 06:42:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\WindowsBackup
[2009.07.14 06:42:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\WindowsColorSystem
[2009.07.14 09:49:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Media Center\Extender
[2009.07.14 06:53:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\PLA\System
[2011.09.17 12:58:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\AutoRecover
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\de-DE
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\en-US
[2009.07.14 04:03:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\Logs
[2009.07.14 06:53:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\MOF
[2012.10.02 16:12:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\Performance
[2012.10.24 18:52:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\repository
[2009.07.14 04:05:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\tmf
[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\xml
[2009.07.14 06:53:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\MOF\bad
[2009.07.14 06:53:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\MOF\good
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WCN\de-DE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\WCN\en-US
[2010.10.05 19:13:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\LogFiles
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\perftrack
[2011.10.31 16:00:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{533a67eb-9fb5-473d-b884-958cf4b9c4a3}
[2012.10.24 19:02:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}
[2011.10.31 16:00:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{ffc42108-4920-4acf-a4fc-8abdcc68ada4}
[2012.10.23 21:41:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{04be64eb-7974-44da-b3d9-023ebd7b00c4}
[2012.10.05 12:06:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{07e18c0e-394b-4b51-b4b0-667461dec993}
[2012.09.29 17:20:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{07ff3b59-ddb8-495b-b947-98b655b2a452}
[2012.10.21 19:02:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{08a2eeca-422b-4943-a2c1-f34551feb973}
[2012.10.03 18:56:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{090c95c8-e261-4441-aa79-be047a0b5420}
[2012.10.05 16:28:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{0c6b2989-a6c4-4a10-a5cd-824fcc276777}
[2012.10.22 22:43:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{136b12c6-b72e-4053-a7fb-c5de7cd11d31}
[2012.10.05 23:47:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{1385a8fb-61fd-4640-b0c8-4dd5ad7ecccf}
[2012.09.30 18:32:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{1e90db51-3396-47df-ba5f-8b2ce8863237}
[2012.09.30 19:56:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{1eb78503-aaf9-4cea-abc3-613213007517}
[2012.09.30 14:29:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{27bb092d-9857-49e5-8260-88d323591cea}
[2012.10.04 12:24:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{27bd2e84-3552-48a1-9100-160c0b68e4c3}
[2012.10.17 20:35:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{29fa9cc7-2e4a-4b0a-8f03-045e2a337ce5}
[2012.09.25 18:53:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{2abe5d6d-3b70-438f-a057-a5d61c39f48c}
[2012.10.23 20:16:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{2d5ef46b-ce59-47bb-b250-8c0c3d844495}
[2012.09.28 11:43:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{2dd00525-204a-47de-9fdb-9589c9b6362d}
[2012.10.20 09:16:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{31d267a2-1400-4703-8694-dedbfbdcb57c}
[2012.09.24 22:29:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{336b703e-b8c3-417b-be6c-fed9b7762b86}
[2012.09.25 17:15:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{37cf8fff-99d6-412b-b314-490259b9a30c}
[2012.10.04 13:22:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{41ad2d59-9fd3-41ff-a538-0c47ffa63430}
[2012.09.29 18:53:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{43a618ae-91a0-45f4-9db7-715a2a25857f}
[2012.09.28 13:28:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{4cd680b6-e738-415a-9932-57251e226971}
[2012.10.21 17:52:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{4d1fa960-b5fd-47d2-ae36-8a232d7ee52e}
[2012.10.03 07:23:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{4daea611-d384-4410-a458-66221245d3bd}
[2012.09.27 07:27:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{56cc3223-4692-4455-a681-1a2f70b57543}
[2012.10.22 19:46:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{5710c98d-8a05-4e07-a558-7c3f5a05360b}
[2012.09.28 12:40:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{57d8cced-c0d5-4644-85b8-6a07b83b3f6d}
[2012.09.29 13:14:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{59584f17-e233-47ce-a435-1849f5121286}
[2012.10.17 20:18:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{614e20f2-2fcf-49f0-8b42-701960266cb9}
[2012.10.24 18:53:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{61fccfee-9825-4d12-ac9d-c620a4cff3f4}
[2012.09.29 16:29:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{63e39e96-cb29-4aff-9738-6c08044d61a6}
[2012.10.17 21:23:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{6657425d-7d22-40d5-a6a5-fd274dfbf2b4}
[2012.10.01 19:15:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{744bfd14-a6d5-42ac-84d4-4a21c96875b4}
[2012.10.21 20:08:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{7535428b-b713-4924-911f-a8d0786863e7}
[2012.09.27 20:04:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{76cec45c-5d4b-4170-a757-07bd665490e0}
[2012.10.24 07:27:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{76fa4d8f-09d6-4a86-a22d-c5d9951d82f8}
[2012.10.21 01:20:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{775e4fa5-d553-4184-b346-45fe9509bcc4}
[2012.09.29 19:18:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{7845ece5-7dc0-4df2-a607-90d33c44c8cf}
[2012.10.02 12:58:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{7aead139-453e-4442-a256-cb96b30a220e}
[2012.09.30 16:52:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{7de3a462-1696-4e0c-a23f-cb5a27ea3c9f}
[2012.09.29 11:39:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{80588938-6a7e-495c-8145-8d3f89bbe4db}
[2012.10.08 22:29:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{83495eb8-074b-40a2-b39a-3c9030eff9fc}
[2012.10.21 22:31:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{871cffa1-59b0-4b43-ae2f-7446bff6764f}
[2012.10.19 08:44:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8744afcd-b515-4f04-992d-8861809c3c1a}
[2012.10.22 08:06:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8817e2eb-ff47-4a4e-8a2e-a9d9462e456c}
[2012.10.03 09:42:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8822b9dd-5939-46a1-bfb2-08de089ddd33}
[2012.09.26 09:12:22 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{89c9db24-4dab-42ab-9378-357bf1f94ce3}
[2012.10.01 17:03:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8b185b3b-a21c-4ef5-b3db-725653b9078e}
[2012.10.02 09:15:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8bd6475d-f6aa-4a6b-9510-a30cf97c16b0}
[2012.09.25 08:40:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8f7edde5-6c95-4e44-ab7b-d206e865b0a8}
[2012.09.28 09:55:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{95e3721d-460f-4057-a762-d4b91ab45053}
[2012.09.30 11:04:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{9b252490-8ab5-402d-beb3-97e69ea99d03}
[2012.10.04 08:53:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{9ece8c30-0290-4323-af40-59926586d752}
[2012.10.21 18:00:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{a1ec208d-2794-4912-8a48-2f2fc28aee38}
[2012.10.05 08:30:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{a5806577-7e56-42ba-b623-29f23b31486e}
[2012.10.21 13:16:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{a9144061-d2da-4cf3-9fc6-ecf92efc6246}
[2012.10.20 18:07:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{ac74bf24-160f-473f-ade6-28b86db5af8e}
[2012.10.22 14:49:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{af11f992-c464-47d0-b922-369c3a533d03}
[2012.10.24 14:35:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{af6de6a6-1bb2-49fb-9015-4ed3ba522de2}
[2012.09.29 18:31:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{bad4f58f-eccd-48f8-bb50-aca9362744eb}
[2012.10.21 21:18:37 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{bbd742bd-cbd9-4913-b42a-f240ae806675}
[2012.10.06 13:31:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{bd0cd6f2-2462-48ef-a240-44e45bdb50bb}
[2012.10.01 07:27:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{bd33452f-efd1-4390-81f4-4f951af7db39}
[2012.09.24 19:18:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{bec541ae-da8c-45ea-925c-63e3d1cce23e}
[2012.10.17 20:02:22 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c4193530-06e7-4a99-9d0d-7303ce706c38}
[2012.10.06 01:07:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c4ba94bb-9748-4515-9b02-6a2f59c5c216}
[2012.10.02 16:10:37 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c6632295-9b33-43e1-b0e9-1f5dea649562}
[2012.09.25 15:44:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c6d2fa29-9b9d-4fb7-b491-c524cc422f9e}
[2012.10.05 12:28:22 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c7b9f4a8-3817-4e82-bb83-a6f203d177f1}
[2012.10.06 17:45:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c838dafc-ce9c-49c7-a365-2ef5875536d3}
[2012.10.23 11:46:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c8a1c6f7-1af5-4dec-a545-40ba6b82609c}
[2012.09.26 20:13:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c9e72a70-e9c7-4874-9c79-a36cb4051058}
[2012.09.25 21:04:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{cd943439-fbc6-4b20-b4d0-c87178bfab86}
[2012.10.16 20:56:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{cec86649-a4d6-4219-a813-3d0a2c38260c}
[2012.10.02 14:55:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{d0bff252-f4f5-4a7d-bad3-84df1ade405e}
[2012.10.20 13:45:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{d0fd97e7-289f-49ae-b758-9d8855258191}
[2012.10.04 16:59:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{dfbf67ec-79ed-4168-a216-8b3efb4a8956}
[2012.09.25 19:31:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e2c3ca69-7971-488b-b04d-f1f4950c3b72}
[2012.09.27 17:26:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e343bd05-b07f-4164-97f6-7c20472b78a8}
[2012.10.16 20:39:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e4c8e706-ef6a-40ea-9245-156312bac845}
[2012.10.18 20:03:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e4e56cfa-3a5f-4bc7-bcf9-db959994481a}
[2012.10.17 17:29:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e67f66d8-6956-4b99-bd96-9ef24ccbe682}
[2012.09.28 19:45:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e9c440a3-27cb-4f84-a5f2-3c904fd24992}
[2012.09.27 15:08:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{ea8b9a5a-c786-4fe1-a91c-78e160a6a01e}
[2012.10.02 17:10:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{f01aeed6-68b9-4707-9f8b-968d3fdc7962}
[2012.10.05 13:44:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{f19a56c4-528f-4354-a7c8-a0631b582a68}
[2012.10.23 08:10:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{f4fa90d9-83e9-4b71-836c-ab6d06877a2f}
[2012.09.26 12:20:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{f5852e2e-6928-4c67-89c3-74040ccc9ec1}
[2012.09.27 12:16:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{fbc714cc-a2b0-47ed-8746-e4cc49f0f3fd}
[2012.10.02 11:08:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{ffc5aeb3-633a-4610-8b82-f85671d56dc4}
[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\perftrack\traces
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WinBioPlugIns\de-DE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\WinBioPlugIns\en-US
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0
[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\de-DE
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\en-US
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Examples
[2009.07.14 09:49:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules
[2010.10.06 05:10:41 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\AppLocker
[2011.09.17 12:54:53 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitsTransfer
[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\PSDiagnostics
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\TroubleshootingPack
[2010.10.06 05:10:41 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\AppLocker\de-DE
[2009.07.14 09:49:45 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\AppLocker\en-US
[2010.10.06 05:10:41 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitsTransfer\de-DE
[2009.07.14 06:56:47 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitsTransfer\en-US
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\TroubleshootingPack\de-DE
[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\TroubleshootingPack\en-US
[2012.10.16 19:20:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\winevt\Logs
[2009.07.14 04:03:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\winevt\TraceFormat
[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\winrm\0407
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\winrm\0409
[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\XPSViewer\de-DE
< %systemroot%\system32\drivers\*. /s >
[2012.10.24 18:55:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\AVG
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\de-DE
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\en-US
[2012.10.23 21:39:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\etc
[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF
[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF\de-DE
[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF\en-US
< %systemroot%\System32\config\*. /s >
[2009.07.14 04:04:23 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\Journal
[2012.10.17 20:53:42 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\RegBack
[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile
[2011.11.29 18:24:00 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\TxR
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData
[2011.08.07 00:41:08 | 000,000,000 | R--D | M] -- C:\Windows\System32\config\systemprofile\Favorites
[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local
[2012.07.10 19:45:18 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow
[2010.12.17 02:28:21 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming
[2011.04.22 14:42:00 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Google
[2011.12.02 17:27:48 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft
[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\pdfMachine
[2011.04.22 14:37:12 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Google\CrashReports
[2010.11.23 12:48:38 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Google\GBScreensaver
[2012.10.17 21:28:11 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Device Metadata
[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL
[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer
[2010.10.15 14:33:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\OFFICE
[2010.10.14 14:22:33 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices
[2009.07.14 06:41:53 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows
[2011.12.02 17:27:48 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Device Metadata\dmrccache
[2011.12.02 17:27:48 | 000,000,000 | -H-D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Device Metadata\dmrccache\downloads
[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL\production
[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL\production\temp
[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery
[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High
[2011.08.07 00:41:19 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active
[2009.07.14 06:37:42 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches
[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History
[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files
[2009.07.14 06:41:53 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\Low
[2010.10.05 19:17:23 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low
[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized
[2012.10.17 20:56:53 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2L4UWCS7
[2010.10.05 19:17:23 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O3ZC791N
[2012.10.17 20:56:53 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q2Y5HK5G
[2010.11.11 19:44:19 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W9FYELDD
[2010.12.17 02:31:01 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Apple Computer
[2012.07.10 19:45:18 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\AVG Secure Search
[2010.10.15 14:34:24 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun
[2010.12.17 02:31:01 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Apple Computer\QuickTime
[2012.08.30 19:54:51 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\AVG Secure Search\cache
[2009.07.14 06:43:06 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache
[2010.10.15 14:34:24 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\Silverlight
[2012.10.16 21:45:30 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
[2012.10.16 21:45:30 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host
[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin
[2010.12.17 02:28:21 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Apple Computer
[2011.08.07 00:41:06 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft
[2012.10.24 18:52:10 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Apple Computer\Logs
[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL
[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows
[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL\production
[2012.10.20 09:14:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL\production\temp
[2011.08.07 00:41:06 | 000,000,000 | R--D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs
[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs
[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IECompatCache
[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\PrivacIE
[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\Low
[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IECompatCache\Low
[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\Low
[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\PrivacIE\Low
[2011.08.07 00:41:08 | 000,000,000 | R--D | M] -- C:\Windows\System32\config\systemprofile\Favorites\Links
< %systemroot%\*. /mp /s >
========== Files - Unicode (All) ==========
[2011.07.16 02:26:42 | 014,814,100 | ---- | M] ()(C:\Users\878\Documents\????, ????? ??????????, ??? 2010.wmv) -- C:\Users\878\Documents\Саня, Точка невозврата, НТВ 2010.wmv
[2011.07.16 02:25:52 | 014,814,100 | ---- | C] ()(C:\Users\878\Documents\????, ????? ??????????, ??? 2010.wmv) -- C:\Users\878\Documents\Саня, Точка невозврата, НТВ 2010.wmv
< End of report >
|
|
24.10.2012, 20:23
| #22 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC nach Trojanerbefall wirklich sauber? Beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!) Code:
ATTFilter :OTL
[2012.10.07 01:02:39 | 000,074,137 | ---- | C] () -- C:\ProgramData\eatstoapzfibbbc
[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR120TWN
[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR330TWN
ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[resethosts]
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet. Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt. Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
24.10.2012, 22:11
| #23 |
| | PC nach Trojanerbefall wirklich sauber? Hier das Ergebnis: Code:
ATTFilter All processes killed
========== OTL ==========
C:\ProgramData\eatstoapzfibbbc moved successfully.
C:\Users\878\AppData\Roaming\CR120TWN\Images folder moved successfully.
C:\Users\878\AppData\Roaming\CR120TWN folder moved successfully.
C:\Users\878\AppData\Roaming\CR330TWN folder moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: 878
->Temp folder emptied: 17426 bytes
->Temporary Internet Files folder emptied: 35923 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 13800037 bytes
->Opera cache emptied: 51327676 bytes
->Flash cache emptied: 1342 bytes
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 14364 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 62,00 mb
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
OTL by OldTimer - Version 3.2.69.0 log created on 10242012_230754
Files\Folders moved on Reboot...
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
|
|
25.10.2012, 09:38
| #24 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC nach Trojanerbefall wirklich sauber? Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm! Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet, Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten. Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs. Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten! 
__________________ Logfiles bitte immer in CODE-Tags posten |
|
25.10.2012, 19:56
| #25 |
| | PC nach Trojanerbefall wirklich sauber? Hallo, hier der Report: Code:
ATTFilter 20:44:45.0667 2224 TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47
20:44:46.0105 2224 ============================================================
20:44:46.0105 2224 Current date / time: 2012/10/25 20:44:46.0105
20:44:46.0105 2224 SystemInfo:
20:44:46.0105 2224
20:44:46.0105 2224 OS Version: 6.1.7601 ServicePack: 1.0
20:44:46.0105 2224 Product type: Workstation
20:44:46.0105 2224 ComputerName: 878-PC
20:44:46.0105 2224 UserName: 878
20:44:46.0105 2224 Windows directory: C:\Windows
20:44:46.0105 2224 System windows directory: C:\Windows
20:44:46.0105 2224 Processor architecture: Intel x86
20:44:46.0105 2224 Number of processors: 2
20:44:46.0105 2224 Page size: 0x1000
20:44:46.0105 2224 Boot type: Normal boot
20:44:46.0105 2224 ============================================================
20:44:47.0761 2224 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
20:44:47.0761 2224 ============================================================
20:44:47.0761 2224 \Device\Harddisk0\DR0:
20:44:47.0761 2224 MBR partitions:
20:44:47.0761 2224 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A380D41
20:44:47.0761 2224 ============================================================
20:44:47.0777 2224 C: <-> \Device\Harddisk0\DR0\Partition1
20:44:47.0777 2224 ============================================================
20:44:47.0777 2224 Initialize success
20:44:47.0777 2224 ============================================================
20:44:57.0137 5968 ============================================================
20:44:57.0137 5968 Scan started
20:44:57.0137 5968 Mode: Manual; SigCheck; TDLFS;
20:44:57.0137 5968 ============================================================
20:44:58.0684 5968 ================ Scan system memory ========================
20:44:58.0684 5968 System memory - ok
20:44:58.0684 5968 ================ Scan services =============================
20:44:58.0950 5968 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
20:44:59.0043 5968 1394ohci - ok
20:44:59.0122 5968 [ E6F53D6C0DEA3D375362265E175CA638 ] acedrv11 C:\Windows\system32\drivers\acedrv11.sys
20:44:59.0387 5968 acedrv11 - ok
20:44:59.0403 5968 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
20:44:59.0418 5968 ACPI - ok
20:44:59.0450 5968 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
20:44:59.0512 5968 AcpiPmi - ok
20:44:59.0622 5968 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
20:44:59.0637 5968 AdobeARMservice - ok
20:44:59.0715 5968 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
20:44:59.0731 5968 AdobeFlashPlayerUpdateSvc - ok
20:44:59.0778 5968 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
20:44:59.0793 5968 adp94xx - ok
20:44:59.0809 5968 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
20:44:59.0825 5968 adpahci - ok
20:44:59.0840 5968 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
20:44:59.0856 5968 adpu320 - ok
20:44:59.0887 5968 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:44:59.0934 5968 AeLookupSvc - ok
20:44:59.0997 5968 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys
20:45:00.0059 5968 AFD - ok
20:45:00.0090 5968 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
20:45:00.0106 5968 agp440 - ok
20:45:00.0122 5968 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
20:45:00.0137 5968 aic78xx - ok
20:45:00.0153 5968 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
20:45:00.0184 5968 ALG - ok
20:45:00.0200 5968 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
20:45:00.0217 5968 aliide - ok
20:45:00.0235 5968 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
20:45:00.0235 5968 amdagp - ok
20:45:00.0250 5968 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
20:45:00.0266 5968 amdide - ok
20:45:00.0282 5968 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
20:45:00.0329 5968 AmdK8 - ok
20:45:00.0344 5968 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
20:45:00.0375 5968 AmdPPM - ok
20:45:00.0422 5968 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys
20:45:00.0438 5968 amdsata - ok
20:45:00.0454 5968 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
20:45:00.0469 5968 amdsbs - ok
20:45:00.0485 5968 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
20:45:00.0485 5968 amdxata - ok
20:45:00.0532 5968 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
20:45:00.0704 5968 AppID - ok
20:45:00.0719 5968 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
20:45:00.0766 5968 AppIDSvc - ok
20:45:00.0813 5968 [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo C:\Windows\System32\appinfo.dll
20:45:00.0844 5968 Appinfo - ok
20:45:00.0969 5968 [ 20F6F19FE9E753F2780DC2FA083AD597 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
20:45:00.0969 5968 Apple Mobile Device - ok
20:45:01.0016 5968 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
20:45:01.0079 5968 AppMgmt - ok
20:45:01.0094 5968 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
20:45:01.0110 5968 arc - ok
20:45:01.0125 5968 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
20:45:01.0141 5968 arcsas - ok
20:45:01.0157 5968 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
20:45:01.0267 5968 AsyncMac - ok
20:45:01.0298 5968 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
20:45:01.0314 5968 atapi - ok
20:45:01.0361 5968 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:45:01.0408 5968 AudioEndpointBuilder - ok
20:45:01.0423 5968 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
20:45:01.0470 5968 Audiosrv - ok
20:45:01.0642 5968 [ F6A528DE535396C2FB1A4E3C6F00CEC4 ] AVGIDSAgent C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
20:45:01.0736 5968 AVGIDSAgent - ok
20:45:01.0783 5968 [ 1074F787080068C71303B61FAE7E7CA4 ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdriverx.sys
20:45:01.0783 5968 AVGIDSDriver - ok
20:45:01.0798 5968 [ 61A7E0B02F82CFF3DB2445BBE50B3589 ] AVGIDSFilter C:\Windows\system32\DRIVERS\avgidsfilterx.sys
20:45:01.0814 5968 AVGIDSFilter - ok
20:45:01.0845 5968 [ D63D83659EEDF60B3A3E620281A888E5 ] AVGIDSHX C:\Windows\system32\DRIVERS\avgidshx.sys
20:45:01.0861 5968 AVGIDSHX - ok
20:45:01.0892 5968 [ BAF975B72062F53D327788E99D64197E ] AVGIDSShim C:\Windows\system32\DRIVERS\avgidsshimx.sys
20:45:01.0908 5968 AVGIDSShim - ok
20:45:01.0923 5968 [ DCB09125C8B4766A88C86914B65487C1 ] Avgldx86 C:\Windows\system32\DRIVERS\avgldx86.sys
20:45:01.0939 5968 Avgldx86 - ok
20:45:01.0955 5968 [ CCDD61545AAEA265977E4B1EFDC74E8C ] Avgmfx86 C:\Windows\system32\DRIVERS\avgmfx86.sys
20:45:01.0970 5968 Avgmfx86 - ok
20:45:02.0017 5968 [ 1FD90B28D2C3100BF4500199C8AD6358 ] Avgrkx86 C:\Windows\system32\DRIVERS\avgrkx86.sys
20:45:02.0033 5968 Avgrkx86 - ok
20:45:02.0064 5968 [ C0BC3B2E3FD625E7F55E1FF863E94592 ] Avgtdix C:\Windows\system32\DRIVERS\avgtdix.sys
20:45:02.0080 5968 Avgtdix - ok
20:45:02.0126 5968 [ 6F76908F065C3C151C4BFCA7DFD86979 ] avgtp C:\Windows\system32\drivers\avgtpx86.sys
20:45:02.0126 5968 avgtp - ok
20:45:02.0158 5968 [ EA1145DEBCD508FD25BD1E95C4346929 ] avgwd C:\Program Files\AVG\AVG2012\avgwdsvc.exe
20:45:02.0173 5968 avgwd - ok
20:45:02.0220 5968 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
20:45:02.0298 5968 AxInstSV - ok
20:45:02.0330 5968 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
20:45:02.0376 5968 b06bdrv - ok
20:45:02.0408 5968 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
20:45:02.0439 5968 b57nd60x - ok
20:45:02.0486 5968 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
20:45:02.0548 5968 BDESVC - ok
20:45:02.0564 5968 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
20:45:02.0611 5968 Beep - ok
20:45:02.0673 5968 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
20:45:02.0720 5968 BFE - ok
20:45:02.0783 5968 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
20:45:02.0845 5968 BITS - ok
20:45:02.0876 5968 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
20:45:02.0908 5968 blbdrive - ok
20:45:02.0986 5968 [ 1C87705CCB2F60172B0FC86B5D82F00D ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
20:45:03.0001 5968 Bonjour Service - ok
20:45:03.0033 5968 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:45:03.0080 5968 bowser - ok
20:45:03.0080 5968 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
20:45:03.0126 5968 BrFiltLo - ok
20:45:03.0126 5968 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
20:45:03.0158 5968 BrFiltUp - ok
20:45:03.0205 5968 [ 6E11F33D14D020F58D5E02E4D67DFA19 ] Browser C:\Windows\System32\browser.dll
20:45:03.0251 5968 Browser - ok
20:45:03.0283 5968 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
20:45:03.0314 5968 Brserid - ok
20:45:03.0345 5968 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
20:45:03.0376 5968 BrSerWdm - ok
20:45:03.0392 5968 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
20:45:03.0423 5968 BrUsbMdm - ok
20:45:03.0439 5968 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
20:45:03.0455 5968 BrUsbSer - ok
20:45:03.0501 5968 [ DB99076533FFB38CBEC8AC88E4535850 ] BthAvrcp C:\Windows\system32\DRIVERS\BthAvrcp.sys
20:45:03.0548 5968 BthAvrcp - ok
20:45:03.0580 5968 [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
20:45:03.0611 5968 BthEnum - ok
20:45:03.0626 5968 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
20:45:03.0673 5968 BTHMODEM - ok
20:45:03.0705 5968 [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
20:45:03.0736 5968 BthPan - ok
20:45:03.0783 5968 [ C2FBF6D271D9A94D839C416BF186EAD9 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
20:45:03.0830 5968 BTHPORT - ok
20:45:03.0861 5968 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
20:45:03.0908 5968 bthserv - ok
20:45:03.0939 5968 [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
20:45:03.0955 5968 BTHUSB - ok
20:45:03.0970 5968 [ D517BA16793D76210C963DAB2A88B74F ] btmhsf C:\Windows\system32\DRIVERS\btmhsf.sys
20:45:04.0001 5968 btmhsf - ok
20:45:04.0017 5968 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:45:04.0080 5968 cdfs - ok
20:45:04.0111 5968 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
20:45:04.0126 5968 cdrom - ok
20:45:04.0173 5968 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
20:45:04.0205 5968 CertPropSvc - ok
20:45:04.0236 5968 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
20:45:04.0251 5968 circlass - ok
20:45:04.0283 5968 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
20:45:04.0298 5968 CLFS - ok
20:45:04.0345 5968 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:45:04.0361 5968 clr_optimization_v2.0.50727_32 - ok
20:45:04.0408 5968 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:45:04.0439 5968 clr_optimization_v4.0.30319_32 - ok
20:45:04.0455 5968 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
20:45:04.0486 5968 CmBatt - ok
20:45:04.0501 5968 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
20:45:04.0517 5968 cmdide - ok
20:45:04.0533 5968 [ 1B675691ED940766149C93E8F4488D68 ] CNG C:\Windows\system32\Drivers\cng.sys
20:45:04.0564 5968 CNG - ok
20:45:04.0580 5968 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
20:45:04.0580 5968 Compbatt - ok
20:45:04.0595 5968 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
20:45:04.0642 5968 CompositeBus - ok
20:45:04.0658 5968 COMSysApp - ok
20:45:04.0751 5968 cpuz132 - ok
20:45:04.0751 5968 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
20:45:04.0767 5968 crcdisk - ok
20:45:04.0814 5968 [ A585BEBF7D054BD9618EDA0922D5484A ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:45:04.0845 5968 CryptSvc - ok
20:45:04.0892 5968 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys
20:45:04.0939 5968 CSC - ok
20:45:04.0986 5968 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll
20:45:05.0001 5968 CscService - ok
20:45:05.0017 5968 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
20:45:05.0064 5968 DcomLaunch - ok
20:45:05.0095 5968 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
20:45:05.0142 5968 defragsvc - ok
20:45:05.0173 5968 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
20:45:05.0220 5968 DfsC - ok
20:45:05.0251 5968 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
20:45:05.0298 5968 Dhcp - ok
20:45:05.0330 5968 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
20:45:05.0376 5968 discache - ok
20:45:05.0423 5968 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
20:45:05.0439 5968 Disk - ok
20:45:05.0470 5968 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:45:05.0517 5968 Dnscache - ok
20:45:05.0548 5968 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
20:45:05.0580 5968 dot3svc - ok
20:45:05.0626 5968 [ B5E479EB83707DD698F66953E922042C ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
20:45:05.0658 5968 Dot4 - ok
20:45:05.0705 5968 [ CAEFD09B6A6249C53A67D55A9A9FCABF ] Dot4Print C:\Windows\system32\drivers\Dot4Prt.sys
20:45:05.0751 5968 Dot4Print - ok
20:45:05.0767 5968 [ CF491FF38D62143203C065260567E2F7 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
20:45:05.0798 5968 dot4usb - ok
20:45:05.0830 5968 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
20:45:05.0892 5968 DPS - ok
20:45:05.0908 5968 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:45:05.0939 5968 drmkaud - ok
20:45:06.0001 5968 [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:45:06.0033 5968 DXGKrnl - ok
20:45:06.0064 5968 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
20:45:06.0111 5968 EapHost - ok
20:45:06.0189 5968 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
20:45:06.0267 5968 ebdrv - ok
20:45:06.0314 5968 [ F42309C4191C506B71DB5D1126D26318 ] EFS C:\Windows\System32\lsass.exe
20:45:06.0345 5968 EFS - ok
20:45:06.0408 5968 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
20:45:06.0439 5968 ehRecvr - ok
20:45:06.0470 5968 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
20:45:06.0501 5968 ehSched - ok
20:45:06.0533 5968 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
20:45:06.0548 5968 elxstor - ok
20:45:06.0580 5968 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
20:45:06.0611 5968 ErrDev - ok
20:45:06.0658 5968 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
20:45:06.0720 5968 EventSystem - ok
20:45:06.0736 5968 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
20:45:06.0783 5968 exfat - ok
20:45:06.0798 5968 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:45:06.0845 5968 fastfat - ok
20:45:06.0908 5968 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
20:45:06.0955 5968 Fax - ok
20:45:06.0970 5968 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
20:45:07.0001 5968 fdc - ok
20:45:07.0017 5968 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
20:45:07.0064 5968 fdPHost - ok
20:45:07.0095 5968 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
20:45:07.0142 5968 FDResPub - ok
20:45:07.0158 5968 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:45:07.0173 5968 FileInfo - ok
20:45:07.0189 5968 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:45:07.0236 5968 Filetrace - ok
20:45:07.0287 5968 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
20:45:07.0318 5968 flpydisk - ok
20:45:07.0349 5968 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:45:07.0365 5968 FltMgr - ok
20:45:07.0396 5968 [ B3A5EC6B6B6673DB7E87C2BCDBDDC074 ] FontCache C:\Windows\system32\FntCache.dll
20:45:07.0458 5968 FontCache - ok
20:45:07.0521 5968 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
20:45:07.0521 5968 FontCache3.0.0.0 - ok
20:45:07.0537 5968 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
20:45:07.0552 5968 FsDepends - ok
20:45:07.0568 5968 [ A574B4360E438977038AAE4BF60D79A2 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:45:07.0568 5968 Fs_Rec - ok
20:45:07.0615 5968 [ 8A73E79089B282100B9393B644CB853B ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
20:45:07.0630 5968 fvevol - ok
20:45:07.0646 5968 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
20:45:07.0662 5968 gagp30kx - ok
20:45:07.0708 5968 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
20:45:07.0724 5968 GEARAspiWDM - ok
20:45:07.0771 5968 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
20:45:07.0818 5968 gpsvc - ok
20:45:07.0896 5968 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
20:45:07.0912 5968 gupdate - ok
20:45:07.0927 5968 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
20:45:07.0943 5968 gupdatem - ok
20:45:07.0974 5968 [ C1B577B2169900F4CF7190C39F085794 ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
20:45:07.0990 5968 gusvc - ok
20:45:08.0005 5968 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
20:45:08.0052 5968 hcw85cir - ok
20:45:08.0083 5968 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:45:08.0115 5968 HdAudAddService - ok
20:45:08.0130 5968 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
20:45:08.0162 5968 HDAudBus - ok
20:45:08.0162 5968 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
20:45:08.0193 5968 HidBatt - ok
20:45:08.0208 5968 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
20:45:08.0240 5968 HidBth - ok
20:45:08.0272 5968 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
20:45:08.0303 5968 HidIr - ok
20:45:08.0350 5968 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
20:45:08.0397 5968 hidserv - ok
20:45:08.0444 5968 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
20:45:08.0459 5968 HidUsb - ok
20:45:08.0491 5968 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
20:45:08.0538 5968 hkmsvc - ok
20:45:08.0569 5968 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
20:45:08.0600 5968 HomeGroupListener - ok
20:45:08.0631 5968 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
20:45:08.0678 5968 HomeGroupProvider - ok
20:45:08.0725 5968 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
20:45:08.0725 5968 HpSAMD - ok
20:45:08.0772 5968 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:45:08.0819 5968 HTTP - ok
20:45:08.0850 5968 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
20:45:08.0850 5968 hwpolicy - ok
20:45:08.0897 5968 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
20:45:08.0928 5968 i8042prt - ok
20:45:08.0959 5968 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
20:45:08.0991 5968 iaStorV - ok
20:45:08.0991 5968 [ 61401BA4183BC171BA114FCE4981BB33 ] iBtFltCoex C:\Windows\system32\DRIVERS\iBtFltCoex.sys
20:45:09.0022 5968 iBtFltCoex - ok
20:45:09.0084 5968 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
20:45:09.0116 5968 idsvc - ok
20:45:09.0147 5968 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
20:45:09.0147 5968 iirsp - ok
20:45:09.0178 5968 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll
20:45:09.0225 5968 IKEEXT - ok
20:45:09.0256 5968 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
20:45:09.0256 5968 intelide - ok
20:45:09.0272 5968 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
20:45:09.0303 5968 intelppm - ok
20:45:09.0319 5968 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
20:45:09.0381 5968 IPBusEnum - ok
20:45:09.0413 5968 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:45:09.0444 5968 IpFilterDriver - ok
20:45:09.0491 5968 [ 4D65A07B795D6674312F879D09AA7663 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:45:09.0538 5968 iphlpsvc - ok
20:45:09.0569 5968 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
20:45:09.0600 5968 IPMIDRV - ok
20:45:09.0631 5968 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
20:45:09.0678 5968 IPNAT - ok
20:45:09.0741 5968 [ F62C69376A95795FE7CDB1C778EDACA4 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
20:45:09.0772 5968 iPod Service - ok
20:45:09.0788 5968 [ 9F7E491FB0BA0F9E370163834FC1FE31 ] irda C:\Windows\system32\DRIVERS\irda.sys
20:45:09.0834 5968 irda - ok
20:45:09.0866 5968 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:45:09.0881 5968 IRENUM - ok
20:45:09.0913 5968 [ 4220D2F03D5C4226D0A1AA4B84025E45 ] Irmon C:\Windows\System32\irmon.dll
20:45:09.0928 5968 Irmon - ok
20:45:09.0959 5968 [ 5896B5FF6332AB2BE1582523E9656A67 ] irsir C:\Windows\system32\DRIVERS\irsir.sys
20:45:10.0022 5968 irsir - ok
20:45:10.0053 5968 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:45:10.0069 5968 isapnp - ok
20:45:10.0100 5968 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
20:45:10.0116 5968 iScsiPrt - ok
20:45:10.0147 5968 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
20:45:10.0163 5968 kbdclass - ok
20:45:10.0194 5968 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
20:45:10.0225 5968 kbdhid - ok
20:45:10.0241 5968 [ F42309C4191C506B71DB5D1126D26318 ] KeyIso C:\Windows\system32\lsass.exe
20:45:10.0241 5968 KeyIso - ok
20:45:10.0289 5968 [ 412CEA1AA78CC02A447F5C9E62B32FF1 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:45:10.0289 5968 KSecDD - ok
20:45:10.0320 5968 [ 26C046977E85B95036453D7B88BA1820 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
20:45:10.0320 5968 KSecPkg - ok
20:45:10.0367 5968 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
20:45:10.0414 5968 KtmRm - ok
20:45:10.0445 5968 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\system32\srvsvc.dll
20:45:10.0492 5968 LanmanServer - ok
20:45:10.0523 5968 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:45:10.0554 5968 LanmanWorkstation - ok
20:45:10.0570 5968 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
20:45:10.0617 5968 lltdio - ok
20:45:10.0648 5968 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:45:10.0695 5968 lltdsvc - ok
20:45:10.0726 5968 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
20:45:10.0757 5968 lmhosts - ok
20:45:10.0804 5968 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
20:45:10.0820 5968 LSI_FC - ok
20:45:10.0835 5968 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
20:45:10.0835 5968 LSI_SAS - ok
20:45:10.0851 5968 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
20:45:10.0867 5968 LSI_SAS2 - ok
20:45:10.0882 5968 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
20:45:10.0898 5968 LSI_SCSI - ok
20:45:10.0914 5968 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
20:45:10.0945 5968 luafv - ok
20:45:10.0992 5968 [ 500D089CE760D83DA2B6CBA681AA9949 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
20:45:10.0992 5968 MBAMProtector - ok
20:45:11.0054 5968 [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
20:45:11.0070 5968 MBAMScheduler - ok
20:45:11.0101 5968 [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
20:45:11.0132 5968 MBAMService - ok
20:45:11.0164 5968 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
20:45:11.0179 5968 Mcx2Svc - ok
20:45:11.0195 5968 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
20:45:11.0210 5968 megasas - ok
20:45:11.0226 5968 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
20:45:11.0242 5968 MegaSR - ok
20:45:11.0242 5968 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
20:45:11.0289 5968 MMCSS - ok
20:45:11.0320 5968 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
20:45:11.0367 5968 Modem - ok
20:45:11.0382 5968 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
20:45:11.0414 5968 monitor - ok
20:45:11.0429 5968 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
20:45:11.0445 5968 mouclass - ok
20:45:11.0460 5968 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
20:45:11.0492 5968 mouhid - ok
20:45:11.0523 5968 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
20:45:11.0539 5968 mountmgr - ok
20:45:11.0554 5968 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
20:45:11.0570 5968 mpio - ok
20:45:11.0585 5968 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:45:11.0632 5968 mpsdrv - ok
20:45:11.0679 5968 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
20:45:11.0726 5968 MpsSvc - ok
20:45:11.0773 5968 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:45:11.0804 5968 MRxDAV - ok
20:45:11.0867 5968 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:45:11.0882 5968 mrxsmb - ok
20:45:11.0945 5968 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:45:11.0976 5968 mrxsmb10 - ok
20:45:12.0007 5968 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:45:12.0039 5968 mrxsmb20 - ok
20:45:12.0070 5968 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
20:45:12.0070 5968 msahci - ok
20:45:12.0101 5968 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
20:45:12.0117 5968 msdsm - ok
20:45:12.0148 5968 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
20:45:12.0179 5968 MSDTC - ok
20:45:12.0210 5968 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:45:12.0242 5968 Msfs - ok
20:45:12.0257 5968 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
20:45:12.0289 5968 mshidkmdf - ok
20:45:12.0335 5968 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:45:12.0351 5968 msisadrv - ok
20:45:12.0382 5968 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:45:12.0414 5968 MSiSCSI - ok
20:45:12.0414 5968 msiserver - ok
20:45:12.0429 5968 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:45:12.0492 5968 MSKSSRV - ok
20:45:12.0507 5968 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:45:12.0554 5968 MSPCLOCK - ok
20:45:12.0585 5968 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:45:12.0617 5968 MSPQM - ok
20:45:12.0632 5968 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
20:45:12.0648 5968 MsRPC - ok
20:45:12.0664 5968 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
20:45:12.0679 5968 mssmbios - ok
20:45:12.0695 5968 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
20:45:12.0726 5968 MSTEE - ok
20:45:12.0742 5968 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
20:45:12.0773 5968 MTConfig - ok
20:45:12.0789 5968 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
20:45:12.0804 5968 Mup - ok
20:45:12.0851 5968 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
20:45:12.0898 5968 napagent - ok
20:45:12.0929 5968 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
20:45:12.0960 5968 NativeWifiP - ok
20:45:13.0039 5968 [ 9D1CCE440552500DED3A62F9D779CDB4 ] NAUpdate C:\Program Files\Nero\Update\NASvc.exe
20:45:13.0054 5968 NAUpdate - ok
20:45:13.0085 5968 [ E7C54812A2AAF43316EB6930C1FFA108 ] NDIS C:\Windows\system32\drivers\ndis.sys
20:45:13.0101 5968 NDIS - ok
20:45:13.0117 5968 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
20:45:13.0164 5968 NdisCap - ok
20:45:13.0179 5968 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
20:45:13.0226 5968 NdisTapi - ok
20:45:13.0257 5968 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
20:45:13.0289 5968 Ndisuio - ok
20:45:13.0320 5968 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
20:45:13.0351 5968 NdisWan - ok
20:45:13.0382 5968 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
20:45:13.0429 5968 NDProxy - ok
20:45:13.0445 5968 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
20:45:13.0507 5968 NetBIOS - ok
20:45:13.0539 5968 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
20:45:13.0585 5968 NetBT - ok
20:45:13.0601 5968 [ F42309C4191C506B71DB5D1126D26318 ] Netlogon C:\Windows\system32\lsass.exe
20:45:13.0617 5968 Netlogon - ok
20:45:13.0664 5968 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
20:45:13.0710 5968 Netman - ok
20:45:13.0726 5968 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
20:45:13.0757 5968 netprofm - ok
20:45:13.0789 5968 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:45:13.0804 5968 NetTcpPortSharing - ok
20:45:13.0835 5968 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
20:45:13.0851 5968 nfrd960 - ok
20:45:13.0882 5968 [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc C:\Windows\System32\nlasvc.dll
20:45:13.0929 5968 NlaSvc - ok
20:45:13.0929 5968 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
20:45:13.0976 5968 Npfs - ok
20:45:14.0007 5968 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
20:45:14.0039 5968 nsi - ok
20:45:14.0039 5968 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
20:45:14.0070 5968 nsiproxy - ok
20:45:14.0132 5968 [ 81189C3D7763838E55C397759D49007A ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
20:45:14.0164 5968 Ntfs - ok
20:45:14.0179 5968 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
20:45:14.0226 5968 Null - ok
20:45:14.0273 5968 [ B5E37E31C053BC9950455A257526514B ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x32.sys
20:45:14.0304 5968 NVENETFD - ok
20:45:14.0570 5968 [ C8CB6135884CBC2A10225C4C3CEF0F95 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
20:45:14.0820 5968 nvlddmkm - ok
20:45:14.0867 5968 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
20:45:14.0867 5968 nvraid - ok
20:45:14.0898 5968 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
20:45:14.0914 5968 nvstor - ok
20:45:14.0945 5968 [ C1303870D5F9EAD4BEB68559AAB7A87B ] nvsvc C:\Windows\system32\nvvsvc.exe
20:45:14.0960 5968 nvsvc - ok
20:45:14.0960 5968 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
20:45:14.0976 5968 nv_agp - ok
20:45:15.0054 5968 [ 0182074B2B8915C8371EA5A006BAC44E ] ogmservice C:\Program Files\Online Games Manager\ogmservice.exe
20:45:15.0085 5968 ogmservice - ok
20:45:15.0117 5968 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
20:45:15.0164 5968 ohci1394 - ok
20:45:15.0195 5968 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:45:15.0210 5968 ose - ok
20:45:15.0257 5968 [ DB78FAED7D72774DF78B1A60F1618798 ] P1120VID C:\Windows\system32\DRIVERS\P1120Vid.sys
20:45:15.0351 5968 P1120VID - ok
20:45:15.0382 5968 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
20:45:15.0445 5968 p2pimsvc - ok
20:45:15.0476 5968 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
20:45:15.0507 5968 p2psvc - ok
20:45:15.0539 5968 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
20:45:15.0554 5968 Parport - ok
20:45:15.0570 5968 [ BF8F6AF06DA75B336F07E23AEF97D93B ] partmgr C:\Windows\system32\drivers\partmgr.sys
20:45:15.0585 5968 partmgr - ok
20:45:15.0601 5968 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
20:45:15.0617 5968 Parvdm - ok
20:45:15.0632 5968 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
20:45:15.0648 5968 PcaSvc - ok
20:45:15.0664 5968 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
20:45:15.0679 5968 pci - ok
20:45:15.0726 5968 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
20:45:15.0726 5968 pciide - ok
20:45:15.0757 5968 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
20:45:15.0773 5968 pcmcia - ok
20:45:15.0789 5968 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
20:45:15.0804 5968 pcw - ok
20:45:15.0820 5968 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
20:45:15.0882 5968 PEAUTH - ok
20:45:15.0929 5968 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
20:45:15.0960 5968 PeerDistSvc - ok
20:45:16.0039 5968 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
20:45:16.0117 5968 pla - ok
20:45:16.0179 5968 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
20:45:16.0226 5968 PlugPlay - ok
20:45:16.0257 5968 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
20:45:16.0289 5968 PNRPAutoReg - ok
20:45:16.0325 5968 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
20:45:16.0340 5968 PNRPsvc - ok
20:45:16.0372 5968 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
20:45:16.0418 5968 PolicyAgent - ok
20:45:16.0450 5968 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
20:45:16.0481 5968 Power - ok
20:45:16.0528 5968 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
20:45:16.0575 5968 PptpMiniport - ok
20:45:16.0590 5968 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
20:45:16.0606 5968 Processor - ok
20:45:16.0622 5968 [ 43CA4CCC22D52FB58E8988F0198851D0 ] ProfSvc C:\Windows\system32\profsvc.dll
20:45:16.0684 5968 ProfSvc - ok
20:45:16.0700 5968 [ F42309C4191C506B71DB5D1126D26318 ] ProtectedStorage C:\Windows\system32\lsass.exe
20:45:16.0715 5968 ProtectedStorage - ok
20:45:16.0731 5968 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
20:45:16.0762 5968 Psched - ok
20:45:16.0809 5968 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
20:45:16.0840 5968 ql2300 - ok
20:45:16.0903 5968 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
20:45:16.0918 5968 ql40xx - ok
20:45:16.0950 5968 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
20:45:16.0981 5968 QWAVE - ok
20:45:17.0012 5968 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
20:45:17.0043 5968 QWAVEdrv - ok
20:45:17.0059 5968 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
20:45:17.0090 5968 RasAcd - ok
20:45:17.0137 5968 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
20:45:17.0168 5968 RasAgileVpn - ok
20:45:17.0184 5968 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
20:45:17.0215 5968 RasAuto - ok
20:45:17.0231 5968 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
20:45:17.0278 5968 Rasl2tp - ok
20:45:17.0341 5968 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
20:45:17.0373 5968 RasMan - ok
20:45:17.0388 5968 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
20:45:17.0419 5968 RasPppoe - ok
20:45:17.0435 5968 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
20:45:17.0466 5968 RasSstp - ok
20:45:17.0513 5968 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
20:45:17.0560 5968 rdbss - ok
20:45:17.0576 5968 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
20:45:17.0607 5968 rdpbus - ok
20:45:17.0654 5968 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
20:45:17.0701 5968 RDPCDD - ok
20:45:17.0732 5968 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
20:45:17.0779 5968 RDPDR - ok
20:45:17.0810 5968 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
20:45:17.0857 5968 RDPENCDD - ok
20:45:17.0873 5968 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
20:45:17.0919 5968 RDPREFMP - ok
20:45:17.0982 5968 [ 68A0387F58E226DEEE23D9715955572A ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
20:45:18.0013 5968 RdpVideoMiniport - ok
20:45:18.0060 5968 [ 288B06960D78428FF89E811632684E20 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
20:45:18.0107 5968 RDPWD - ok
20:45:18.0154 5968 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
20:45:18.0169 5968 rdyboost - ok
20:45:18.0185 5968 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
20:45:18.0216 5968 RemoteAccess - ok
20:45:18.0232 5968 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
20:45:18.0294 5968 RemoteRegistry - ok
20:45:18.0326 5968 [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
20:45:18.0341 5968 RFCOMM - ok
20:45:18.0373 5968 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
20:45:18.0419 5968 RpcEptMapper - ok
20:45:18.0435 5968 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
20:45:18.0466 5968 RpcLocator - ok
20:45:18.0498 5968 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
20:45:18.0529 5968 RpcSs - ok
20:45:18.0560 5968 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
20:45:18.0576 5968 rspndr - ok
20:45:18.0607 5968 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
20:45:18.0654 5968 s3cap - ok
20:45:18.0669 5968 [ F42309C4191C506B71DB5D1126D26318 ] SamSs C:\Windows\system32\lsass.exe
20:45:18.0685 5968 SamSs - ok
20:45:18.0701 5968 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
20:45:18.0716 5968 sbp2port - ok
20:45:18.0748 5968 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
20:45:18.0794 5968 SCardSvr - ok
20:45:18.0810 5968 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
20:45:18.0857 5968 scfilter - ok
20:45:18.0904 5968 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
20:45:18.0966 5968 Schedule - ok
20:45:18.0982 5968 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
20:45:19.0013 5968 SCPolicySvc - ok
20:45:19.0060 5968 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
20:45:19.0107 5968 SDRSVC - ok
20:45:19.0138 5968 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
20:45:19.0169 5968 secdrv - ok
20:45:19.0169 5968 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
20:45:19.0216 5968 seclogon - ok
20:45:19.0248 5968 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
20:45:19.0294 5968 SENS - ok
20:45:19.0326 5968 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
20:45:19.0357 5968 SensrSvc - ok
20:45:19.0373 5968 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
20:45:19.0404 5968 Serenum - ok
20:45:19.0419 5968 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
20:45:19.0451 5968 Serial - ok
20:45:19.0482 5968 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
20:45:19.0498 5968 sermouse - ok
20:45:19.0576 5968 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll
20:45:19.0623 5968 SessionEnv - ok
20:45:19.0638 5968 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
20:45:19.0669 5968 sffdisk - ok
20:45:19.0685 5968 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
20:45:19.0716 5968 sffp_mmc - ok
20:45:19.0732 5968 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
20:45:19.0763 5968 sffp_sd - ok
20:45:19.0794 5968 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
20:45:19.0826 5968 sfloppy - ok
20:45:19.0857 5968 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
20:45:19.0888 5968 SharedAccess - ok
20:45:19.0935 5968 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:45:19.0982 5968 ShellHWDetection - ok
20:45:19.0998 5968 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
20:45:20.0013 5968 sisagp - ok
20:45:20.0029 5968 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
20:45:20.0044 5968 SiSRaid2 - ok
20:45:20.0060 5968 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
20:45:20.0076 5968 SiSRaid4 - ok
20:45:20.0123 5968 [ EA396139541706B4B433641D62EA53CE ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
20:45:20.0138 5968 SkypeUpdate - ok
20:45:20.0154 5968 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
20:45:20.0185 5968 Smb - ok
20:45:20.0216 5968 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
20:45:20.0232 5968 SNMPTRAP - ok
20:45:20.0263 5968 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
20:45:20.0279 5968 spldr - ok
20:45:20.0294 5968 [ 866A43013535DC8587C258E43579C764 ] Spooler C:\Windows\System32\spoolsv.exe
20:45:20.0341 5968 Spooler - ok
20:45:20.0435 5968 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
20:45:20.0513 5968 sppsvc - ok
20:45:20.0560 5968 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll
20:45:20.0591 5968 sppuinotify - ok
20:45:20.0623 5968 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
20:45:20.0669 5968 srv - ok
20:45:20.0701 5968 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
20:45:20.0732 5968 srv2 - ok
20:45:20.0763 5968 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
20:45:20.0794 5968 srvnet - ok
20:45:20.0826 5968 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
20:45:20.0857 5968 SSDPSRV - ok
20:45:20.0873 5968 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
20:45:20.0904 5968 SstpSvc - ok
20:45:20.0919 5968 Steam Client Service - ok
20:45:20.0951 5968 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
20:45:20.0966 5968 stexstor - ok
20:45:20.0998 5968 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
20:45:21.0044 5968 StiSvc - ok
20:45:21.0076 5968 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
20:45:21.0091 5968 storflt - ok
20:45:21.0107 5968 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys
20:45:21.0107 5968 storvsc - ok
20:45:21.0123 5968 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
20:45:21.0138 5968 swenum - ok
20:45:21.0154 5968 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
20:45:21.0185 5968 swprv - ok
20:45:21.0201 5968 Synth3dVsc - ok
20:45:21.0263 5968 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll
20:45:21.0294 5968 SysMain - ok
20:45:21.0310 5968 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:45:21.0326 5968 TabletInputService - ok
20:45:21.0373 5968 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll
20:45:21.0404 5968 TapiSrv - ok
20:45:21.0419 5968 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
20:45:21.0451 5968 TBS - ok
20:45:21.0513 5968 [ 04E4A7D53A7ACE02E8C55B17A498F631 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
20:45:21.0560 5968 Tcpip - ok
20:45:21.0591 5968 [ 04E4A7D53A7ACE02E8C55B17A498F631 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
20:45:21.0623 5968 TCPIP6 - ok
20:45:21.0654 5968 [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
20:45:21.0685 5968 tcpipreg - ok
20:45:21.0732 5968 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
20:45:21.0763 5968 TDPIPE - ok
20:45:21.0794 5968 [ 2C10395BAA4847F83042813C515CC289 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
20:45:21.0826 5968 TDTCP - ok
20:45:21.0873 5968 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
20:45:21.0919 5968 tdx - ok
20:45:21.0951 5968 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
20:45:21.0982 5968 TermDD - ok
20:45:22.0013 5968 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
20:45:22.0060 5968 TermService - ok
20:45:22.0091 5968 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
20:45:22.0123 5968 Themes - ok
20:45:22.0154 5968 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
20:45:22.0185 5968 THREADORDER - ok
20:45:22.0201 5968 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
20:45:22.0263 5968 TrkWks - ok
20:45:22.0294 5968 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:45:22.0341 5968 TrustedInstaller - ok
20:45:22.0373 5968 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
20:45:22.0404 5968 tssecsrv - ok
20:45:22.0435 5968 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
20:45:22.0482 5968 TsUsbFlt - ok
20:45:22.0482 5968 tsusbhub - ok
20:45:22.0544 5968 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
20:45:22.0591 5968 tunnel - ok
20:45:22.0623 5968 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
20:45:22.0623 5968 uagp35 - ok
20:45:22.0669 5968 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
20:45:22.0701 5968 udfs - ok
20:45:22.0748 5968 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
20:45:22.0779 5968 UI0Detect - ok
20:45:22.0794 5968 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
20:45:22.0810 5968 uliagpkx - ok
20:45:22.0841 5968 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys
20:45:22.0841 5968 umbus - ok
20:45:22.0873 5968 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
20:45:22.0888 5968 UmPass - ok
20:45:22.0919 5968 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll
20:45:22.0951 5968 UmRdpService - ok
20:45:22.0982 5968 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
20:45:23.0029 5968 upnphost - ok
20:45:23.0060 5968 [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
20:45:23.0076 5968 usbccgp - ok
20:45:23.0107 5968 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys
20:45:23.0123 5968 usbcir - ok
20:45:23.0154 5968 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
20:45:23.0169 5968 usbehci - ok
20:45:23.0201 5968 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
20:45:23.0232 5968 usbhub - ok
20:45:23.0263 5968 [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
20:45:23.0279 5968 usbohci - ok
20:45:23.0310 5968 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
20:45:23.0326 5968 usbprint - ok
20:45:23.0357 5968 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:45:23.0419 5968 USBSTOR - ok
20:45:23.0435 5968 [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
20:45:23.0451 5968 usbuhci - ok
20:45:23.0482 5968 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
20:45:23.0529 5968 UxSms - ok
20:45:23.0544 5968 [ F42309C4191C506B71DB5D1126D26318 ] VaultSvc C:\Windows\system32\lsass.exe
20:45:23.0560 5968 VaultSvc - ok
20:45:23.0576 5968 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
20:45:23.0576 5968 vdrvroot - ok
20:45:23.0623 5968 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
20:45:23.0669 5968 vds - ok
20:45:23.0701 5968 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
20:45:23.0732 5968 vga - ok
20:45:23.0748 5968 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
20:45:23.0794 5968 VgaSave - ok
20:45:23.0810 5968 VGPU - ok
20:45:23.0857 5968 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
20:45:23.0873 5968 vhdmp - ok
20:45:23.0888 5968 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
20:45:23.0888 5968 viaagp - ok
20:45:23.0919 5968 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
20:45:23.0951 5968 ViaC7 - ok
20:45:23.0966 5968 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
20:45:23.0982 5968 viaide - ok
20:45:23.0998 5968 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys
20:45:24.0013 5968 vmbus - ok
20:45:24.0029 5968 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
20:45:24.0060 5968 VMBusHID - ok
20:45:24.0076 5968 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
20:45:24.0091 5968 volmgr - ok
20:45:24.0107 5968 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
20:45:24.0123 5968 volmgrx - ok
20:45:24.0154 5968 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
20:45:24.0169 5968 volsnap - ok
20:45:24.0201 5968 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
20:45:24.0216 5968 vsmraid - ok
20:45:24.0263 5968 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
20:45:24.0310 5968 VSS - ok
20:45:24.0436 5968 [ CBA3F6EF1E70167DB376B4013F71A62B ] vToolbarUpdater12.2.6 C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe
20:45:24.0452 5968 vToolbarUpdater12.2.6 - ok
20:45:24.0483 5968 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
20:45:24.0499 5968 vwifibus - ok
20:45:24.0545 5968 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
20:45:24.0592 5968 W32Time - ok
20:45:24.0624 5968 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
20:45:24.0655 5968 WacomPen - ok
20:45:24.0702 5968 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
20:45:24.0733 5968 WANARP - ok
20:45:24.0749 5968 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
20:45:24.0764 5968 Wanarpv6 - ok
20:45:24.0842 5968 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
20:45:24.0889 5968 WatAdminSvc - ok
20:45:24.0936 5968 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
20:45:24.0999 5968 wbengine - ok
20:45:25.0014 5968 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
20:45:25.0045 5968 WbioSrvc - ok
20:45:25.0092 5968 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll
20:45:25.0124 5968 wcncsvc - ok
20:45:25.0139 5968 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:45:25.0186 5968 WcsPlugInService - ok
20:45:25.0217 5968 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
20:45:25.0233 5968 Wd - ok
20:45:25.0249 5968 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
20:45:25.0280 5968 Wdf01000 - ok
20:45:25.0295 5968 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
20:45:25.0342 5968 WdiServiceHost - ok
20:45:25.0358 5968 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
20:45:25.0374 5968 WdiSystemHost - ok
20:45:25.0420 5968 [ A9D880F97530D5B8FEE278923349929D ] WebClient C:\Windows\System32\webclnt.dll
20:45:25.0452 5968 WebClient - ok
20:45:25.0467 5968 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
20:45:25.0499 5968 Wecsvc - ok
20:45:25.0514 5968 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
20:45:25.0545 5968 wercplsupport - ok
20:45:25.0561 5968 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
20:45:25.0592 5968 WerSvc - ok
20:45:25.0639 5968 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
20:45:25.0686 5968 WfpLwf - ok
20:45:25.0702 5968 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
20:45:25.0717 5968 WIMMount - ok
20:45:25.0764 5968 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
20:45:25.0811 5968 WinDefend - ok
20:45:25.0811 5968 WinHttpAutoProxySvc - ok
20:45:25.0874 5968 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
20:45:25.0905 5968 Winmgmt - ok
20:45:25.0967 5968 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
20:45:26.0030 5968 WinRM - ok
20:45:26.0077 5968 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
20:45:26.0124 5968 Wlansvc - ok
20:45:26.0217 5968 [ FB01D4AE207B9EFDBABFC55DC95C7E31 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
20:45:26.0264 5968 wlidsvc - ok
20:45:26.0280 5968 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
20:45:26.0295 5968 WmiAcpi - ok
20:45:26.0327 5968 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
20:45:26.0342 5968 wmiApSrv - ok
20:45:26.0389 5968 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
20:45:26.0436 5968 WMPNetworkSvc - ok
20:45:26.0452 5968 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
20:45:26.0483 5968 WPCSvc - ok
20:45:26.0530 5968 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
20:45:26.0561 5968 WPDBusEnum - ok
20:45:26.0577 5968 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
20:45:26.0624 5968 ws2ifsl - ok
20:45:26.0639 5968 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll
20:45:26.0686 5968 wscsvc - ok
20:45:26.0686 5968 WSearch - ok
20:45:26.0764 5968 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
20:45:26.0795 5968 wuauserv - ok
20:45:26.0842 5968 [ E714A1C0354636837E20CCBF00888EE7 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
20:45:26.0874 5968 WudfPf - ok
20:45:26.0889 5968 [ 1023EE888C9B47178C5293ED5336AB69 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
20:45:26.0920 5968 WUDFRd - ok
20:45:26.0983 5968 [ 8D1E1E529A2C9E9B6A85B55A345F7629 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
20:45:27.0014 5968 wudfsvc - ok
20:45:27.0045 5968 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
20:45:27.0077 5968 WwanSvc - ok
20:45:27.0139 5968 ================ Scan global ===============================
20:45:27.0155 5968 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
20:45:27.0186 5968 [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\Windows\system32\winsrv.dll
20:45:27.0202 5968 [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\Windows\system32\winsrv.dll
20:45:27.0233 5968 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
20:45:27.0264 5968 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
20:45:27.0264 5968 [Global] - ok
20:45:27.0264 5968 ================ Scan MBR ==================================
20:45:27.0280 5968 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
20:45:27.0702 5968 \Device\Harddisk0\DR0 - ok
20:45:27.0702 5968 ================ Scan VBR ==================================
20:45:27.0717 5968 [ BEA379E744E1769B146E186E7B63F528 ] \Device\Harddisk0\DR0\Partition1
20:45:27.0717 5968 \Device\Harddisk0\DR0\Partition1 - ok
20:45:27.0717 5968 ============================================================
20:45:27.0717 5968 Scan finished
20:45:27.0717 5968 ============================================================
20:45:27.0733 5848 Detected object count: 0
20:45:27.0733 5848 Actual detected object count: 0
|
|
25.10.2012, 21:59
| #26 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC nach Trojanerbefall wirklich sauber? Bitte nun Logs mit GMER (<<< klick für Anleitung) und aswMBR (Anleitung etwas weiter unten) erstellen und posten. GMER stürzt häufiger ab, wenn das Tool auch beim zweiten Mal nicht will, lass es einfach weg und führ nur aswMBR aus. aswMBR-Download => aswMBR.exe - speichere die Datei auf deinem Desktop.
Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes: Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
26.10.2012, 08:28
| #27 |
| | PC nach Trojanerbefall wirklich sauber? Scan mit Gmer: GMER Logfile: Code:
ATTFilter GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-10-26 09:09:18
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\00000061 SAMSUNG_ rev.1AA0
Running: lxpuud1g.exe; Driver: C:\Users\878\AppData\Local\Temp\uwldqpow.sys
---- System - GMER 1.0.15 ----
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwNotifyChangeKey [0x96D96004]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwNotifyChangeMultipleKeys [0x96D960D4]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwOpenProcess [0x96D95D76]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateProcess [0x96D95E1E]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateThread [0x96D95EBA]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwWriteVirtualMemory [0x96D95F56]
---- Kernel code sections - GMER 1.0.15 ----
.text ntkrnlpa.exe!ZwSaveKey + 13D1 82C48349 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82C81D52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!KeRemoveQueueEx + 1357 82C8900C 8 Bytes [04, 60, D9, 96, D4, 60, D9, ...] {ADD AL, 0x60; FST DWORD [ESI-0x69269f2c]}
.text ntkrnlpa.exe!KeRemoveQueueEx + 139F 82C89054 4 Bytes [76, 5D, D9, 96]
.text ntkrnlpa.exe!KeRemoveQueueEx + 166F 82C89324 8 Bytes [1E, 5E, D9, 96, BA, 5E, D9, ...] {PUSH DS; POP ESI; FST DWORD [ESI-0x6926a146]}
.text ntkrnlpa.exe!KeRemoveQueueEx + 16E3 82C89398 4 Bytes [56, 5F, D9, 96]
.vmp2 C:\Windows\system32\drivers\acedrv11.sys entry point in ".vmp2" section [0x96D9069D]
---- User IAT/EAT - GMER 1.0.15 ----
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [73982437] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [73965600] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [739656BE] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [739824B2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [73978514] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [73974CC8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [7397506F] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [73975144] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromHBITMAP] [73976671] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [7397826B] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [739787BA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [7397901B] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [7397E1BE] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [73974BFA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
---- Devices - GMER 1.0.15 ----
AttachedDevice \FileSystem\Ntfs \Ntfs avgidsfilterx.sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )
AttachedDevice \Driver\tdx \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
Device \Driver\ACPI_HAL \Device\0000004d halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)
AttachedDevice \Driver\tdx \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0015834e8f79
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0015834e8f79@00265f7cca1f 0x30 0xD3 0x43 0x9C ...
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0015834e8f79@045a954970c7 0x23 0xBA 0xAF 0x83 ...
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0015834e8f79 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0015834e8f79@00265f7cca1f 0x30 0xD3 0x43 0x9C ...
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0015834e8f79@045a954970c7 0x23 0xBA 0xAF 0x83 ...
---- EOF - GMER 1.0.15 ----
Scan mit aswMBR: Code:
ATTFilter aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-10-26 09:13:26
-----------------------------
09:13:26.675 OS Version: Windows 6.1.7601 Service Pack 1
09:13:26.675 Number of processors: 2 586 0x6B02
09:13:26.679 ComputerName: 878-PC UserName: 878
09:13:28.535 Initialize success
09:14:40.614 AVAST engine defs: 12102502
09:15:59.874 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000061
09:15:59.877 Disk 0 Vendor: SAMSUNG_ 1AA0 Size: 476940MB BusType: 3
09:16:00.083 Disk 0 MBR read successfully
09:16:00.084 Disk 0 MBR scan
09:16:00.106 Disk 0 Windows 7 default MBR code
09:16:00.159 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 476929 MB offset 63
09:16:00.333 Disk 0 scanning sectors +976752000
09:16:00.745 Disk 0 scanning C:\Windows\system32\drivers
09:17:04.045 Service scanning
09:17:26.414 Modules scanning
09:18:41.174 Disk 0 trace - called modules:
09:18:41.202 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll storport.sys nvstor.sys
09:18:41.206 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85da8030]
09:18:41.213 3 CLASSPNP.SYS[88fa259e] -> nt!IofCallDriver -> [0x85578020]
09:18:41.219 5 ACPI.sys[833aa3d4] -> nt!IofCallDriver -> \Device\00000061[0x85578ad0]
09:18:42.161 AVAST engine scan C:\Windows
09:19:17.967 Disk 0 MBR has been saved successfully to "C:\Users\878\Desktop\MBR.dat"
09:19:17.989 The log file has been saved successfully to "C:\Users\878\Desktop\aswMBR.txt"
Liebe Grüße, mar87 Ups, war bisschen voreilig, aswMBR hat erst jetzt den Scan beendet: Code:
ATTFilter aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-10-26 09:13:26
-----------------------------
09:13:26.675 OS Version: Windows 6.1.7601 Service Pack 1
09:13:26.675 Number of processors: 2 586 0x6B02
09:13:26.679 ComputerName: 878-PC UserName: 878
09:13:28.535 Initialize success
09:14:40.614 AVAST engine defs: 12102502
09:15:59.874 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000061
09:15:59.877 Disk 0 Vendor: SAMSUNG_ 1AA0 Size: 476940MB BusType: 3
09:16:00.083 Disk 0 MBR read successfully
09:16:00.084 Disk 0 MBR scan
09:16:00.106 Disk 0 Windows 7 default MBR code
09:16:00.159 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 476929 MB offset 63
09:16:00.333 Disk 0 scanning sectors +976752000
09:16:00.745 Disk 0 scanning C:\Windows\system32\drivers
09:17:04.045 Service scanning
09:17:26.414 Modules scanning
09:18:41.174 Disk 0 trace - called modules:
09:18:41.202 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll storport.sys nvstor.sys
09:18:41.206 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85da8030]
09:18:41.213 3 CLASSPNP.SYS[88fa259e] -> nt!IofCallDriver -> [0x85578020]
09:18:41.219 5 ACPI.sys[833aa3d4] -> nt!IofCallDriver -> \Device\00000061[0x85578ad0]
09:18:42.161 AVAST engine scan C:\Windows
09:19:17.967 Disk 0 MBR has been saved successfully to "C:\Users\878\Desktop\MBR.dat"
09:19:17.989 The log file has been saved successfully to "C:\Users\878\Desktop\aswMBR.txt"
09:21:09.980 AVAST engine scan C:\Windows\system32
09:29:45.811 AVAST engine scan C:\Windows\system32\drivers
09:30:25.464 AVAST engine scan C:\Users\878
09:37:05.117 AVAST engine scan C:\ProgramData
09:39:19.216 Scan finished successfully
09:39:43.190 Disk 0 MBR has been saved successfully to "C:\Users\878\Desktop\MBR.dat"
09:39:43.221 The log file has been saved successfully to "C:\Users\878\Desktop\aswMBR.txt"
PS: Ich nütze den PC nicht alleine, kann meine Familie während meiner Abwesenheit die Urlaubsfotos auf den Computer laden oder ist das zu unsicher? Habe bis jetzt nicht mein OK dazu gegeben, wollte zuerst die Meinung eines Fachmannes hören. Liebe Grüße, mar87 |
|
26.10.2012, 13:16
| #28 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC nach Trojanerbefall wirklich sauber? Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Scans mit Malwarebytes und SUPERAntiSpyware und poste die Logs. Denk dran beide Tools zu updaten vor dem Scan!!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
06.11.2012, 00:27
| #29 |
| | PC nach Trojanerbefall wirklich sauber? Hallo, bin von meiner Reise zurück und habe nun die benötigten Scans durchgeführt. Hier die Ergebnisse: Malwarebytes Anti-Malware Code:
ATTFilter Malwarebytes Anti-Malware 1.65.1.1000 www.malwarebytes.org Datenbank Version: v2012.11.05.07 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 8.0.7601.17514 878 :: 878-PC [Administrator] 05.11.2012 22:07:58 mbam-log-2012-11-05 (22-07-58).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 329269 Laufzeit: 52 Minute(n), 50 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com
Generated 11/06/2012 at 00:22 AM
Application Version : 5.6.1014
Core Rules Database Version : 9532
Trace Rules Database Version: 7344
Scan type : Complete Scan
Total Scan Time : 01:13:13
Operating System Information
Windows 7 Ultimate 32-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator
Memory items scanned : 645
Memory threats detected : 0
Registry items scanned : 38339
Registry threats detected : 0
File items scanned : 120766
File threats detected : 2
Adware.Tracking Cookie
aka-cdn-ns.adtech.de [ C:\USERS\878\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4AUJQM34 ]
imagesrv.adition.com [ C:\USERS\878\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4AUJQM34 ]
mar87 |
|
06.11.2012, 14:41
| #30 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC nach Trojanerbefall wirklich sauber? Sieht ok aus, da wurden nur Cookies gefunden, die können alle weg. Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie ) Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird. Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu PC nach Trojanerbefall wirklich sauber? |
| anti-malware, aufsetzen, beseitigung, bildschirm, ccleaner, computer, dateien, deinstallation, emsisoft, erkennen, erwischt, festplatte, forum, gen, hilfreiche, malwarebytes, neu, neu aufsetzen, passwörter, programme, rootkit, scan, temporäre, update, virus, webseite, ändern |
Textbox von OTL - wenn OTL auf deutsch ist wird sie mit 
beschriftet
.
Linear-Darstellung
