|
Log-Analyse und Auswertung: Internetverbindung nach einer Zeit immer langsamer High Ping Erkennt ihr was?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
16.08.2013, 17:49 | #1 |
| Internetverbindung nach einer Zeit immer langsamer High Ping Erkennt ihr was? Hey ich hab ein Problem und zwar ist meine Internetverbindung sehr langsam geworden immer wenn ich meinen Pc starte geht das internet dann nach einer Stunde c.a ist mein internet schlechter als am anfang. Ploetzlich 1000Ping,Connection getrennt usw.. dann muss ich mein PC neustarten dann klappt es wieder manchmal steht da bei meiner Internetverbindung anstatt 'Connected' steht dann da 'Limited' und ein gelbes Dreieck... hab eine 6k 1&1 Leitung. ich bekomme aber nur 3-4k Wenns GUT laeuft.. :/ ich hatte sogar einmal 0,04k und das ist extrem nervend mein Vater und mein bruder haben dieses Problem nicht es liegt i.wie an meinem Pc,als ich den PC bekommen habe war es nicht so ich denke ich hab mir was eingefangen (Virus) aber AntiVir und Malwarebyte haben keine Viren gefunden.. Mein Pc ist ein HD Pavillion beim Speedtest.net steht auch manchmal das ich ein 25 Ping hab (eig immer) aber im Spiel und im Teamspeak hab ich dann ploetzlich einen 2000er Ping ich weis nicht mehr weiter habe schon saemtliche sachen versucht. Achso und nochwas ich habe ploetzlich eine andere Ip-Adresse obwohl ich am selben Pc und im selben internet bin. HijackLog Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:35:39 AM, on 8/16/2013 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v10.0 (10.00.9200.16660) Boot mode: Normal Running processes: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Philip\Desktop\Sachen\HiJackThis204.exe C:\windows\SysWOW64\DllHost.exe R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing) O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 4167 bytes Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Database version: v2013.08.15.03 Windows 8 x64 NTFS Internet Explorer 10.0.9200.16660 Philip :: PHILIP [administrator] 8/16/2013 11:31:31 AM mbam-log-2013-08-16 (11-31-31).txt Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 464339 Time elapsed: 47 minute(s), 29 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) Geändert von cenNiz (16.08.2013 um 18:32 Uhr) |
16.08.2013, 19:08 | #2 |
/// the machine /// TB-Ausbilder | Internetverbindung nach einer Zeit immer langsamer High Ping Erkennt ihr was? Hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
16.08.2013, 19:27 | #3 |
| Internetverbindung nach einer Zeit immer langsamer High Ping Erkennt ihr was? Okay hab ich gemacht
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-08-2013 01 Ran by Philip (administrator) on 16-08-2013 14:24:48 Running from C:\Users\Philip\Downloads Windows 8 (X64) OS Language: English(US) Internet Explorer Version 10 Boot Mode: Normal ==================== Could not list processes =============== ==================== Registry (Whitelisted) ================== HKLM\...\Run: [BeatsOSDApp] - C:\Program Files\IDT\WDM\beats64.exe [37888 2012-08-10] (Hewlett-Packard ) HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-08-10] (IDT, Inc.) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-13] (Adobe Systems Incorporated) MountPoints2: J - "J:\AutoRun.exe" MountPoints2: {179b7729-05a3-11e3-be74-78e3b5baf145} - "J:\AutoRun.exe" IMEO\hpconnectedremotemgmtui.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\hpsf.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/ HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.msn.com/HPDSK13/1 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/ SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKLM - {E71AE8F3-47D2-4B78-86C9-1BBD888F3231} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKLM-x32 - {E71AE8F3-47D2-4B78-86C9-1BBD888F3231} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKCU - {E71AE8F3-47D2-4B78-86C9-1BBD888F3231} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Chrome: ======= CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll () CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (WildTangent Games App V2 Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Extension: (Google Docs) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.4_0 CHR Extension: (Gmail) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= S4 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35744 2012-10-12] (Hewlett-Packard) R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [200624 2010-09-29] (Telefónica I+D) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-01] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) R3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.) R3 L1C; C:\Windows\system32\DRIVERS\l1c51x64.sys [96368 2011-12-23] (Atheros Communications, Inc.) S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-08-15] () R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-16 14:24 - 2013-08-16 14:24 - 00000000 ____D C:\FRST 2013-08-16 14:09 - 2013-08-16 14:20 - 00019572 _____ C:\windows\WindowsUpdate.log 2013-08-16 14:09 - 2013-08-16 14:09 - 00291288 _____ C:\windows\system32\FNTCACHE.DAT 2013-08-16 11:40 - 2013-08-16 11:40 - 00000000 _____ C:\Users\Philip\defogger_reenable 2013-08-16 11:35 - 2013-08-16 11:35 - 00004168 _____ C:\Users\Philip\Desktop\hijackthis.log 2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\windows\SysWOW64\Atheros_L1e 2013-08-16 09:34 - 2013-08-16 09:34 - 05354184 _____ C:\Users\Philip\Downloads\LOM_Atheros_W7_A00_Setup-YN802_ZPE.exe 2013-08-16 09:34 - 2013-08-16 09:34 - 00000000 ____D C:\Dell 2013-08-16 09:34 - 2011-12-23 17:57 - 00096368 _____ (Atheros Communications, Inc.) C:\windows\system32\Drivers\l1c51x64.sys 2013-08-16 09:32 - 2013-08-16 09:32 - 00000000 ____D C:\Users\Philip\AppData\Roaming\driveridentifier 2013-08-16 09:31 - 2013-08-16 09:31 - 00949700 _____ (DriverIdentifier ) C:\Users\Philip\Downloads\driveridentifier_setup.exe 2013-08-16 09:31 - 2013-08-16 09:31 - 00000000 ____D C:\Program Files (x86)\Driver Identifier 2013-08-16 09:30 - 2013-08-16 09:30 - 00633360 _____ (Copyright © 2010 eSupport.com. All Rights Reserved.) C:\Users\Philip\Downloads\biosagentplus_1218 (2).exe 2013-08-16 09:30 - 2013-08-16 09:30 - 00633360 _____ (Copyright © 2010 eSupport.com. All Rights Reserved.) C:\Users\Philip\Downloads\biosagentplus_1218 (1).exe 2013-08-16 09:26 - 2013-08-16 09:26 - 00103057 _____ C:\Users\Philip\Downloads\20488622_11fdbe35d53d28191b09cb5fdf994c8ab39688e2.cab 2013-08-16 09:25 - 2013-08-16 09:25 - 00096295 _____ C:\Users\Philip\Downloads\20488623_8dc4c881c577c1122db21595a142864a7ccf1f17.cab 2013-08-16 09:21 - 2013-08-16 09:21 - 00000000 ____D C:\Users\Philip\AppData\Roaming\TuneUp Software 2013-08-16 09:21 - 2013-08-16 09:21 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2013 2013-08-16 09:21 - 2013-01-28 14:19 - 00035104 _____ (TuneUp Software) C:\windows\system32\TURegOpt.exe 2013-08-16 09:21 - 2013-01-28 14:19 - 00026400 _____ (TuneUp Software) C:\windows\system32\authuitu.dll 2013-08-16 09:21 - 2013-01-28 14:19 - 00021792 _____ (TuneUp Software) C:\windows\SysWOW64\authuitu.dll 2013-08-16 09:20 - 2013-08-16 10:00 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} 2013-08-16 09:20 - 2013-08-16 09:21 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-08-16 09:18 - 2013-08-16 09:18 - 00041472 _____ C:\Users\Philip\Downloads\launcher64.dll 2013-08-16 09:18 - 2013-08-16 09:18 - 00021712 _____ (Phoenix Technologies) C:\windows\SysWOW64\Drivers\DrvAgent64.SYS 2013-08-16 09:18 - 2013-08-16 09:18 - 00000000 ____D C:\Users\Philip\AppData\Local\eSupport.com 2013-08-16 09:17 - 2013-08-16 09:18 - 28211040 _____ (TuneUp Software) C:\Users\Philip\Downloads\TuneUpUtilities2013_de-DE.exe 2013-08-16 09:17 - 2013-08-16 09:17 - 00633360 _____ (Copyright © 2010 eSupport.com. All Rights Reserved.) C:\Users\Philip\Downloads\biosagentplus_1218.exe 2013-08-16 09:15 - 2013-08-16 09:15 - 01439184 _____ ( ) C:\Users\Philip\Downloads\cpu-z_1.651-setup-en.exe 2013-08-16 09:15 - 2013-08-16 09:15 - 00000871 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk 2013-08-16 09:15 - 2013-08-16 09:15 - 00000000 ____D C:\Program Files\CPUID 2013-08-16 07:51 - 2013-08-16 07:51 - 00000246 _____ C:\Users\Philip\Downloads\defogger_enable.log 2013-08-15 18:56 - 2013-08-15 18:56 - 00000000 ____D C:\Users\Philip\Ekahau Site Survey 2013-08-15 18:54 - 2013-08-15 18:54 - 00000000 ____D C:\Program Files\Ekahau 2013-08-15 18:51 - 2013-08-15 18:54 - 100885752 _____ (Ekahau) C:\Users\Philip\Downloads\Ekahau114_Heatmapper-Setup.exe 2013-08-15 13:33 - 2013-08-15 13:34 - 00000000 ____D C:\windows\system32\MRT 2013-08-15 11:13 - 2013-07-26 01:13 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2013-08-15 11:13 - 2013-07-26 01:13 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2013-08-15 11:13 - 2013-07-26 01:13 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll 2013-08-15 11:13 - 2013-07-26 01:13 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll 2013-08-15 11:13 - 2013-07-26 01:13 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2013-08-15 11:13 - 2013-07-26 01:12 - 19239424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 15405056 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2013-08-15 11:13 - 2013-07-25 23:35 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2013-08-15 11:13 - 2013-07-25 23:13 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2013-08-15 11:13 - 2013-07-25 23:13 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2013-08-15 11:13 - 2013-07-25 23:13 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 14329344 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2013-08-15 11:13 - 2013-07-25 23:11 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2013-08-15 11:13 - 2013-07-25 23:11 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2013-08-15 11:13 - 2013-07-25 22:49 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2013-08-15 11:13 - 2013-07-25 20:54 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll 2013-08-15 11:11 - 2013-08-16 10:00 - 00000000 ____D C:\ProgramData\DriverGenius 2013-08-15 11:11 - 2013-08-15 11:11 - 00000000 ____D C:\Program Files (x86)\Driver-Soft 2013-08-15 11:11 - 2013-07-01 20:44 - 00036288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys 2013-08-15 11:11 - 2013-07-01 18:08 - 00247216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys 2013-08-15 11:10 - 2013-07-09 02:07 - 02233168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2013-08-15 11:10 - 2013-05-23 19:02 - 01314816 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll 2013-08-15 11:10 - 2013-05-23 18:25 - 00694272 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll 2013-08-15 11:10 - 2012-12-13 00:00 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll 2013-08-15 11:10 - 2012-12-12 23:59 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll 2013-08-15 11:10 - 2012-10-02 03:34 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll 2013-08-15 11:10 - 2012-10-02 03:34 - 00068608 _____ (Microsoft Corporation) C:\windows\system32\wwanprotdim.dll 2013-08-15 11:10 - 2012-09-27 03:17 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\newdev.exe 2013-08-15 11:10 - 2012-09-27 03:17 - 00075264 _____ (Microsoft Corporation) C:\windows\system32\ndadmin.exe 2013-08-15 11:10 - 2012-09-27 03:16 - 01386496 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll 2013-08-15 11:10 - 2012-09-27 03:16 - 00470016 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll 2013-08-15 11:10 - 2012-09-27 03:16 - 00446464 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll 2013-08-15 11:10 - 2012-09-27 03:16 - 00273408 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll 2013-08-15 11:10 - 2012-09-27 03:16 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\wfdprov.dll 2013-08-15 11:10 - 2012-09-27 03:15 - 00301568 _____ (Microsoft Corporation) C:\windows\system32\newdev.dll 2013-08-15 11:10 - 2012-09-27 02:55 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll 2013-08-15 11:10 - 2012-09-27 02:35 - 00386560 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll 2013-08-15 11:10 - 2012-09-27 02:35 - 00375296 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlansec.dll 2013-08-15 11:10 - 2012-09-27 02:35 - 00202240 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll 2013-08-15 11:10 - 2012-09-27 02:35 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\newdev.exe 2013-08-15 11:10 - 2012-09-27 02:35 - 00073728 _____ (Microsoft Corporation) C:\windows\SysWOW64\ndadmin.exe 2013-08-15 11:10 - 2012-09-27 02:34 - 00275968 _____ (Microsoft Corporation) C:\windows\SysWOW64\newdev.dll 2013-08-15 11:10 - 2012-09-27 02:34 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\wfdprov.dll 2013-08-15 11:10 - 2012-09-27 02:12 - 00009728 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll 2013-08-15 11:09 - 2013-08-15 11:10 - 11360728 _____ (Driver-Soft Inc. ) C:\Users\Philip\Downloads\Driver_Genius_Professional_DE_12.exe 2013-08-15 11:06 - 2013-07-13 02:18 - 00337408 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll 2013-08-15 11:06 - 2013-07-13 02:16 - 01889280 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll 2013-08-15 11:06 - 2013-07-13 02:16 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll 2013-08-15 11:06 - 2013-07-13 02:15 - 00124416 _____ (Microsoft Corporation) C:\windows\system32\apprepapi.dll 2013-08-15 11:06 - 2013-07-13 02:15 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\apprepsync.dll 2013-08-15 11:06 - 2013-07-13 00:24 - 00261120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll 2013-08-15 11:06 - 2013-07-13 00:23 - 01568256 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll 2013-08-15 11:06 - 2013-07-13 00:23 - 00087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\apprepapi.dll 2013-08-15 11:06 - 2013-07-13 00:23 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\apprepsync.dll 2013-08-15 11:03 - 2013-08-15 11:03 - 00016152 _____ C:\windows\system32\Drivers\SWDUMon.sys 2013-08-15 11:03 - 2013-08-15 11:03 - 00000426 _____ C:\windows\Tasks\SlimDrivers Startup.job 2013-08-15 11:02 - 2013-08-15 11:02 - 00698688 _____ (SlimWare Utilities, Inc.) C:\Users\Philip\Downloads\SlimDrivers-30877setup.exe 2013-08-15 11:02 - 2013-08-15 11:02 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers 2013-08-15 11:02 - 2013-08-15 11:02 - 00000000 ____D C:\Users\Philip\AppData\Local\SlimWare Utilities Inc 2013-08-15 10:00 - 2013-08-16 11:40 - 00000474 _____ C:\Users\Philip\Downloads\defogger_disable.log 2013-08-15 09:59 - 2013-08-15 09:59 - 00050477 _____ C:\Users\Philip\Downloads\Defogger.exe 2013-08-15 08:47 - 2013-08-15 08:47 - 00002114 _____ C:\Users\Public\Desktop\Mobile Connection Manager.lnk 2013-08-15 08:47 - 2013-08-15 08:47 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Telefónica 2013-08-15 08:46 - 2013-08-15 10:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-15 08:46 - 2013-08-15 08:46 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-15 08:46 - 2013-08-15 08:46 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Malwarebytes 2013-08-15 08:46 - 2013-08-15 08:46 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-08-15 08:46 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2013-08-15 08:40 - 2013-08-15 09:25 - 00181064 _____ (Sysinternals) C:\windows\PSEXESVC.EXE 2013-08-15 08:38 - 2013-08-15 08:38 - 00000000 ____D C:\RegBackup 2013-08-15 08:37 - 2013-08-15 10:54 - 00000000 ____D C:\Program Files (x86)\o2 2013-08-15 08:37 - 2013-08-15 08:38 - 00000000 ____D C:\Program Files (x86)\HUAWEI Modem Driver 2013-08-15 08:37 - 2010-11-04 05:52 - 00093696 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcacm.sys 2013-08-15 08:37 - 2010-10-09 02:49 - 00085504 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jubusenum.sys 2013-08-15 08:37 - 2010-09-26 06:01 - 00055296 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcecm.sys 2013-08-15 08:37 - 2010-09-26 06:01 - 00029184 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juextctrl.sys 2013-08-15 08:37 - 2010-09-03 05:36 - 00196608 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juwwanecm.sys 2013-08-15 08:37 - 2010-08-31 06:09 - 00256000 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbnet.sys 2013-08-15 08:37 - 2010-08-07 05:49 - 00121600 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbmdm.sys 2013-08-15 08:37 - 2010-07-26 21:52 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_hwusbdev.sys 2013-08-15 08:37 - 2010-05-10 02:22 - 00999936 _____ (DiBcom SA) C:\windows\system32\Drivers\mod7700.sys 2013-08-15 08:37 - 2010-03-20 00:06 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_usbenumfilter.sys 2013-08-15 08:37 - 2010-01-18 06:48 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\windows\system32\Drivers\ewdcsc.sys 2013-08-15 08:37 - 2008-03-27 04:51 - 01490656 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01007.dll 2013-08-15 08:37 - 2008-03-27 04:51 - 01490656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfCoInstaller01007.dll 2013-08-15 08:36 - 2013-08-15 08:36 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2013-08-15 08:11 - 2013-08-16 14:15 - 00003596 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-428423403-2423760254-1452003644-1001 2013-08-15 07:13 - 2013-05-02 11:29 - 00278800 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe 2013-08-15 07:05 - 2013-08-15 07:05 - 03268369 _____ C:\Users\Philip\Downloads\tweaking.com_windows_repair_aio.zip 2013-08-14 14:39 - 2013-08-14 14:39 - 00377138 _____ C:\Users\Philip\Downloads\OptiFine_1.5.2_HD_U_D5.zip 2013-08-14 14:28 - 2013-08-14 14:30 - 00000000 ____D C:\Users\Philip\AppData\Roaming\.technic 2013-08-14 14:28 - 2013-08-14 14:28 - 03020770 _____ () C:\Users\Philip\Downloads\TechnicLauncher.exe 2013-08-14 09:06 - 2013-08-14 09:06 - 00000000 ____D C:\Users\Philip\AppData\Roaming\LolClient 2013-08-14 09:06 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_1.dll 2013-08-14 09:06 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_2.dll 2013-08-14 09:06 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_39.dll 2013-08-14 09:06 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_39.dll 2013-08-14 09:05 - 2013-08-14 09:05 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk 2013-08-14 09:05 - 2013-08-14 09:05 - 00000000 __SHD C:\windows\SysWOW64\AI_RecycleBin 2013-08-14 09:05 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_39.dll 2013-08-14 09:03 - 2013-08-16 14:22 - 00000000 ____D C:\Users\Philip\AppData\Local\PMB Files 2013-08-14 09:03 - 2013-08-16 14:22 - 00000000 ____D C:\ProgramData\PMB Files 2013-08-14 09:03 - 2013-08-14 09:03 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Riot Games 2013-08-14 09:03 - 2013-08-14 09:03 - 00000000 ____D C:\Program Files (x86)\Pando Networks 2013-08-14 09:02 - 2013-08-14 09:03 - 34888568 _____ (Riot Games) C:\Users\Philip\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2013-08-13 17:05 - 2013-08-15 10:54 - 00000000 ____D C:\Program Files\CCleaner 2013-08-13 17:05 - 2013-08-13 17:05 - 04429440 _____ (Piriform Ltd) C:\Users\Philip\Downloads\ccsetup404.exe 2013-08-13 17:05 - 2013-08-13 17:05 - 00000824 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-08-13 16:50 - 2013-08-13 16:50 - 00000000 ____D C:\ProgramData\Adobe 2013-08-13 16:41 - 2013-08-13 16:41 - 00003500 _____ C:\windows\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-cenniz@gmx.de 2013-08-13 16:40 - 2013-08-13 16:40 - 00001070 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2013-08-13 16:39 - 2013-08-13 16:39 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-08-13 16:31 - 2013-08-16 11:12 - 00000000 ____D C:\Users\Philip\AppData\Local\Adobe 2013-08-13 16:30 - 2013-08-13 16:31 - 03867000 _____ (Adobe Systems Incorporated) C:\Users\Philip\Downloads\CreativeCloudSet-Up.exe 2013-08-13 15:14 - 2013-08-13 15:14 - 00000000 ____D C:\Users\Philip\AppData\Roaming\IDT 2013-08-13 14:13 - 2013-08-13 14:19 - 00000000 ____D C:\windows\BrowserChoice 2013-08-13 12:38 - 2013-08-15 13:33 - 78161360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-08-13 11:50 - 2013-08-16 14:22 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Skype 2013-08-13 11:50 - 2013-08-13 11:50 - 00002515 _____ C:\Users\Public\Desktop\Skype.lnk 2013-08-13 11:50 - 2013-08-13 11:50 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-08-13 11:50 - 2013-08-13 11:50 - 00000000 ____D C:\ProgramData\Skype 2013-08-13 11:49 - 2013-08-13 11:49 - 01492848 _____ (Skype Technologies S.A.) C:\Users\Philip\Downloads\SkypeSetup.exe 2013-08-13 11:26 - 2013-05-30 19:24 - 01257472 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll 2013-08-13 11:26 - 2013-05-30 19:08 - 00974848 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll 2013-08-13 11:26 - 2013-03-02 06:57 - 00332520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys 2013-08-13 11:26 - 2013-03-02 06:57 - 00077544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storahci.sys 2013-08-13 11:26 - 2013-03-02 06:45 - 00194792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys 2013-08-13 11:26 - 2013-03-02 06:45 - 00148712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tpm.sys 2013-08-13 11:26 - 2013-03-02 06:45 - 00125160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys 2013-08-13 11:26 - 2013-03-02 06:39 - 06991592 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2013-08-13 11:26 - 2013-03-02 06:39 - 00495336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vhdmp.sys 2013-08-13 11:26 - 2013-03-02 06:39 - 00327912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys 2013-08-13 11:26 - 2013-03-02 04:23 - 17560576 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 01338880 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 00893952 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 00601088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Globalization.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 00504320 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 00356352 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 00100864 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSyncInfo.dll 2013-08-13 11:26 - 2013-03-02 04:22 - 05091840 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll 2013-08-13 11:26 - 2013-03-02 04:22 - 00850944 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfasfsrcsnk.dll 2013-08-13 11:26 - 2013-03-02 04:22 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll 2013-08-13 11:26 - 2013-03-02 04:21 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvstore.dll 2013-08-13 11:26 - 2013-03-02 04:21 - 00145408 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl 2013-08-13 11:26 - 2013-03-02 04:21 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\DevDispItemProvider.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 19748864 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 01627648 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 01161728 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 01149952 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 01101824 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00951808 _____ (Microsoft Corporation) C:\windows\system32\Windows.Globalization.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00645120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Authentication.OnlineId.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00245248 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00180224 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00171008 _____ (Microsoft Corporation) C:\windows\system32\TimeBrokerServer.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00103936 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\WSDPrintProxy.DLL 2013-08-13 11:26 - 2013-03-01 22:44 - 05978624 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 01048576 _____ (Microsoft Corporation) C:\windows\system32\mfasfsrcsnk.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\drvstore.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00448512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\discan.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00128512 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncInfo.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\NdisImPlatform.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\DevDispItemProvider.dll 2013-08-13 11:26 - 2013-03-01 22:43 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl 2013-08-13 11:26 - 2013-03-01 22:15 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mouhid.sys 2013-08-13 11:26 - 2013-03-01 00:56 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\monitor.sys 2013-08-13 11:26 - 2013-01-09 21:53 - 00028904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpiowin32.sys 2013-08-13 11:26 - 2013-01-09 21:40 - 01448168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys 2013-08-13 11:26 - 2013-01-09 21:40 - 00303848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys 2013-08-13 11:26 - 2013-01-09 21:29 - 00785504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys 2013-08-13 11:26 - 2013-01-09 21:29 - 00091880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\partmgr.sys 2013-08-13 11:26 - 2013-01-09 19:26 - 01752064 _____ (Microsoft Corporation) C:\windows\SysWOW64\setupapi.dll 2013-08-13 11:26 - 2013-01-09 19:26 - 01611776 _____ (Microsoft Corporation) C:\windows\SysWOW64\mmc.exe 2013-08-13 11:26 - 2013-01-09 19:26 - 00890880 _____ (Microsoft Corporation) C:\windows\SysWOW64\msctf.dll 2013-08-13 11:26 - 2013-01-09 19:26 - 00436736 _____ (Microsoft Corporation) C:\windows\SysWOW64\MP4SDECD.DLL 2013-08-13 11:26 - 2013-01-09 19:26 - 00410624 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll 2013-08-13 11:26 - 2013-01-09 19:26 - 00261120 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll 2013-08-13 11:26 - 2013-01-09 19:26 - 00083968 _____ (Microsoft Corporation) C:\windows\SysWOW64\wiaacmgr.exe 2013-08-13 11:26 - 2013-01-09 19:26 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\samlib.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 02094592 _____ (Microsoft Corporation) C:\windows\system32\mmc.exe 2013-08-13 11:26 - 2013-01-09 19:23 - 01964544 _____ (Microsoft Corporation) C:\windows\system32\wlidsvc.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 01886208 _____ (Microsoft Corporation) C:\windows\system32\setupapi.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\samsrv.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 00594944 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 00406016 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 00256000 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 00095232 _____ (Microsoft Corporation) C:\windows\system32\wiaacmgr.exe 2013-08-13 11:26 - 2013-01-09 19:22 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll 2013-08-13 11:26 - 2013-01-09 19:22 - 00894464 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll 2013-08-13 11:26 - 2013-01-09 19:22 - 00666112 _____ (Microsoft Corporation) C:\windows\system32\MP4SDECD.DLL 2013-08-13 11:26 - 2013-01-09 19:22 - 00438272 _____ (Microsoft Corporation) C:\windows\system32\lsm.dll 2013-08-13 11:26 - 2013-01-09 19:22 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\inetpp.dll 2013-08-13 11:26 - 2013-01-08 23:59 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\HdAudio.sys 2013-08-13 11:26 - 2012-11-02 01:19 - 00171520 _____ (Microsoft Corporation) C:\windows\system32\ncbservice.dll 2013-08-13 11:26 - 2012-11-02 01:18 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll 2013-08-13 11:26 - 2012-11-02 01:18 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll 2013-08-13 11:26 - 2012-11-02 01:18 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\adhapi.dll 2013-08-13 11:26 - 2012-11-02 01:18 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\httpprxp.dll 2013-08-13 11:26 - 2012-11-02 01:18 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\keepaliveprovider.dll 2013-08-13 11:25 - 2012-08-30 20:53 - 00017888 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr100_clr0400.dll 2013-08-13 11:25 - 2012-08-30 20:52 - 00017888 _____ (Microsoft Corporation) C:\windows\system32\msvcr100_clr0400.dll 2013-08-13 11:23 - 2013-05-04 03:58 - 00120736 _____ (Microsoft Corporation) C:\windows\system32\AuthHost.exe 2013-08-13 11:23 - 2013-05-04 03:34 - 00446720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS 2013-08-13 11:23 - 2013-05-04 03:34 - 00284416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys 2013-08-13 11:23 - 2013-05-04 03:34 - 00213248 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UCX01000.SYS 2013-08-13 11:23 - 2013-05-04 03:30 - 00058312 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe 2013-08-13 11:23 - 2013-05-04 02:59 - 13644288 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 03241472 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 01619968 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 01483776 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe 2013-08-13 11:23 - 2013-05-04 02:59 - 00812544 _____ (Microsoft Corporation) C:\windows\system32\Magnify.exe 2013-08-13 11:23 - 2013-05-04 02:59 - 00760320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 00251904 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 00141824 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe 2013-08-13 11:23 - 2013-05-04 02:58 - 10116096 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 01332736 _____ (Microsoft Corporation) C:\windows\system32\sysmain.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00470528 _____ (Microsoft Corporation) C:\windows\system32\netprofmsvc.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00330240 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00328192 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00173568 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00169984 _____ (Microsoft Corporation) C:\windows\system32\netplwiz.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00151552 _____ (Microsoft Corporation) C:\windows\system32\netprofm.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\psmsrv.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 02305024 _____ (Microsoft Corporation) C:\windows\system32\authui.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 01131520 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentServer.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00708096 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00560640 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00501760 _____ (Microsoft Corporation) C:\windows\system32\DevicePairing.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00389120 _____ (Microsoft Corporation) C:\windows\system32\BCP47Langs.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00122368 _____ (Microsoft Corporation) C:\windows\system32\biwinrt.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\muifontsetup.dll 2013-08-13 11:23 - 2013-05-04 02:56 - 00419840 _____ (Microsoft Corporation) C:\windows\system32\intl.cpl 2013-08-13 11:23 - 2013-05-04 00:58 - 00758784 _____ (Microsoft Corporation) C:\windows\SysWOW64\Magnify.exe 2013-08-13 11:23 - 2013-05-04 00:58 - 00621056 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll 2013-08-13 11:23 - 2013-05-04 00:58 - 00125952 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll 2013-08-13 11:23 - 2013-05-04 00:58 - 00083968 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll 2013-08-13 11:23 - 2013-05-04 00:58 - 00034304 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe 2013-08-13 11:23 - 2013-05-04 00:57 - 10788864 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 08857088 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00303616 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00247296 _____ (Microsoft Corporation) C:\windows\SysWOW64\ubpm.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00151040 _____ (Microsoft Corporation) C:\windows\SysWOW64\netplwiz.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\netprofm.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00018432 _____ (Microsoft Corporation) C:\windows\SysWOW64\npmproxy.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\muifontsetup.dll 2013-08-13 11:23 - 2013-05-04 00:56 - 02035712 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll 2013-08-13 11:23 - 2013-05-04 00:56 - 00449536 _____ (Microsoft Corporation) C:\windows\SysWOW64\DevicePairing.dll 2013-08-13 11:23 - 2013-05-04 00:56 - 00411136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll 2013-08-13 11:23 - 2013-05-04 00:56 - 00309760 _____ (Microsoft Corporation) C:\windows\SysWOW64\BCP47Langs.dll 2013-08-13 11:23 - 2013-05-04 00:56 - 00092160 _____ (Microsoft Corporation) C:\windows\SysWOW64\biwinrt.dll 2013-08-13 11:23 - 2013-05-04 00:55 - 00389632 _____ (Microsoft Corporation) C:\windows\SysWOW64\intl.cpl 2013-08-13 11:23 - 2013-05-04 00:51 - 00014848 _____ (Microsoft) C:\windows\system32\rars.rs 2013-08-13 11:23 - 2013-05-04 00:48 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys 2013-08-13 11:23 - 2013-05-04 00:48 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidusb.sys 2013-08-13 11:23 - 2013-05-04 00:47 - 00427520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdbss.sys 2013-08-13 11:23 - 2013-05-04 00:10 - 00014848 _____ (Microsoft) C:\windows\SysWOW64\rars.rs 2013-08-13 11:23 - 2013-05-02 18:04 - 00386646 _____ C:\windows\system32\ApnDatabase.xml 2013-08-13 11:23 - 2013-03-02 06:57 - 00337128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBXHCI.SYS 2013-08-13 11:23 - 2013-03-02 06:39 - 00069864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pdc.sys 2013-08-13 11:23 - 2013-03-01 22:45 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\taskhost.exe 2013-08-13 11:23 - 2013-03-01 22:45 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\taskhostex.exe 2013-08-13 11:23 - 2013-03-01 22:45 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\wups.dll 2013-08-13 11:23 - 2013-03-01 22:43 - 02146304 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll 2013-08-13 11:23 - 2013-02-06 21:33 - 00754176 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll 2013-08-13 11:23 - 2013-02-02 04:39 - 00015872 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlmproxy.dll 2013-08-13 11:23 - 2013-02-02 04:39 - 00012288 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlmsprep.dll 2013-08-13 11:23 - 2012-11-20 00:54 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidi2c.sys 2013-08-13 11:23 - 2012-11-06 00:20 - 00018432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll 2013-08-13 11:23 - 2012-11-06 00:20 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\wuaext.dll 2013-08-13 11:23 - 2012-11-06 00:00 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\wushareduxresources.dll 2013-08-13 11:23 - 2012-11-02 01:20 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll 2013-08-13 11:22 - 2013-05-23 19:01 - 01300992 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll 2013-08-13 11:22 - 2013-05-23 18:27 - 01022464 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll 2013-08-13 11:22 - 2013-05-14 22:25 - 00888320 _____ (Microsoft Corporation) C:\windows\system32\autochk.exe 2013-08-13 11:22 - 2013-05-14 22:25 - 00542208 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll 2013-08-13 11:22 - 2013-05-14 22:24 - 00793088 _____ (Microsoft Corporation) C:\windows\SysWOW64\autochk.exe 2013-08-13 11:22 - 2013-05-14 22:24 - 00482816 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll 2013-08-13 11:16 - 2013-06-01 05:25 - 00496640 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll 2013-08-13 11:16 - 2013-06-01 05:21 - 00595968 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll 2013-08-13 11:16 - 2013-05-30 19:14 - 04036096 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2013-08-13 11:16 - 2013-04-23 19:13 - 01013248 _____ (Microsoft Corporation) C:\windows\SysWOW64\certutil.exe 2013-08-13 11:16 - 2013-04-23 19:12 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll 2013-08-13 11:16 - 2013-04-23 18:56 - 01255936 _____ (Microsoft Corporation) C:\windows\system32\certutil.exe 2013-08-13 11:16 - 2013-04-23 18:55 - 00141312 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll 2013-08-13 11:16 - 2013-04-11 18:30 - 01421312 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll 2013-08-13 11:16 - 2013-04-11 18:22 - 01838080 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll 2013-08-13 11:16 - 2013-03-02 05:59 - 00411880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS 2013-08-13 11:16 - 2013-03-02 04:22 - 00361984 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll 2013-08-13 11:16 - 2013-03-01 22:44 - 00468992 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll 2013-08-13 11:16 - 2013-02-05 18:31 - 00622080 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys 2013-08-13 11:16 - 2013-02-05 18:29 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys 2013-08-13 11:16 - 2013-02-05 18:28 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys 2013-08-13 11:16 - 2013-02-05 18:28 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys 2013-08-13 11:16 - 2013-02-02 07:19 - 00496872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys 2013-08-13 11:16 - 2013-02-02 07:19 - 00061672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\crashdmp.sys 2013-08-13 11:16 - 2013-02-02 06:54 - 01933544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys 2013-08-13 11:16 - 2013-02-02 06:28 - 00993512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys 2013-08-13 11:16 - 2013-02-02 04:40 - 00410624 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlroamextension.dll 2013-08-13 11:16 - 2013-02-02 04:40 - 00370688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WWanAPI.dll 2013-08-13 11:16 - 2013-02-02 04:40 - 00197632 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.Connectivity.dll 2013-08-13 11:16 - 2013-02-02 04:40 - 00155136 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsRasterService.dll 2013-08-13 11:16 - 2013-02-02 04:40 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\tasklist.exe 2013-08-13 11:16 - 2013-02-02 04:40 - 00079360 _____ (Microsoft Corporation) C:\windows\SysWOW64\taskkill.exe 2013-08-13 11:16 - 2013-02-02 04:39 - 00325632 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll 2013-08-13 11:16 - 2013-02-02 04:39 - 00157696 _____ (Microsoft Corporation) C:\windows\SysWOW64\mbsmsapi.dll 2013-08-13 11:16 - 2013-02-02 04:39 - 00055296 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll 2013-08-13 11:16 - 2013-02-02 04:38 - 00567808 _____ (Microsoft Corporation) C:\windows\SysWOW64\duser.dll 2013-08-13 11:16 - 2013-02-02 04:24 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\taskkill.exe 2013-08-13 11:16 - 2013-02-02 04:24 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\tasklist.exe 2013-08-13 11:16 - 2013-02-02 04:23 - 00611840 _____ (Microsoft Corporation) C:\windows\system32\wpd_ci.dll 2013-08-13 11:16 - 2013-02-02 04:23 - 00543232 _____ (Microsoft Corporation) C:\windows\system32\wlroamextension.dll 2013-08-13 11:16 - 2013-02-02 04:23 - 00475136 _____ (Microsoft Corporation) C:\windows\system32\WWanAPI.dll 2013-08-13 11:16 - 2013-02-02 04:23 - 00293376 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.Connectivity.dll 2013-08-13 11:16 - 2013-02-02 04:23 - 00228352 _____ (Microsoft Corporation) C:\windows\system32\XpsRasterService.dll 2013-08-13 11:16 - 2013-02-02 04:23 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\wersvc.dll 2013-08-13 11:16 - 2013-02-02 04:22 - 00416256 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll 2013-08-13 11:16 - 2013-02-02 04:21 - 00385024 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll 2013-08-13 11:16 - 2013-02-02 04:21 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\mbsmsapi.dll 2013-08-13 11:16 - 2013-02-02 04:20 - 00729600 _____ (Microsoft Corporation) C:\windows\system32\duser.dll 2013-08-13 11:16 - 2013-02-02 04:20 - 00260096 _____ (Microsoft Corporation) C:\windows\system32\hotspotauth.dll 2013-08-13 11:16 - 2013-02-02 03:25 - 00297984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys 2013-08-13 11:16 - 2013-02-02 03:25 - 00037632 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BthAvrcpTg.sys 2013-08-13 11:16 - 2012-11-26 23:57 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BtaMPM.sys 2013-08-13 11:16 - 2012-11-26 23:55 - 00029952 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BthhfHid.sys 2013-08-13 11:16 - 2012-11-26 00:21 - 00071168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptsslp.dll 2013-08-13 11:16 - 2012-11-26 00:20 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\ncryptsslp.dll 2013-08-13 11:16 - 2012-11-20 00:56 - 00027136 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys 2013-08-13 11:16 - 2012-10-23 23:25 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\ReAgentc.exe 2013-08-13 11:16 - 2012-10-23 22:48 - 00024064 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReAgentc.exe 2013-08-13 11:16 - 2012-10-10 03:04 - 00094208 _____ (Microsoft Corporation) C:\windows\system32\synceng.dll 2013-08-13 11:16 - 2012-10-10 02:31 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\synceng.dll 2013-08-13 11:15 - 2013-05-04 02:59 - 02842112 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL 2013-08-13 11:15 - 2013-05-04 00:57 - 02620928 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL 2013-08-13 11:15 - 2013-04-27 01:20 - 00733184 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll 2013-08-13 11:15 - 2013-04-02 19:37 - 00025088 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptdlg.dll 2013-08-13 11:15 - 2013-04-02 19:12 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\cryptdlg.dll 2013-08-13 11:15 - 2013-02-11 20:17 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usb8023.sys 2013-08-13 11:15 - 2013-02-02 01:41 - 01437184 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll 2013-08-13 11:15 - 2013-02-02 01:31 - 01690624 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll 2013-08-13 11:15 - 2012-12-16 04:28 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll 2013-08-13 11:15 - 2012-12-16 04:20 - 00035328 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll 2013-08-13 11:15 - 2012-12-16 04:08 - 00362496 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll 2013-08-13 11:15 - 2012-12-16 03:57 - 00300032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll 2013-08-13 11:15 - 2012-11-08 00:24 - 00075776 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll 2013-08-13 11:15 - 2012-11-08 00:24 - 00010752 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll 2013-08-13 11:15 - 2012-11-08 00:20 - 00096256 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll 2013-08-13 11:15 - 2012-11-08 00:20 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll 2013-08-13 11:15 - 2012-11-08 00:02 - 00003072 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll 2013-08-13 11:15 - 2012-11-08 00:01 - 00003072 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll 2013-08-13 11:15 - 2012-11-03 01:26 - 00034816 _____ (Microsoft Corporation) C:\windows\system32\dpnsvr.exe 2013-08-13 11:15 - 2012-11-03 01:26 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnsvr.exe 2013-08-13 11:15 - 2012-11-03 01:24 - 00463872 _____ (Microsoft Corporation) C:\windows\system32\dpnet.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00375808 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnet.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\dpnathlp.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00058880 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnathlp.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00009216 _____ (Microsoft Corporation) C:\windows\system32\dpnhupnp.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00009216 _____ (Microsoft Corporation) C:\windows\system32\dpnhpast.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnhupnp.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnhpast.dll 2013-08-13 11:15 - 2012-11-03 01:04 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\dpnlobby.dll 2013-08-13 11:15 - 2012-11-03 01:04 - 00003584 _____ (Microsoft Corporation) C:\windows\system32\dpnaddr.dll 2013-08-13 11:15 - 2012-11-03 01:00 - 00003072 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnlobby.dll 2013-08-13 11:15 - 2012-11-03 01:00 - 00002560 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnaddr.dll 2013-08-13 11:15 - 2012-11-01 00:40 - 02361344 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll 2013-08-13 11:15 - 2012-10-23 23:25 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\pcalua.exe 2013-08-13 11:15 - 2012-10-23 23:24 - 00405504 _____ (Microsoft Corporation) C:\windows\system32\pcasvc.dll 2013-08-13 11:15 - 2012-10-23 23:24 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\pcadm.dll 2013-08-13 11:15 - 2012-10-23 23:05 - 00011776 _____ (Microsoft Corporation) C:\windows\system32\pcaevts.dll 2013-08-13 11:14 - 2012-11-01 00:41 - 01802240 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll 2013-08-13 11:14 - 2012-11-01 00:41 - 01438720 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll 2013-08-13 11:14 - 2012-11-01 00:40 - 01836032 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll 2013-08-13 11:14 - 2012-11-01 00:21 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll 2013-08-13 11:14 - 2012-11-01 00:21 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll 2013-08-13 11:14 - 2012-11-01 00:20 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll 2013-08-13 11:14 - 2012-11-01 00:20 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll 2013-08-13 11:13 - 2013-08-13 11:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Hewlett-Packard 2013-08-11 09:56 - 2013-08-13 13:42 - 00000000 ____D C:\Windows.old 2013-08-11 09:56 - 2013-08-11 09:56 - 00262144 _____ C:\windows\system32\config\userdiff 2013-08-11 06:49 - 2013-08-11 06:49 - 01093032 _____ (Oracle Corporation) C:\windows\system32\npDeployJava1.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00972712 _____ (Oracle Corporation) C:\windows\system32\deployJava1.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00312232 _____ (Oracle Corporation) C:\windows\system32\javaws.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00188840 _____ (Oracle Corporation) C:\windows\system32\java.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00000000 ____D C:\Program Files\Java 2013-08-11 06:48 - 2013-08-11 06:49 - 33150376 _____ (Oracle Corporation) C:\Users\Philip\Downloads\jre-7u25-windows-x64.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00263592 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll 2013-08-11 06:37 - 2013-08-11 06:37 - 00000000 ____D C:\Program Files (x86)\Java 2013-08-11 06:35 - 2013-08-11 06:35 - 00903080 _____ (Oracle Corporation) C:\Users\Philip\Downloads\chromeinstall-7u25.exe 2013-08-11 06:32 - 2013-08-11 06:32 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2013-08-11 06:31 - 2013-08-15 07:09 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Notepad++ 2013-08-11 06:31 - 2013-08-11 06:32 - 00000000 ____D C:\Program Files (x86)\Notepad++ 2013-08-11 06:31 - 2013-08-11 06:31 - 00000783 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft.lnk 2013-08-11 06:30 - 2013-08-15 07:18 - 00004024 _____ C:\windows\System32\Tasks\HPGenoobeReminder 2013-08-11 06:30 - 2013-08-11 06:31 - 07412233 _____ C:\Users\Philip\Downloads\npp.6.4.5.Installer.exe 2013-08-11 06:30 - 2013-08-11 06:30 - 02420930 _____ C:\Users\Philip\Downloads\Fraps v3.2.3.rar 2013-08-11 06:30 - 2013-08-11 06:30 - 00000728 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps.lnk 2013-08-11 06:30 - 2013-08-11 06:30 - 00000564 _____ C:\Users\Philip\Desktop\Fraps.lnk 2013-08-11 06:30 - 2013-08-11 06:30 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps 2013-08-11 06:29 - 2013-08-11 06:29 - 00350729 _____ C:\Users\Philip\Downloads\OptiFine_1.6.2_HD_B4.zip 2013-08-11 06:27 - 2013-08-16 14:19 - 00000000 ____D C:\Users\Philip\AppData\Roaming\TS3Client 2013-08-11 06:27 - 2013-08-11 06:27 - 00001465 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client (2).lnk 2013-08-11 06:24 - 2013-08-14 14:38 - 00000000 ____D C:\Users\Philip\AppData\Roaming\.minecraft 2013-08-11 06:24 - 2013-08-11 06:24 - 00001465 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk 2013-08-11 06:24 - 2013-05-15 18:35 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\tssdisai.dll 2013-08-11 06:24 - 2012-11-10 00:23 - 00148480 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe 2013-08-11 06:24 - 2012-11-10 00:23 - 00132608 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe 2013-08-11 06:24 - 2012-11-10 00:22 - 00126976 _____ (Microsoft Corporation) C:\windows\system32\RDWebAI.dll 2013-08-11 06:24 - 2012-11-10 00:22 - 00122880 _____ (Microsoft Corporation) C:\windows\system32\VmHostAI.dll 2013-08-11 06:24 - 2012-11-10 00:20 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\appserverai.dll 2013-08-11 06:21 - 2013-08-11 06:30 - 00000000 ____D C:\Users\Philip\AppData\Roaming\WinRAR 2013-08-11 06:20 - 2013-08-11 06:21 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-08-11 06:20 - 2013-08-11 06:20 - 00001174 _____ C:\Users\Philip\Desktop\TeamSpeak 3 Client.lnk 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Users\Philip\AppData\Local\TeamSpeak 3 Client 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Program Files\WinRAR 2013-08-11 06:18 - 2013-08-11 07:43 - 00002406 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2013-08-11 06:17 - 2013-08-11 06:18 - 36175128 _____ (TeamSpeak Systems GmbH) C:\Users\Philip\Downloads\TeamSpeak3-Client-win64-3.0.11.1.exe 2013-08-11 06:17 - 2013-03-02 04:23 - 00375808 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReAgent.dll 2013-08-11 06:17 - 2013-03-01 22:44 - 01011200 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll 2013-08-11 06:17 - 2012-12-15 00:55 - 00443392 _____ (Microsoft Corporation) C:\windows\system32\ReAgent.dll 2013-08-11 06:17 - 2012-11-03 01:26 - 00132096 _____ (Microsoft Corporation) C:\windows\system32\sysreset.exe 2013-08-11 06:17 - 2012-11-03 01:25 - 00945152 _____ (Microsoft Corporation) C:\windows\system32\resetengmig.dll 2013-08-11 06:16 - 2013-08-11 06:37 - 00867240 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll 2013-08-11 06:16 - 2013-08-11 06:37 - 00789416 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll 2013-08-11 06:16 - 2013-08-11 06:16 - 00000000 ____D C:\ProgramData\Sun 2013-08-11 06:13 - 2013-08-16 11:08 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-11 06:13 - 2013-08-16 11:08 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-11 06:13 - 2013-08-16 10:58 - 00004098 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-08-11 06:13 - 2013-08-16 10:58 - 00003862 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-08-11 06:13 - 2013-08-11 06:15 - 00000000 ____D C:\Users\Philip\AppData\Local\Google 2013-08-11 06:13 - 2013-08-11 06:14 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-11 06:13 - 2013-08-11 06:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Deployment 2013-08-11 06:13 - 2013-08-11 06:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Apps\2.0 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Macromedia 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Roaming\ATI 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Local\ATI 2013-08-11 06:10 - 2013-08-13 16:40 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Adobe 2013-08-11 06:10 - 2013-08-13 14:19 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-08-11 06:10 - 2013-08-13 14:19 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-08-11 06:10 - 2013-08-11 06:10 - 00001432 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-11 06:10 - 2013-08-11 06:10 - 00000000 ____D C:\windows\System32\Tasks\WPD 2013-08-11 06:09 - 2013-08-11 06:09 - 00000000 __RSH C:\windows\SysWOW64\Drivers\103C_HP_cPC_p7-1534_Y53316J_0U_Q4CE3060CX5_E13NA1RR8603_4A_I2AE0_SMSI_V1.0_B8.14_T121218_W8101-0_L409_M7576_J1000_7AMD_8F01_93.20_#130116_N19691091;1814539B_Z_G10029904_Ohp CDDVDW SH-216BB_DACR0294.MRK 2013-08-11 06:09 - 2013-08-11 06:09 - 00000000 __RSH C:\windows\system32\Drivers\103C_HP_cPC_p7-1534_Y53316J_0U_Q4CE3060CX5_E13NA1RR8603_4A_I2AE0_SMSI_V1.0_B8.14_T121218_W8101-0_L409_M7576_J1000_7AMD_8F01_93.20_#130116_N19691091;1814539B_Z_G10029904_Ohp CDDVDW SH-216BB_DACR0294.MRK 2013-08-11 06:07 - 2013-08-13 13:13 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Hewlett-Packard 2013-08-11 06:07 - 2013-08-11 06:07 - 00000141 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc 2013-08-11 06:06 - 2013-08-11 06:06 - 00000000 ____D C:\Users\Philip\AppData\Local\Power2Go8 2013-08-11 06:06 - 2012-10-06 00:53 - 02893824 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll 2013-08-11 06:06 - 2012-10-06 00:15 - 02400256 _____ (Microsoft Corporation) C:\windows\SysWOW64\msmpeg2vdec.dll 2013-08-11 06:05 - 2013-08-13 15:08 - 00000000 ____D C:\Users\Philip\AppData\Local\VirtualStore 2013-08-11 06:05 - 2013-08-11 06:05 - 00000020 ___SH C:\Users\Philip\ntuser.ini 2013-08-11 06:02 - 2013-08-11 06:02 - 00006995 _____ C:\Users\Administrator\AppData\Local\Application.xml 2013-08-11 06:01 - 2013-01-16 19:01 - 00002103 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk 2013-08-11 06:00 - 2013-08-16 11:40 - 00000000 ____D C:\Users\Philip 2013-08-11 06:00 - 2013-08-11 06:02 - 00017148 _____ C:\windows\diagwrn.xml 2013-08-11 06:00 - 2013-08-11 06:02 - 00017148 _____ C:\windows\diagerr.xml 2013-08-11 06:00 - 2013-08-11 06:02 - 00000000 ___HD C:\Users\Philip\Documents\hp.system.package.metadata 2013-08-11 06:00 - 2012-07-26 04:13 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-08-11 06:00 - 2012-07-26 04:13 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-08-11 06:00 - 2012-07-26 04:13 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-08-11 06:00 - 2012-07-26 04:13 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-08-10 19:01 - 2013-08-10 19:01 - 00000000 ____H C:\Users\Philip\BIT9701.tmp 2013-08-10 08:31 - 2013-08-10 08:32 - 961261773 _____ C:\Users\Philip\Documents\Pro.mp4 2013-08-10 07:03 - 2013-08-10 07:03 - 00000000 ____D C:\Users\Philip\Documents\Top 10 US 2013-08-10 06:18 - 2013-08-10 06:21 - 73560303 _____ C:\Users\Philip\Documents\Montage.mp4 2013-08-09 08:01 - 2013-08-09 08:01 - 00000000 ____D C:\Users\Philip\Documents\MBL 2013-08-09 07:50 - 2013-08-09 07:50 - 00002728 _____ C:\Users\Philip\Documents\Vegas Pro registrieren.htm 2013-08-04 14:24 - 2013-08-04 14:24 - 00000000 ____H C:\Users\Philip\Documents\Default.rdp 2013-08-04 12:22 - 2013-08-04 12:28 - 00000000 ____D C:\Users\Philip\Documents\GFX 2013-08-01 17:13 - 2013-08-01 17:24 - 122123600 _____ C:\Users\Philip\Part2.wav 2013-08-01 16:56 - 2013-08-01 17:12 - 183039440 _____ C:\Users\Philip\Part1.wav 2013-08-01 16:53 - 2013-08-01 16:55 - 20167760 _____ C:\Users\Philip\Parody1.wav 2013-07-30 18:15 - 2013-07-30 18:19 - 28284120 _____ C:\Users\Philip\ts3_recording_13_07_30_18_15_37.wav 2013-07-23 18:22 - 2013-07-23 18:22 - 01309520 _____ C:\Users\Philip\JA ICH WEIS.wav ==================== One Month Modified Files and Folders ======= 2013-08-16 14:24 - 2013-08-16 14:24 - 01575798 _____ (Farbar) C:\Users\Philip\Downloads\FRST64.exe 2013-08-16 14:24 - 2013-08-16 14:24 - 00000000 ____D C:\FRST 2013-08-16 14:22 - 2013-08-14 09:03 - 00000000 ____D C:\Users\Philip\AppData\Local\PMB Files 2013-08-16 14:22 - 2013-08-14 09:03 - 00000000 ____D C:\ProgramData\PMB Files 2013-08-16 14:22 - 2013-08-13 11:50 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Skype 2013-08-16 14:20 - 2013-08-16 14:09 - 00019572 _____ C:\windows\WindowsUpdate.log 2013-08-16 14:15 - 2013-08-15 08:11 - 00003596 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-428423403-2423760254-1452003644-1001 2013-08-16 14:09 - 2013-08-16 14:09 - 00291288 _____ C:\windows\system32\FNTCACHE.DAT 2013-08-16 14:09 - 2012-07-26 03:22 - 00000006 ____H C:\windows\Tasks\SA.DAT 2013-08-16 13:04 - 2012-07-26 04:12 - 00000000 ____D C:\windows\rescache 2013-08-16 13:00 - 2012-07-26 04:12 - 00000000 ____D C:\windows\system32\sru 2013-08-16 12:25 - 2012-07-26 04:12 - 00000000 ____D C:\windows\system32\NDF 2013-08-16 11:40 - 2013-08-16 11:40 - 00000000 _____ C:\Users\Philip\defogger_reenable 2013-08-16 11:40 - 2013-08-15 10:00 - 00000474 _____ C:\Users\Philip\Downloads\defogger_disable.log 2013-08-16 11:40 - 2013-08-11 06:00 - 00000000 ____D C:\Users\Philip 2013-08-16 11:35 - 2013-08-16 11:35 - 00004168 _____ C:\Users\Philip\Desktop\hijackthis.log 2013-08-16 11:35 - 2013-07-16 06:14 - 00000000 ____D C:\Users\Philip\Desktop\Sachen 2013-08-16 11:17 - 2013-06-04 11:58 - 00000000 ____D C:\Users\Philip\Documents\Musikpack 2013-08-16 11:12 - 2013-08-13 16:31 - 00000000 ____D C:\Users\Philip\AppData\Local\Adobe 2013-08-16 11:08 - 2013-08-11 06:13 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-16 11:08 - 2013-08-11 06:13 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-16 10:58 - 2013-08-11 06:13 - 00004098 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-08-16 10:58 - 2013-08-11 06:13 - 00003862 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-08-16 10:37 - 2013-04-14 11:31 - 00000000 __SHD C:\found.000 2013-08-16 10:37 - 2013-01-16 18:45 - 00000000 ____D C:\ProgramData\install_clap 2013-08-16 10:37 - 2012-08-10 20:49 - 00000000 ____D C:\windows\Panther 2013-08-16 10:22 - 2012-07-26 04:12 - 00000000 ____D C:\windows\AUInstallAgent 2013-08-16 10:01 - 2012-07-26 01:26 - 00262144 ___SH C:\windows\system32\config\BBI 2013-08-16 10:00 - 2013-08-16 09:20 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} 2013-08-16 10:00 - 2013-08-15 11:11 - 00000000 ____D C:\ProgramData\DriverGenius 2013-08-16 10:00 - 2013-01-16 18:41 - 00000000 ____D C:\ProgramData\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF} 2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\windows\SysWOW64\Atheros_L1e 2013-08-16 09:35 - 2013-01-16 18:40 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-08-16 09:34 - 2013-08-16 09:34 - 05354184 _____ C:\Users\Philip\Downloads\LOM_Atheros_W7_A00_Setup-YN802_ZPE.exe 2013-08-16 09:34 - 2013-08-16 09:34 - 00000000 ____D C:\Dell 2013-08-16 09:32 - 2013-08-16 09:32 - 00000000 ____D C:\Users\Philip\AppData\Roaming\driveridentifier 2013-08-16 09:31 - 2013-08-16 09:31 - 00949700 _____ (DriverIdentifier ) C:\Users\Philip\Downloads\driveridentifier_setup.exe 2013-08-16 09:31 - 2013-08-16 09:31 - 00000000 ____D C:\Program Files (x86)\Driver Identifier 2013-08-16 09:30 - 2013-08-16 09:30 - 00633360 _____ (Copyright © 2010 eSupport.com. All Rights Reserved.) C:\Users\Philip\Downloads\biosagentplus_1218 (2).exe 2013-08-16 09:30 - 2013-08-16 09:30 - 00633360 _____ (Copyright © 2010 eSupport.com. All Rights Reserved.) C:\Users\Philip\Downloads\biosagentplus_1218 (1).exe 2013-08-16 09:26 - 2013-08-16 09:26 - 00103057 _____ C:\Users\Philip\Downloads\20488622_11fdbe35d53d28191b09cb5fdf994c8ab39688e2.cab 2013-08-16 09:25 - 2013-08-16 09:25 - 00096295 _____ C:\Users\Philip\Downloads\20488623_8dc4c881c577c1122db21595a142864a7ccf1f17.cab 2013-08-16 09:21 - 2013-08-16 09:21 - 00000000 ____D C:\Users\Philip\AppData\Roaming\TuneUp Software 2013-08-16 09:21 - 2013-08-16 09:21 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2013 2013-08-16 09:21 - 2013-08-16 09:20 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-08-16 09:18 - 2013-08-16 09:18 - 00041472 _____ C:\Users\Philip\Downloads\launcher64.dll 2013-08-16 09:18 - 2013-08-16 09:18 - 00021712 _____ (Phoenix Technologies) C:\windows\SysWOW64\Drivers\DrvAgent64.SYS 2013-08-16 09:18 - 2013-08-16 09:18 - 00000000 ____D C:\Users\Philip\AppData\Local\eSupport.com 2013-08-16 09:18 - 2013-08-16 09:17 - 28211040 _____ (TuneUp Software) C:\Users\Philip\Downloads\TuneUpUtilities2013_de-DE.exe 2013-08-16 09:17 - 2013-08-16 09:17 - 00633360 _____ (Copyright © 2010 eSupport.com. All Rights Reserved.) C:\Users\Philip\Downloads\biosagentplus_1218.exe 2013-08-16 09:15 - 2013-08-16 09:15 - 01439184 _____ ( ) C:\Users\Philip\Downloads\cpu-z_1.651-setup-en.exe 2013-08-16 09:15 - 2013-08-16 09:15 - 00000871 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk 2013-08-16 09:15 - 2013-08-16 09:15 - 00000000 ____D C:\Program Files\CPUID 2013-08-16 07:51 - 2013-08-16 07:51 - 00000246 _____ C:\Users\Philip\Downloads\defogger_enable.log 2013-08-15 18:56 - 2013-08-15 18:56 - 00000000 ____D C:\Users\Philip\Ekahau Site Survey 2013-08-15 18:54 - 2013-08-15 18:54 - 00000000 ____D C:\Program Files\Ekahau 2013-08-15 18:54 - 2013-08-15 18:51 - 100885752 _____ (Ekahau) C:\Users\Philip\Downloads\Ekahau114_Heatmapper-Setup.exe 2013-08-15 18:28 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files\Windows Defender 2013-08-15 18:28 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-08-15 13:34 - 2013-08-15 13:33 - 00000000 ____D C:\windows\system32\MRT 2013-08-15 13:33 - 2013-08-13 12:38 - 78161360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-08-15 11:11 - 2013-08-15 11:11 - 00000000 ____D C:\Program Files (x86)\Driver-Soft 2013-08-15 11:10 - 2013-08-15 11:09 - 11360728 _____ (Driver-Soft Inc. ) C:\Users\Philip\Downloads\Driver_Genius_Professional_DE_12.exe 2013-08-15 11:03 - 2013-08-15 11:03 - 00016152 _____ C:\windows\system32\Drivers\SWDUMon.sys 2013-08-15 11:03 - 2013-08-15 11:03 - 00000426 _____ C:\windows\Tasks\SlimDrivers Startup.job 2013-08-15 11:02 - 2013-08-15 11:02 - 00698688 _____ (SlimWare Utilities, Inc.) C:\Users\Philip\Downloads\SlimDrivers-30877setup.exe 2013-08-15 11:02 - 2013-08-15 11:02 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers 2013-08-15 11:02 - 2013-08-15 11:02 - 00000000 ____D C:\Users\Philip\AppData\Local\SlimWare Utilities Inc 2013-08-15 10:59 - 2013-01-16 18:45 - 00000000 ____D C:\Program Files\Bonjour 2013-08-15 10:59 - 2013-01-16 18:45 - 00000000 ____D C:\Program Files (x86)\Bonjour 2013-08-15 10:59 - 2012-08-10 19:52 - 00000000 ____D C:\Users\Administrator 2013-08-15 10:59 - 2012-07-26 03:52 - 00000000 ____D C:\Program Files\Windows Journal 2013-08-15 10:55 - 2013-01-16 18:45 - 00000000 ____D C:\ProgramData\CyberLink 2013-08-15 10:55 - 2013-01-16 18:45 - 00000000 ____D C:\ProgramData\Apple 2013-08-15 10:55 - 2013-01-16 18:41 - 00000000 ____D C:\ProgramData\Ralink Driver 2013-08-15 10:55 - 2013-01-16 18:39 - 00000000 ____D C:\ProgramData\Hewlett-Packard 2013-08-15 10:55 - 2012-07-26 04:12 - 00000000 ____D C:\windows\registration 2013-08-15 10:55 - 2012-07-26 01:38 - 00000000 ____D C:\windows\system32\Sysprep 2013-08-15 10:54 - 2013-08-15 08:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-15 10:54 - 2013-08-15 08:37 - 00000000 ____D C:\Program Files (x86)\o2 2013-08-15 10:54 - 2013-08-13 17:05 - 00000000 ____D C:\Program Files\CCleaner 2013-08-15 10:54 - 2013-01-16 19:01 - 00000000 ___RD C:\Program Files\Online Services 2013-08-15 10:54 - 2013-01-16 18:40 - 00000000 ____D C:\Program Files\IDT 2013-08-15 10:54 - 2013-01-16 18:38 - 00000000 ____D C:\Program Files\Hewlett-Packard 2013-08-15 10:54 - 2013-01-16 18:35 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2013-08-15 10:54 - 2012-08-10 19:55 - 00000000 ____D C:\inetpub 2013-08-15 10:54 - 2012-08-10 19:54 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-08-15 10:54 - 2012-08-10 19:54 - 00000000 ____D C:\Program Files\MSBuild 2013-08-15 10:54 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-08-15 10:54 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files\Windows NT 2013-08-15 10:54 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files\Common Files\System 2013-08-15 10:54 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-08-15 09:59 - 2013-08-15 09:59 - 00050477 _____ C:\Users\Philip\Downloads\Defogger.exe 2013-08-15 09:25 - 2013-08-15 08:40 - 00181064 _____ (Sysinternals) C:\windows\PSEXESVC.EXE 2013-08-15 09:22 - 2012-07-26 01:26 - 00000128 _____ C:\windows\win.ini 2013-08-15 09:21 - 2012-08-10 19:56 - 00876494 _____ C:\windows\SysWOW64\PerfStringBackup.INI 2013-08-15 09:21 - 2012-07-26 03:28 - 00876494 _____ C:\windows\system32\PerfStringBackup.INI 2013-08-15 09:05 - 2012-07-26 01:26 - 00000855 _____ C:\windows\system32\Drivers\etc\hosts_bak_374 2013-08-15 08:56 - 2012-07-26 01:26 - 00000855 _____ C:\windows\system32\Drivers\etc\hosts_bak_678 2013-08-15 08:47 - 2013-08-15 08:47 - 00002114 _____ C:\Users\Public\Desktop\Mobile Connection Manager.lnk 2013-08-15 08:47 - 2013-08-15 08:47 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Telefónica 2013-08-15 08:46 - 2013-08-15 08:46 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-15 08:46 - 2013-08-15 08:46 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Malwarebytes 2013-08-15 08:46 - 2013-08-15 08:46 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-08-15 08:42 - 2012-07-26 01:26 - 00000855 _____ C:\windows\system32\Drivers\etc\hosts_bak_629 2013-08-15 08:38 - 2013-08-15 08:38 - 00000000 ____D C:\RegBackup 2013-08-15 08:38 - 2013-08-15 08:37 - 00000000 ____D C:\Program Files (x86)\HUAWEI Modem Driver 2013-08-15 08:36 - 2013-08-15 08:36 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2013-08-15 07:18 - 2013-08-11 06:30 - 00004024 _____ C:\windows\System32\Tasks\HPGenoobeReminder 2013-08-15 07:09 - 2013-08-11 06:31 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Notepad++ 2013-08-15 07:05 - 2013-08-15 07:05 - 03268369 _____ C:\Users\Philip\Downloads\tweaking.com_windows_repair_aio.zip 2013-08-15 06:51 - 2013-01-16 19:02 - 00000000 ____D C:\ProgramData\Norton 2013-08-14 14:39 - 2013-08-14 14:39 - 00377138 _____ C:\Users\Philip\Downloads\OptiFine_1.5.2_HD_U_D5.zip 2013-08-14 14:38 - 2013-08-11 06:24 - 00000000 ____D C:\Users\Philip\AppData\Roaming\.minecraft 2013-08-14 14:30 - 2013-08-14 14:28 - 00000000 ____D C:\Users\Philip\AppData\Roaming\.technic 2013-08-14 14:28 - 2013-08-14 14:28 - 03020770 _____ () C:\Users\Philip\Downloads\TechnicLauncher.exe 2013-08-14 09:06 - 2013-08-14 09:06 - 00000000 ____D C:\Users\Philip\AppData\Roaming\LolClient 2013-08-14 09:05 - 2013-08-14 09:05 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk 2013-08-14 09:05 - 2013-08-14 09:05 - 00000000 __SHD C:\windows\SysWOW64\AI_RecycleBin 2013-08-14 09:03 - 2013-08-14 09:03 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Riot Games 2013-08-14 09:03 - 2013-08-14 09:03 - 00000000 ____D C:\Program Files (x86)\Pando Networks 2013-08-14 09:03 - 2013-08-14 09:02 - 34888568 _____ (Riot Games) C:\Users\Philip\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2013-08-13 17:06 - 2012-07-26 04:12 - 00000000 ___HD C:\windows\ELAMBKUP 2013-08-13 17:06 - 2012-07-26 01:26 - 00262144 ___SH C:\windows\system32\config\ELAM 2013-08-13 17:05 - 2013-08-13 17:05 - 04429440 _____ (Piriform Ltd) C:\Users\Philip\Downloads\ccsetup404.exe 2013-08-13 17:05 - 2013-08-13 17:05 - 00000824 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-08-13 16:50 - 2013-08-13 16:50 - 00000000 ____D C:\ProgramData\Adobe 2013-08-13 16:41 - 2013-08-13 16:41 - 00003500 _____ C:\windows\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-cenniz@gmx.de 2013-08-13 16:40 - 2013-08-13 16:40 - 00001070 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2013-08-13 16:40 - 2013-08-11 06:10 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Adobe 2013-08-13 16:39 - 2013-08-13 16:39 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-08-13 16:31 - 2013-08-13 16:30 - 03867000 _____ (Adobe Systems Incorporated) C:\Users\Philip\Downloads\CreativeCloudSet-Up.exe 2013-08-13 15:14 - 2013-08-13 15:14 - 00000000 ____D C:\Users\Philip\AppData\Roaming\IDT 2013-08-13 15:08 - 2013-08-11 06:05 - 00000000 ____D C:\Users\Philip\AppData\Local\VirtualStore 2013-08-13 14:19 - 2013-08-13 14:13 - 00000000 ____D C:\windows\BrowserChoice 2013-08-13 14:19 - 2013-08-11 06:10 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-08-13 14:19 - 2013-08-11 06:10 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-08-13 14:19 - 2012-08-10 19:52 - 00000000 ____D C:\ProgramData\PRICache 2013-08-13 14:17 - 2012-07-26 01:37 - 00000000 ____D C:\windows\servicing 2013-08-13 14:13 - 2012-07-26 04:12 - 00000000 ____D C:\windows\ToastData 2013-08-13 14:13 - 2012-07-26 01:38 - 00000000 ____D C:\windows\system32\oobe 2013-08-13 14:12 - 2012-07-26 04:12 - 00000000 ____D C:\windows\WinStore 2013-08-13 14:12 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2013-08-13 14:12 - 2012-07-26 01:38 - 00000000 ____D C:\windows\SysWOW64\Dism 2013-08-13 14:12 - 2012-07-26 01:38 - 00000000 ____D C:\windows\system32\Dism 2013-08-13 13:42 - 2013-08-11 09:56 - 00000000 ____D C:\Windows.old 2013-08-13 13:13 - 2013-08-11 06:07 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Hewlett-Packard 2013-08-13 11:50 - 2013-08-13 11:50 - 00002515 _____ C:\Users\Public\Desktop\Skype.lnk 2013-08-13 11:50 - 2013-08-13 11:50 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-08-13 11:50 - 2013-08-13 11:50 - 00000000 ____D C:\ProgramData\Skype 2013-08-13 11:49 - 2013-08-13 11:49 - 01492848 _____ (Skype Technologies S.A.) C:\Users\Philip\Downloads\SkypeSetup.exe 2013-08-13 11:13 - 2013-08-13 11:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Hewlett-Packard 2013-08-11 09:56 - 2013-08-11 09:56 - 00262144 _____ C:\windows\system32\config\userdiff 2013-08-11 09:56 - 2012-07-26 04:13 - 00262144 _____ C:\windows\system32\config\BCD-Template 2013-08-11 07:43 - 2013-08-11 06:18 - 00002406 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2013-08-11 06:49 - 2013-08-11 06:49 - 01093032 _____ (Oracle Corporation) C:\windows\system32\npDeployJava1.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00972712 _____ (Oracle Corporation) C:\windows\system32\deployJava1.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00312232 _____ (Oracle Corporation) C:\windows\system32\javaws.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00188840 _____ (Oracle Corporation) C:\windows\system32\java.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00000000 ____D C:\Program Files\Java 2013-08-11 06:49 - 2013-08-11 06:48 - 33150376 _____ (Oracle Corporation) C:\Users\Philip\Downloads\jre-7u25-windows-x64.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00263592 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll 2013-08-11 06:37 - 2013-08-11 06:37 - 00000000 ____D C:\Program Files (x86)\Java 2013-08-11 06:37 - 2013-08-11 06:16 - 00867240 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll 2013-08-11 06:37 - 2013-08-11 06:16 - 00789416 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll 2013-08-11 06:35 - 2013-08-11 06:35 - 00903080 _____ (Oracle Corporation) C:\Users\Philip\Downloads\chromeinstall-7u25.exe 2013-08-11 06:32 - 2013-08-11 06:32 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2013-08-11 06:32 - 2013-08-11 06:31 - 00000000 ____D C:\Program Files (x86)\Notepad++ 2013-08-11 06:31 - 2013-08-11 06:31 - 00000783 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft.lnk 2013-08-11 06:31 - 2013-08-11 06:30 - 07412233 _____ C:\Users\Philip\Downloads\npp.6.4.5.Installer.exe 2013-08-11 06:30 - 2013-08-11 06:30 - 02420930 _____ C:\Users\Philip\Downloads\Fraps v3.2.3.rar 2013-08-11 06:30 - 2013-08-11 06:30 - 00000728 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps.lnk 2013-08-11 06:30 - 2013-08-11 06:30 - 00000564 _____ C:\Users\Philip\Desktop\Fraps.lnk 2013-08-11 06:30 - 2013-08-11 06:30 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps 2013-08-11 06:30 - 2013-08-11 06:21 - 00000000 ____D C:\Users\Philip\AppData\Roaming\WinRAR 2013-08-11 06:29 - 2013-08-11 06:29 - 00350729 _____ C:\Users\Philip\Downloads\OptiFine_1.6.2_HD_B4.zip 2013-08-11 06:27 - 2013-08-11 06:27 - 00001465 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client (2).lnk 2013-08-11 06:24 - 2013-08-11 06:24 - 00001465 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk 2013-08-11 06:22 - 2013-01-16 18:41 - 00002859 _____ C:\windows\system32\RaCoInst.log 2013-08-11 06:21 - 2013-08-11 06:20 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-08-11 06:20 - 2013-08-11 06:20 - 00001174 _____ C:\Users\Philip\Desktop\TeamSpeak 3 Client.lnk 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Users\Philip\AppData\Local\TeamSpeak 3 Client 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Program Files\WinRAR 2013-08-11 06:18 - 2013-08-11 06:17 - 36175128 _____ (TeamSpeak Systems GmbH) C:\Users\Philip\Downloads\TeamSpeak3-Client-win64-3.0.11.1.exe 2013-08-11 06:16 - 2013-08-11 06:16 - 00000000 ____D C:\ProgramData\Sun 2013-08-11 06:15 - 2013-08-11 06:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Google 2013-08-11 06:15 - 2012-07-26 04:12 - 00000000 ____D C:\windows\system32\restore 2013-08-11 06:14 - 2013-08-11 06:13 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-11 06:13 - 2013-08-11 06:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Deployment 2013-08-11 06:13 - 2013-08-11 06:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Apps\2.0 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Macromedia 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Roaming\ATI 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Local\ATI 2013-08-11 06:10 - 2013-08-11 06:10 - 00001432 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-11 06:10 - 2013-08-11 06:10 - 00000000 ____D C:\windows\System32\Tasks\WPD 2013-08-11 06:10 - 2013-04-05 18:01 - 00000000 ____D C:\Users\Philip\AppData\Local\Packages 2013-08-11 06:10 - 2012-10-11 23:24 - 00000000 ____D C:\SWSETUP 2013-08-11 06:10 - 2012-10-11 23:21 - 00000000 _RSHD C:\SYSTEM.SAV 2013-08-11 06:09 - 2013-08-11 06:09 - 00000000 __RSH C:\windows\SysWOW64\Drivers\103C_HP_cPC_p7-1534_Y53316J_0U_Q4CE3060CX5_E13NA1RR8603_4A_I2AE0_SMSI_V1.0_B8.14_T121218_W8101-0_L409_M7576_J1000_7AMD_8F01_93.20_#130116_N19691091;1814539B_Z_G10029904_Ohp CDDVDW SH-216BB_DACR0294.MRK 2013-08-11 06:09 - 2013-08-11 06:09 - 00000000 __RSH C:\windows\system32\Drivers\103C_HP_cPC_p7-1534_Y53316J_0U_Q4CE3060CX5_E13NA1RR8603_4A_I2AE0_SMSI_V1.0_B8.14_T121218_W8101-0_L409_M7576_J1000_7AMD_8F01_93.20_#130116_N19691091;1814539B_Z_G10029904_Ohp CDDVDW SH-216BB_DACR0294.MRK 2013-08-11 06:09 - 2013-01-16 18:44 - 00000000 ___RD C:\Program Files (x86)\Online Services 2013-08-11 06:09 - 2013-01-07 07:13 - 00000000 _RSHD C:\hp 2013-08-11 06:07 - 2013-08-11 06:07 - 00000141 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc 2013-08-11 06:06 - 2013-08-11 06:06 - 00000000 ____D C:\Users\Philip\AppData\Local\Power2Go8 2013-08-11 06:05 - 2013-08-11 06:05 - 00000020 ___SH C:\Users\Philip\ntuser.ini 2013-08-11 06:02 - 2013-08-11 06:02 - 00006995 _____ C:\Users\Administrator\AppData\Local\Application.xml 2013-08-11 06:02 - 2013-08-11 06:00 - 00017148 _____ C:\windows\diagwrn.xml 2013-08-11 06:02 - 2013-08-11 06:00 - 00017148 _____ C:\windows\diagerr.xml 2013-08-11 06:02 - 2013-08-11 06:00 - 00000000 ___HD C:\Users\Philip\Documents\hp.system.package.metadata 2013-08-11 06:02 - 2012-07-26 04:12 - 00000000 __RHD C:\Users\Public\Libraries 2013-08-11 06:02 - 2012-07-26 04:12 - 00000000 ____D C:\windows\system32\Recovery 2013-08-11 06:02 - 2012-07-26 01:37 - 00000000 __RHD C:\Users\Default 2013-08-10 19:01 - 2013-08-10 19:01 - 00000000 ____H C:\Users\Philip\BIT9701.tmp 2013-08-10 18:47 - 2013-04-19 14:31 - 00887296 ___SH C:\Users\Philip\Desktop\Thumbs.db 2013-08-10 18:01 - 2013-06-05 23:05 - 00380751 _____ C:\Simraceway.log 2013-08-10 08:32 - 2013-08-10 08:31 - 961261773 _____ C:\Users\Philip\Documents\Pro.mp4 2013-08-10 07:03 - 2013-08-10 07:03 - 00000000 ____D C:\Users\Philip\Documents\Top 10 US 2013-08-10 06:21 - 2013-08-10 06:18 - 73560303 _____ C:\Users\Philip\Documents\Montage.mp4 2013-08-09 08:01 - 2013-08-09 08:01 - 00000000 ____D C:\Users\Philip\Documents\MBL 2013-08-09 07:50 - 2013-08-09 07:50 - 00002728 _____ C:\Users\Philip\Documents\Vegas Pro registrieren.htm 2013-08-04 14:24 - 2013-08-04 14:24 - 00000000 ____H C:\Users\Philip\Documents\Default.rdp 2013-08-04 12:28 - 2013-08-04 12:22 - 00000000 ____D C:\Users\Philip\Documents\GFX 2013-08-03 14:07 - 2013-05-21 00:10 - 00000000 ____D C:\Users\Philip\Documents\Sachen 2013-08-02 06:31 - 2013-04-19 12:30 - 00457728 ___SH C:\Users\Philip\Documents\Thumbs.db 2013-08-01 17:24 - 2013-08-01 17:13 - 122123600 _____ C:\Users\Philip\Part2.wav 2013-08-01 17:12 - 2013-08-01 16:56 - 183039440 _____ C:\Users\Philip\Part1.wav 2013-08-01 16:55 - 2013-08-01 16:53 - 20167760 _____ C:\Users\Philip\Parody1.wav 2013-07-31 08:01 - 2013-06-03 21:23 - 00001110 _____ C:\Users\Philip\Documents\EselLP.txt 2013-07-30 18:19 - 2013-07-30 18:15 - 28284120 _____ C:\Users\Philip\ts3_recording_13_07_30_18_15_37.wav 2013-07-30 14:10 - 2013-04-16 00:46 - 00073728 ___SH C:\Users\Philip\Downloads\Thumbs.db 2013-07-29 11:04 - 2013-05-03 20:20 - 00000000 ____D C:\DxTory 2013-07-26 01:13 - 2013-08-15 11:13 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2013-07-26 01:13 - 2013-08-15 11:13 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2013-07-26 01:13 - 2013-08-15 11:13 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll 2013-07-26 01:13 - 2013-08-15 11:13 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll 2013-07-26 01:13 - 2013-08-15 11:13 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2013-07-26 01:12 - 2013-08-15 11:13 - 19239424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 15405056 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2013-07-25 23:35 - 2013-08-15 11:13 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2013-07-25 23:13 - 2013-08-15 11:13 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2013-07-25 23:13 - 2013-08-15 11:13 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2013-07-25 23:13 - 2013-08-15 11:13 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 14329344 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2013-07-25 23:11 - 2013-08-15 11:13 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2013-07-25 23:11 - 2013-08-15 11:13 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2013-07-25 22:49 - 2013-08-15 11:13 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2013-07-25 20:54 - 2013-08-15 11:13 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll 2013-07-23 18:22 - 2013-07-23 18:22 - 01309520 _____ C:\Users\Philip\JA ICH WEIS.wav ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2012-08-10 19:49 ==================== End Of Log ============================ --- --- --- --- --- --- und hier Additionlog Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-08-2013 01 Ran by Philip at 2013-08-16 14:25:43 Running from C:\Users\Philip\Downloads Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 4 Elements II (x32 Version: 2.2.0.98) Adobe Creative Cloud (x32 Version: 2.1.0.213) AMD APP SDK Runtime (Version: 10.0.938.2) AMD Catalyst Install Manager (Version: 8.0.881.0) AMD VISION Engine Control Center (x32 Version: 2012.0828.2156.37465) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.0.9.13) Bejeweled 3 (x32 Version: 2.2.0.98) Bonjour (Version: 3.0.0.10) Build-a-lot 4 - Power Source (x32 Version: 2.2.0.98) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0828.2156.37465) Catalyst Control Center InstallProxy (x32 Version: 2012.0828.2156.37465) Catalyst Control Center Localization All (x32 Version: 2012.0828.2156.37465) CCC Help Chinese Standard (x32 Version: 2012.0828.2155.37465) CCC Help Chinese Traditional (x32 Version: 2012.0828.2155.37465) CCC Help Czech (x32 Version: 2012.0828.2155.37465) CCC Help Danish (x32 Version: 2012.0828.2155.37465) CCC Help Dutch (x32 Version: 2012.0828.2155.37465) CCC Help English (x32 Version: 2012.0828.2155.37465) CCC Help Finnish (x32 Version: 2012.0828.2155.37465) CCC Help French (x32 Version: 2012.0828.2155.37465) CCC Help German (x32 Version: 2012.0828.2155.37465) CCC Help Greek (x32 Version: 2012.0828.2155.37465) CCC Help Hungarian (x32 Version: 2012.0828.2155.37465) CCC Help Italian (x32 Version: 2012.0828.2155.37465) CCC Help Japanese (x32 Version: 2012.0828.2155.37465) CCC Help Korean (x32 Version: 2012.0828.2155.37465) CCC Help Norwegian (x32 Version: 2012.0828.2155.37465) CCC Help Polish (x32 Version: 2012.0828.2155.37465) CCC Help Portuguese (x32 Version: 2012.0828.2155.37465) CCC Help Russian (x32 Version: 2012.0828.2155.37465) CCC Help Spanish (x32 Version: 2012.0828.2155.37465) CCC Help Swedish (x32 Version: 2012.0828.2155.37465) CCC Help Thai (x32 Version: 2012.0828.2155.37465) CCC Help Turkish (x32 Version: 2012.0828.2155.37465) ccc-utility64 (Version: 2012.0828.2156.37465) CPUID CPU-Z 1.65.1 Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.98) Cradle of Rome 2 (x32 Version: 2.2.0.98) CyberLink LabelPrint (x32 Version: 2.5.2.5630) CyberLink Media Suite 10 (x32 Version: 10.0.2.2114) CyberLink PhotoDirector (x32 Version: 2.0.2.3317) CyberLink Power2Go 8 (x32 Version: 8.0.2.2126) CyberLink PowerDirector 10 (x32 Version: 10.0.2.2126) CyberLink PowerDVD (x32 Version: 10.0.7.4605) D3DX10 (x32 Version: 15.4.2368.0902) Driver Genius (x32 Version: 12.0) DriverIdentifier 4.2.6 (x32) eaner (Version: 4.04) Ekahau HeatMapper (Version: 1.1.4.39795) Farm Frenzy (x32 Version: 2.2.0.98) FATE: The Cursed King (x32 Version: 2.2.0.97) Final Drive Fury (x32 Version: 2.2.0.95) Fraps (remove only) (x32) Gardenscapes: Mansion Makeover (x32 Version: 3.0.2.32) Google Chrome (x32 Version: 28.0.1500.95) Google Update Helper (x32 Version: 1.3.21.153) Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.95) Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000) House of 1000 Doors: Family Secrets (x32 Version: 2.2.0.98) Hoyle Card Games (x32 Version: 2.2.0.95) HP Connected Music (Meridian - installer) (x32 Version: v1.0) HP Connected Remote (x32 Version: 1.0.1218) HP Customer Experience Enhancements (x32 Version: 6.0.1.7) HP Games (x32 Version: 1.0.3.0) HP MyRoom (x32 Version: 9.0.0.0) HP Postscript Converter (Version: 3.1.3591) HP Registration Service (Version: 1.1.6232.4245) HP Support Assistant (x32 Version: 7.0.39.15) HP Support Information (x32 Version: 12.00.0000) HUAWEI DataCard Driver 4.20.12.00 (x32 Version: 4.20.12.00) IDT Audio (x32 Version: 1.0.6418.0) Java 7 Update 25 (64-bit) (Version: 7.0.250) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Jewel Match 3 (x32 Version: 2.2.0.98) John Deere Drive Green (x32 Version: 2.2.0.95) League of Legends (x32 Version: 3.0.1) Luxor Evolved (x32 Version: 2.2.0.98) Mahjongg Dimensions Deluxe: Tiles in Time (x32 Version: 2.2.0.98) Malwarebytes Anti-Malware version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office (x32 Version: 14.0.6120.5004) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Mobile Connection Manager (x32) Mortimer Beckett and the Crimson Thief Premium Edition (x32 Version: 2.2.0.98) Movie Maker (x32 Version: 16.4.3503.0728) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT110 (x32 Version: 16.4.1108.0727) MSVCRT110_amd64 (Version: 16.4.1108.0727) Mystery P.I. - Curious Case of Counterfeit Cove (x32 Version: 2.2.0.98) Notepad++ (x32 Version: 6.4.5) Pando Media Booster (x32 Version: 2.6.0.7) Peggle Nights (x32 Version: 2.2.0.98) Penguins! (x32 Version: 2.2.0.98) Photo Common (x32 Version: 16.4.3503.0728) Photo Gallery (x32 Version: 16.4.3503.0728) Polar Bowler (x32 Version: 2.2.0.97) Polar Golfer (x32 Version: 2.2.0.98) Ralink RT5390R 802.11bgn Wi-Fi Adapter (x32 Version: 5.0.5.0) Recovery Manager (x32 Version: 5.5.0.5826) Roads of Rome 3 (x32 Version: 2.2.0.98) Royal Envoy 2 Collector's Edition (x32 Version: 3.0.2.32) Skype™ 6.7 (x32 Version: 6.7.102) SlimDrivers (x32 Version: 2.2.30877) Tales of Lagoona (x32 Version: 2.2.0.110) TeamSpeak 3 Client (HKCU Version: 3.0.11) TuneUp Utilities 2013 (x32 Version: 13.0.3020.2) TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2) Update Installer for WildTangent Games App (x32) WildTangent Games (x32 Version: 1.0.3.0) WildTangent Games App (x32 Version: 4.0.9.7) Windows Live Communications Platform (x32 Version: 16.4.3503.0728) Windows Live Essentials (x32 Version: 16.4.3503.0728) Windows Live Installer (x32 Version: 16.4.3503.0728) Windows Live Photo Common (x32 Version: 16.4.3503.0728) Windows Live PIMT Platform (x32 Version: 16.4.3503.0728) Windows Live SOXE (x32 Version: 16.4.3503.0728) Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728) Windows Live UX Platform (x32 Version: 16.4.3503.0728) Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728) WinRAR 4.20 (64-Bit) (Version: 4.20.0) Youda Jewel Shop (x32 Version: 3.0.2.32) Zuma's Revenge (x32 Version: 2.2.0.98) ==================== Restore Points ========================= Could not list Restore Points. ==================== Hosts content: ========================== 2012-07-26 01:26 - 2013-08-15 09:22 - 00000855 ____A C:\windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {05B5B830-CB8E-4BA6-89F4-3BA02B51CFE1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\MpCmdRun.exe [2013-07-01] (Microsoft Corporation) Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-25] (Microsoft Corporation) Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-25] (Microsoft Corporation) Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents Task: {2062E591-38ED-488E-84AD-87C13E8DAF4F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\MpCmdRun.exe [2013-07-01] (Microsoft Corporation) Task: {2081BC47-D15F-46C9-922C-483B9C201EB4} - System32\Tasks\CLMLSvc_P2G8 => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-07] (CyberLink) Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-25] (Microsoft Corporation) Task: {23D6AA37-4101-4982-B796-6D9A080FBF27} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company) Task: {2A678F20-B53F-47D7-86D4-869F189AE6C4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\MpCmdRun.exe [2013-07-01] (Microsoft Corporation) Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem Task: {4071F81E-9AE8-44F2-BAEE-7AE0FDA4C34A} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage Task: {44BA17BF-AC47-4153-8F15-5E7F0F6EC260} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\windows\system32\sc.exe [2012-07-25] (Microsoft Corporation) Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2012-07-25] (Microsoft Corporation) Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon Task: {56EB333E-667D-4F39-BB99-24F4BB54B2E2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-11] (Google Inc.) Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required Task: {626A3925-1CAF-492D-A0B2-1CFACF72807E} - System32\Tasks\CLVDLauncher => c:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-07-24] (CyberLink Corp.) Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-25] (Microsoft Corporation) Task: {6AEF44E6-3170-4D96-B9CB-928C5F05A743} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-cenniz@gmx.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-13] (Adobe Systems Incorporated) Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-10-11] (Microsoft Corporation) Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode) Task: {914D623A-8AE0-4699-8DF4-3F5EAD5A7B4C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-11] (Google Inc.) Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses Task: {93DAF30D-23BC-4937-8974-D4DBA54E6D5C} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-25] (Microsoft Corporation) Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask Task: {AB4C265C-5787-4EFB-B8C0-F5F63237B2A1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-09-05] (Hewlett-Packard Company) Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan Task: {B906B2A1-12DA-43FD-99E5-6269D53EF47E} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-25] (Microsoft Corporation) Task: {CA040AAB-607E-470C-8632-7E72D801BBA5} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-428423403-2423760254-1452003644-1001 Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork Task: {CF37ED77-E35E-451D-BBC9-5F3CD48FC5FE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\MpCmdRun.exe [2013-07-01] (Microsoft Corporation) Task: {D1E9A519-60E0-45FA-8B58-AB9A2A04B9B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company) Task: {D5E578DB-FA19-4776-B3D7-CF9D85C8E27F} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery Task: {DFDD7934-D480-4DA9-8C9E-8A29113CF5C5} - System32\Tasks\HPGenoobeReminder => C:\Program Files (x86)\Hewlett-Packard\HP Registration Service\HP GenOOBE\HPGenOOBE.exe [2012-09-17] () Task: {E2A650CC-A01F-4E6C-B80A-4E49356A07C0} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-10-11] (Microsoft Corporation) Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-25] (Microsoft Corporation) Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\SlimDrivers Startup.job => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe ==================== Faulty Device Manager Devices ============= Could not list Devices. ==================== Event log errors: ========================= Application errors: ================== Error: (08/16/2013 02:24:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: PHILIP) Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (08/16/2013 02:10:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: PHILIP) Description: Activation of app microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (08/16/2013 02:10:43 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: PHILIP) Description: Activation of app microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (08/16/2013 02:10:37 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: PHILIP) Description: Activation of app microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (08/16/2013 02:10:32 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: PHILIP) Description: Activation of app microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (08/16/2013 02:10:29 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: PHILIP) Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (08/16/2013 02:10:29 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: PHILIP) Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (08/16/2013 02:10:29 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: PHILIP) Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (08/16/2013 02:10:27 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: PHILIP) Description: Activation of app microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (08/16/2013 02:10:21 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: PHILIP) Description: Activation of app microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. System errors: ============= Error: (08/16/2013 02:24:30 PM) (Source: DCOM) (User: PHILIP) Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (08/16/2013 02:10:51 PM) (Source: DCOM) (User: PHILIP) Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1 Error: (08/16/2013 02:10:37 PM) (Source: DCOM) (User: PHILIP) Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1 Error: (08/16/2013 02:10:32 PM) (Source: DCOM) (User: PHILIP) Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1 Error: (08/16/2013 02:10:29 PM) (Source: DCOM) (User: PHILIP) Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (08/16/2013 02:10:29 PM) (Source: DCOM) (User: PHILIP) Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (08/16/2013 02:10:29 PM) (Source: DCOM) (User: PHILIP) Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (08/16/2013 02:10:27 PM) (Source: DCOM) (User: PHILIP) Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1 Error: (08/16/2013 02:10:21 PM) (Source: DCOM) (User: PHILIP) Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1 Error: (08/16/2013 02:10:16 PM) (Source: DCOM) (User: PHILIP) Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1 Microsoft Office Sessions: ========================= Error: (08/16/2013 02:24:30 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: PHILIP) Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927141 Error: (08/16/2013 02:10:56 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: PHILIP) Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos-2144927141 Error: (08/16/2013 02:10:43 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: PHILIP) Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos-2144927141 Error: (08/16/2013 02:10:37 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: PHILIP) Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos-2144927141 Error: (08/16/2013 02:10:32 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: PHILIP) Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos-2144927141 Error: (08/16/2013 02:10:29 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: PHILIP) Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927141 Error: (08/16/2013 02:10:29 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: PHILIP) Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927141 Error: (08/16/2013 02:10:29 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: PHILIP) Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927141 Error: (08/16/2013 02:10:27 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: PHILIP) Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos-2144927141 Error: (08/16/2013 02:10:21 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: PHILIP) Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos-2144927141 ==================== Memory info =========================== Percentage of memory in use: 25% Total physical RAM: 7575.28 MB Available physical RAM: 5678.61 MB Total Pagefile: 7975.28 MB Available Pagefile: 5833.85 MB Total Virtual: 8192 MB Available Virtual: 8191.78 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:911.61 GB) (Free:768.64 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (Recovery Image) (Fixed) (Total:18.43 GB) (Free:2.29 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive e: (PARANORMAL_INVESTIGATIONS) (CDROM) (Total:5.14 GB) (Free:0 GB) UDF Drive j: (o2) (CDROM) (Total:0.03 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 932 GB) (Disk ID: 42866177) Partition: GPT Partition Type ==================== End Of Log ============================ Geändert von cenNiz (16.08.2013 um 20:01 Uhr) |
17.08.2013, 22:37 | #4 |
/// the machine /// TB-Ausbilder | Internetverbindung nach einer Zeit immer langsamer High Ping Erkennt ihr was? Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
18.08.2013, 12:07 | #5 |
| Internetverbindung nach einer Zeit immer langsamer High Ping Erkennt ihr was? Malwarebyte Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Database version: v2013.08.15.03 Windows 8 x64 NTFS Internet Explorer 10.0.9200.16660 Philip :: PHILIP [administrator] 8/18/2013 6:04:07 AM mbam-log-2013-08-18 (06-04-07).txt Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|K:\|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 485299 Time elapsed: 57 minute(s), 4 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) Code:
ATTFilter # AdwCleaner v2.306 - Logfile created 08/18/2013 at 05:57:31 # Updated 19/07/2013 by Xplode # Operating system : Windows 8 (64 bits) # User : Philip - PHILIP # Boot Mode : Normal # Running from : C:\Users\Philip\Downloads\adwcleaner.exe # Option [Delete] ***** [Services] ***** Stopped & Deleted : APNMCP ***** [Files / Folders] ***** File Deleted : C:\END Folder Deleted : C:\Program Files (x86)\AskPartnerNetwork Folder Deleted : C:\ProgramData\APN Folder Deleted : C:\ProgramData\AskPartnerNetwork Folder Deleted : C:\Users\Philip\AppData\Local\PackageAware Folder Deleted : C:\Users\Philip\AppData\Local\Temp\APN ***** [Registry] ***** Key Deleted : HKCU\Software\AskPartnerNetwork Key Deleted : HKLM\Software\AskPartnerNetwork ***** [Internet Browsers] ***** -\\ Internet Explorer v10.0.9200.16660 [OK] Registry is clean. -\\ Google Chrome v28.0.1500.95 File : C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] File is clean. ************************* AdwCleaner[S1].txt - [1043 octets] - [18/08/2013 05:57:31] ########## EOF - C:\AdwCleaner[S1].txt - [1103 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.4.9 (08.17.2013:3) OS: Windows 8 x64 Ran by Philip on Sun 08/18/2013 at 6:00:44.17 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E71AE8F3-47D2-4B78-86C9-1BBD888F3231} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{E71AE8F3-47D2-4B78-86C9-1BBD888F3231} ~~~ Files ~~~ Folders ~~~ Chrome Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Sun 08/18/2013 at 6:02:22.27 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ und die Frische FRST FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-08-2013 Ran by Philip (administrator) on 18-08-2013 06:04:38 Running from C:\Users\Philip\Downloads Windows 8 (X64) OS Language: English(US) Internet Explorer Version 10 Boot Mode: Normal ==================== Could not list processes =============== ==================== Registry (Whitelisted) ================== HKLM\...\Run: [BeatsOSDApp] - C:\Program Files\IDT\WDM\beats64.exe [37888 2012-08-10] (Hewlett-Packard ) HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-08-10] (IDT, Inc.) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-13] (Adobe Systems Incorporated) HKLM\...\Run: [cFosSpeed] - C:\Program Files\cFosSpeed\cFosSpeed.exe [1587040 2013-04-19] (cFos Software GmbH) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-08-17] (Avira Operations GmbH & Co. KG) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.msn.com/HPDSK13/1 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/ StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKLM - {E71AE8F3-47D2-4B78-86C9-1BBD888F3231} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{03424AFA-76CC-45C5-90CC-BE2453F9DD14}: [NameServer]193.189.244.225 193.189.244.206 Tcpip\..\Interfaces\{CC6240F2-BF21-4FF2-BAF2-5EEEA06518E6}: [NameServer]208.67.220.220,4.2.2.6 FireFox: ======== FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems) Chrome: ======= CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll () CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (WildTangent Games App V2 Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Extension: (Google Docs) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.4_0 CHR Extension: (Gmail) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-08-17] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-17] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [811064 2013-08-17] (Avira Operations GmbH & Co. KG) R2 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [480096 2013-04-19] (cFos Software GmbH) S4 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35744 2012-10-12] (Hewlett-Packard) R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [200624 2010-09-29] (Telefónica I+D) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-01] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-08-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-08-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-08-17] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [83672 2013-08-17] (Avira Operations GmbH & Co. KG) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) R3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.) S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-08-17] () R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-18 06:02 - 2013-08-18 06:02 - 00001058 _____ C:\Users\Philip\Documents\JRT.txt 2013-08-18 06:02 - 2013-08-18 06:02 - 00001058 _____ C:\Users\Philip\Desktop\JRT.txt 2013-08-18 05:57 - 2013-08-18 05:58 - 00001172 _____ C:\AdwCleaner[S1].txt 2013-08-18 05:56 - 2013-08-18 05:56 - 01018166 _____ (Thisisu) C:\Users\Philip\Downloads\JRT.exe 2013-08-18 05:56 - 2013-08-18 05:56 - 00666633 _____ C:\Users\Philip\Downloads\adwcleaner.exe 2013-08-18 05:56 - 2013-08-18 05:56 - 00000000 ____D C:\windows\ERUNT 2013-08-17 18:28 - 2013-08-17 18:28 - 00020975 _____ C:\ComboFix.txt 2013-08-17 18:25 - 2013-08-17 18:25 - 00002226 _____ C:\windows\PFRO.log 2013-08-17 18:19 - 2013-08-17 18:28 - 00000000 ____D C:\Qoobox 2013-08-17 18:19 - 2013-08-17 18:27 - 00000000 ____D C:\windows\erdnt 2013-08-17 18:19 - 2011-06-26 02:45 - 00256000 _____ C:\windows\PEV.exe 2013-08-17 18:19 - 2010-11-07 13:20 - 00208896 _____ C:\windows\MBR.exe 2013-08-17 18:19 - 2009-04-20 00:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe 2013-08-17 18:19 - 2000-08-30 20:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe 2013-08-17 18:19 - 2000-08-30 20:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe 2013-08-17 18:19 - 2000-08-30 20:00 - 00212480 _____ (SteelWerX) C:\windows\SWXCACLS.exe 2013-08-17 18:19 - 2000-08-30 20:00 - 00098816 _____ C:\windows\sed.exe 2013-08-17 18:19 - 2000-08-30 20:00 - 00080412 _____ C:\windows\grep.exe 2013-08-17 18:19 - 2000-08-30 20:00 - 00068096 _____ C:\windows\zip.exe 2013-08-17 18:17 - 2013-08-17 18:18 - 05105390 ____R (Swearware) C:\Users\Philip\Downloads\ComboFix.exe 2013-08-17 17:44 - 2013-08-17 17:44 - 00000000 _____ C:\windows\setuperr.log 2013-08-17 17:44 - 2013-08-17 17:44 - 00000000 _____ C:\windows\setupact.log 2013-08-17 17:43 - 2013-08-18 05:59 - 00226048 _____ C:\windows\WindowsUpdate.log 2013-08-17 17:43 - 2013-08-17 17:44 - 00291288 _____ C:\windows\system32\FNTCACHE.DAT 2013-08-17 17:43 - 2013-08-17 17:43 - 00000000 ____D C:\windows\pss 2013-08-17 17:27 - 2013-08-17 17:27 - 00000000 ____D C:\ProgramData\RegInOut 2013-08-17 15:54 - 2013-08-17 15:55 - 00007598 _____ C:\Users\Philip\AppData\Local\Resmon.ResmonCfg 2013-08-17 15:32 - 2013-08-18 05:58 - 00003295 _____ C:\windows\SysWOW64\bufferpool.txt 2013-08-17 14:29 - 2013-08-17 14:29 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Avira 2013-08-17 14:28 - 2013-08-17 14:28 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Mozilla 2013-08-17 14:27 - 2013-08-17 14:27 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys 2013-08-17 14:27 - 2013-08-17 14:27 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys 2013-08-17 14:27 - 2013-08-17 14:27 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys 2013-08-17 14:27 - 2013-08-17 14:27 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys 2013-08-17 14:27 - 2013-08-17 14:27 - 00002068 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-08-17 14:27 - 2013-08-17 14:27 - 00000000 ____D C:\ProgramData\Avira 2013-08-17 14:27 - 2013-08-17 14:27 - 00000000 ____D C:\Program Files (x86)\Avira 2013-08-17 14:23 - 2013-08-17 14:23 - 00001069 _____ C:\Users\Philip\Desktop\SIW Home Edition.lnk 2013-08-17 14:23 - 2013-08-17 14:23 - 00000000 ____D C:\Users\Philip\AppData\Local\CrashRpt 2013-08-17 14:23 - 2013-08-17 14:23 - 00000000 ____D C:\Program Files (x86)\SIW 2013 Home Edition 2013-08-17 14:17 - 2013-08-17 14:17 - 00000976 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TCPOptimizer.lnk 2013-08-17 13:41 - 2013-06-16 18:41 - 00997632 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys 2013-08-17 13:41 - 2013-06-01 07:54 - 00194816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys 2013-08-17 13:41 - 2013-06-01 07:54 - 00125184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys 2013-08-17 13:41 - 2013-06-01 07:34 - 02391280 _____ (Microsoft Corporation) C:\windows\explorer.exe 2013-08-17 13:41 - 2013-06-01 07:29 - 00337152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBXHCI.SYS 2013-08-17 13:41 - 2013-06-01 07:29 - 00213248 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UCX01000.SYS 2013-08-17 13:41 - 2013-06-01 07:26 - 06987008 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2013-08-17 13:41 - 2013-06-01 07:26 - 00327936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys 2013-08-17 13:41 - 2013-06-01 06:24 - 02106176 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe 2013-08-17 13:41 - 2013-06-01 05:25 - 00364544 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll 2013-08-17 13:41 - 2013-06-01 05:25 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\samlib.dll 2013-08-17 13:41 - 2013-06-01 05:24 - 01453568 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll 2013-08-17 13:41 - 2013-06-01 05:24 - 00850944 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfasfsrcsnk.dll 2013-08-17 13:41 - 2013-06-01 05:24 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscms.dll 2013-08-17 13:41 - 2013-06-01 05:23 - 01842176 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll 2013-08-17 13:41 - 2013-06-01 05:23 - 00680960 _____ (Microsoft Corporation) C:\windows\system32\vds.exe 2013-08-17 13:41 - 2013-06-01 05:22 - 00523264 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll 2013-08-17 13:41 - 2013-06-01 05:22 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll 2013-08-17 13:41 - 2013-06-01 05:22 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\vdsutil.dll 2013-08-17 13:41 - 2013-06-01 05:22 - 00080896 _____ (Microsoft Corporation) C:\windows\system32\MbaeParserTask.exe 2013-08-17 13:41 - 2013-06-01 05:21 - 00729600 _____ (Microsoft Corporation) C:\windows\system32\samsrv.dll 2013-08-17 13:41 - 2013-06-01 05:21 - 00106496 _____ (Microsoft Corporation) C:\windows\system32\samlib.dll 2013-08-17 13:41 - 2013-06-01 05:20 - 02219520 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll 2013-08-17 13:41 - 2013-06-01 05:20 - 01527808 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll 2013-08-17 13:41 - 2013-06-01 05:20 - 01048576 _____ (Microsoft Corporation) C:\windows\system32\mfasfsrcsnk.dll 2013-08-17 13:41 - 2013-06-01 05:20 - 00583168 _____ (Microsoft Corporation) C:\windows\system32\mscms.dll 2013-08-17 13:41 - 2013-06-01 05:19 - 00785408 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll 2013-08-17 13:41 - 2013-06-01 05:19 - 00207872 _____ (Microsoft Corporation) C:\windows\system32\DeviceSetupManager.dll 2013-08-17 13:41 - 2013-05-31 23:08 - 00037632 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BthAvrcpTg.sys 2013-08-17 13:41 - 2013-05-24 18:09 - 01403296 _____ (Microsoft Corporation) C:\windows\system32\winload.efi 2013-08-17 13:41 - 2013-05-24 18:09 - 01271584 _____ (Microsoft Corporation) C:\windows\system32\winload.exe 2013-08-17 13:41 - 2013-05-24 18:09 - 01217352 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi 2013-08-17 13:41 - 2013-05-24 18:09 - 01093904 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe 2013-08-17 13:41 - 2013-05-19 20:08 - 00386642 _____ C:\windows\system32\ApnDatabase.xml 2013-08-17 13:41 - 2013-04-09 01:33 - 00489576 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll 2013-08-17 13:41 - 2013-04-09 01:33 - 00446792 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll 2013-08-17 13:41 - 2013-04-09 01:33 - 00253544 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe 2013-08-17 13:41 - 2013-04-09 00:48 - 00169472 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll 2013-08-17 13:41 - 2013-04-08 22:34 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys 2013-08-17 13:41 - 2013-04-08 22:34 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidusb.sys 2013-08-17 13:41 - 2013-04-08 19:37 - 00426024 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll 2013-08-17 13:41 - 2013-04-08 19:37 - 00324368 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll 2013-08-17 13:41 - 2012-10-24 00:54 - 00396008 _____ (Microsoft Corporation) C:\windows\system32\hal.dll 2013-08-17 13:41 - 2012-10-17 00:32 - 01172992 _____ (Microsoft Corporation) C:\windows\system32\mfnetsrc.dll 2013-08-17 13:41 - 2012-10-17 00:32 - 00677888 _____ (Microsoft Corporation) C:\windows\system32\mfnetcore.dll 2013-08-17 13:41 - 2012-10-17 00:32 - 00673280 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll 2013-08-17 13:41 - 2012-10-16 23:57 - 00929792 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfnetsrc.dll 2013-08-17 13:41 - 2012-10-16 23:57 - 00568832 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfnetcore.dll 2013-08-17 13:41 - 2012-10-16 23:57 - 00513024 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll 2013-08-17 13:41 - 2012-10-12 02:13 - 00109568 _____ (Microsoft Corporation) C:\windows\system32\dskquota.dll 2013-08-17 13:41 - 2012-10-12 01:39 - 00082944 _____ (Microsoft Corporation) C:\windows\SysWOW64\dskquota.dll 2013-08-17 13:40 - 2012-10-11 03:47 - 00793200 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll 2013-08-17 13:40 - 2012-10-11 03:25 - 00056552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdstor.sys 2013-08-17 13:40 - 2012-10-11 03:23 - 00441576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys 2013-08-17 13:40 - 2012-10-11 03:18 - 00172264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys 2013-08-17 13:40 - 2012-10-11 03:13 - 00058088 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dam.sys 2013-08-17 13:40 - 2012-10-11 03:13 - 00033512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\battc.sys 2013-08-17 13:40 - 2012-10-11 03:08 - 00562392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys 2013-08-17 13:40 - 2012-10-11 03:01 - 00503080 _____ (Microsoft Corporation) C:\windows\system32\ci.dll 2013-08-17 13:40 - 2012-10-11 01:46 - 01395712 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Immersive.dll 2013-08-17 13:40 - 2012-10-11 01:46 - 00816128 _____ (Microsoft Corporation) C:\windows\system32\SearchIndexer.exe 2013-08-17 13:40 - 2012-10-11 01:46 - 00517120 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe 2013-08-17 13:40 - 2012-10-11 01:46 - 00373760 _____ (Microsoft Corporation) C:\windows\system32\SearchProtocolHost.exe 2013-08-17 13:40 - 2012-10-11 01:46 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\SearchFilterHost.exe 2013-08-17 13:40 - 2012-10-11 01:46 - 00154112 _____ (Microsoft Corporation) C:\windows\system32\Windows.Storage.Compression.dll 2013-08-17 13:40 - 2012-10-11 01:46 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\BdeUISrv.exe 2013-08-17 13:40 - 2012-10-11 01:46 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\wfapigp.dll 2013-08-17 13:40 - 2012-10-11 01:45 - 03554304 _____ (Microsoft Corporation) C:\windows\system32\tquery.dll 2013-08-17 13:40 - 2012-10-11 01:45 - 01045504 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll 2013-08-17 13:40 - 2012-10-11 01:45 - 00590848 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll 2013-08-17 13:40 - 2012-10-11 01:45 - 00579584 _____ (Microsoft Corporation) C:\windows\system32\StructuredQuery.dll 2013-08-17 13:40 - 2012-10-11 01:45 - 00505344 _____ (Microsoft Corporation) C:\windows\system32\SpaceControl.dll 2013-08-17 13:40 - 2012-10-11 01:45 - 00370176 _____ (Microsoft Corporation) C:\windows\system32\SysFxUI.dll 2013-08-17 13:40 - 2012-10-11 01:45 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\PCPKsp.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 02116096 _____ (Microsoft Corporation) C:\windows\system32\mssrch.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 01265152 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00904192 _____ (Microsoft Corporation) C:\windows\system32\MPSSVC.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00816640 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00745984 _____ (Microsoft Corporation) C:\windows\system32\mssvp.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00435712 _____ (Microsoft Corporation) C:\windows\system32\mssph.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00355328 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00264704 _____ (Microsoft Corporation) C:\windows\system32\ListSvc.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\input.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\mssphtb.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\icfupgd.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\mssitlb.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00096256 _____ (Microsoft Corporation) C:\windows\system32\mssprxy.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\msscntrs.dll 2013-08-17 13:40 - 2012-10-11 01:44 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\msshooks.dll 2013-08-17 13:40 - 2012-10-11 01:43 - 01280000 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll 2013-08-17 13:40 - 2012-10-11 01:43 - 00757760 _____ (Microsoft Corporation) C:\windows\system32\FirewallAPI.dll 2013-08-17 13:40 - 2012-10-11 01:43 - 00331776 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore.dll 2013-08-17 13:40 - 2012-10-11 01:43 - 00244224 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore6.dll 2013-08-17 13:40 - 2012-10-11 01:43 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\bdesvc.dll 2013-08-17 13:40 - 2012-10-11 01:43 - 00118784 _____ (Microsoft Corporation) C:\windows\system32\AppxSip.dll 2013-08-17 13:40 - 2012-10-11 01:43 - 00081920 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc.dll 2013-08-17 13:40 - 2012-10-11 01:43 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc6.dll 2013-08-17 13:40 - 2012-10-11 01:42 - 00612416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll 2013-08-17 13:40 - 2012-10-11 01:23 - 00034816 _____ (Microsoft Corporation) C:\windows\system32\microsoft-windows-pdc.dll 2013-08-17 13:40 - 2012-10-11 01:23 - 00007680 _____ (Microsoft Corporation) C:\windows\system32\kbdhebl3.dll 2013-08-17 13:40 - 2012-10-11 01:19 - 00005632 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmkaud.sys 2013-08-17 13:40 - 2012-10-11 01:18 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys 2013-08-17 13:40 - 2012-10-11 01:16 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys 2013-08-17 13:40 - 2012-10-11 01:15 - 00074752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys 2013-08-17 13:40 - 2012-10-11 01:08 - 00671232 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchIndexer.exe 2013-08-17 13:40 - 2012-10-11 01:08 - 00303104 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchProtocolHost.exe 2013-08-17 13:40 - 2012-10-11 01:08 - 00170496 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFilterHost.exe 2013-08-17 13:40 - 2012-10-11 01:07 - 02764288 _____ (Microsoft Corporation) C:\windows\SysWOW64\tquery.dll 2013-08-17 13:40 - 2012-10-11 01:07 - 01226752 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Immersive.dll 2013-08-17 13:40 - 2012-10-11 01:07 - 00962560 _____ (Microsoft Corporation) C:\windows\SysWOW64\usercpl.dll 2013-08-17 13:40 - 2012-10-11 01:07 - 00460800 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll 2013-08-17 13:40 - 2012-10-11 01:07 - 00414720 _____ (Microsoft Corporation) C:\windows\SysWOW64\StructuredQuery.dll 2013-08-17 13:40 - 2012-10-11 01:07 - 00116224 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Storage.Compression.dll 2013-08-17 13:40 - 2012-10-11 01:07 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\PCPKsp.dll 2013-08-17 13:40 - 2012-10-11 01:07 - 00019968 _____ (Microsoft Corporation) C:\windows\SysWOW64\wfapigp.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 01610240 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssrch.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00658432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssvp.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00653824 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\FirewallAPI.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00408064 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssph.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00289280 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00270336 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00219648 _____ (Microsoft Corporation) C:\windows\SysWOW64\input.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00204800 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore6.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00186880 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssphtb.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00094208 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssitlb.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00051712 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc6.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msscntrs.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssprxy.dll 2013-08-17 13:40 - 2012-10-11 01:06 - 00010752 _____ (Microsoft Corporation) C:\windows\SysWOW64\msshooks.dll 2013-08-17 13:40 - 2012-10-11 01:05 - 00099840 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxSip.dll 2013-08-17 13:40 - 2012-10-11 00:42 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\kbdhebl3.dll 2013-08-17 13:40 - 2012-10-10 20:45 - 00478424 _____ C:\windows\SysWOW64\locale.nls 2013-08-17 13:40 - 2012-10-10 20:44 - 00478424 _____ C:\windows\system32\locale.nls 2013-08-17 13:39 - 2012-12-04 00:21 - 00368640 _____ (Microsoft Corporation) C:\windows\system32\sppwinob.dll 2013-08-17 13:39 - 2012-11-27 02:39 - 01122768 _____ (Microsoft Corporation) C:\windows\system32\Taskmgr.exe 2013-08-17 13:39 - 2012-11-27 00:49 - 01027152 _____ (Microsoft Corporation) C:\windows\SysWOW64\Taskmgr.exe 2013-08-17 13:39 - 2012-11-27 00:20 - 01217536 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll 2013-08-17 13:39 - 2012-11-27 00:20 - 01123840 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe 2013-08-17 13:39 - 2012-11-27 00:20 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe 2013-08-17 13:39 - 2012-11-27 00:20 - 00798208 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebcamUi.dll 2013-08-17 13:39 - 2012-11-27 00:20 - 00702464 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll 2013-08-17 13:39 - 2012-11-27 00:20 - 00560128 _____ (Microsoft Corporation) C:\windows\SysWOW64\UserLanguagesCpl.dll 2013-08-17 13:39 - 2012-11-27 00:20 - 00179200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wpnapps.dll 2013-08-17 13:39 - 2012-11-27 00:20 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\vds_ps.dll 2013-08-17 13:39 - 2012-11-27 00:19 - 03245568 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll 2013-08-17 13:39 - 2012-11-27 00:19 - 01536512 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll 2013-08-17 13:39 - 2012-11-27 00:19 - 00955904 _____ (Microsoft Corporation) C:\windows\system32\WebcamUi.dll 2013-08-17 13:39 - 2012-11-27 00:19 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\UserLanguagesCpl.dll 2013-08-17 13:39 - 2012-11-27 00:19 - 00245248 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL 2013-08-17 13:39 - 2012-11-27 00:19 - 00244736 _____ (Microsoft Corporation) C:\windows\system32\wpnapps.dll 2013-08-17 13:39 - 2012-11-27 00:18 - 01071104 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL 2013-08-17 13:39 - 2012-11-27 00:18 - 00888832 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll 2013-08-17 13:39 - 2012-11-27 00:18 - 00378880 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL 2013-08-17 13:39 - 2012-11-27 00:17 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL 2013-08-17 13:39 - 2012-11-20 01:24 - 01164800 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll 2013-08-17 13:39 - 2012-11-20 01:17 - 01184256 _____ (Microsoft Corporation) C:\windows\system32\Display.dll 2013-08-17 13:39 - 2012-11-20 01:02 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDKURD.DLL 2013-08-17 13:39 - 2012-11-20 00:59 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDKURD.DLL 2013-08-17 13:39 - 2012-11-08 00:25 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll 2013-08-17 13:39 - 2012-11-08 00:25 - 00143872 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll 2013-08-17 13:39 - 2012-11-08 00:25 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2013-08-17 13:39 - 2012-11-08 00:22 - 00641536 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll 2013-08-17 13:39 - 2012-11-08 00:22 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll 2013-08-17 13:39 - 2012-11-08 00:22 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2013-08-17 13:39 - 2012-11-06 03:33 - 01566432 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll 2013-08-17 13:39 - 2012-11-06 00:48 - 01150160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ole32.dll 2013-08-17 13:39 - 2012-11-06 00:20 - 00883712 _____ (Microsoft Corporation) C:\windows\HelpPane.exe 2013-08-17 13:39 - 2012-11-06 00:20 - 00516608 _____ (Microsoft Corporation) C:\windows\SysWOW64\winhttp.dll 2013-08-17 13:39 - 2012-11-06 00:19 - 08552448 _____ (Microsoft Corporation) C:\windows\SysWOW64\glcndFilter.dll 2013-08-17 13:39 - 2012-11-06 00:19 - 01386496 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll 2013-08-17 13:39 - 2012-11-06 00:19 - 00710656 _____ (Microsoft Corporation) C:\windows\system32\winhttp.dll 2013-08-17 13:39 - 2012-11-06 00:18 - 11459584 _____ (Microsoft Corporation) C:\windows\system32\glcndFilter.dll 2013-08-17 13:39 - 2012-11-06 00:18 - 01037312 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll 2013-08-17 13:39 - 2012-11-06 00:18 - 00976384 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll 2013-08-17 13:39 - 2012-11-05 23:54 - 00859136 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys 2013-08-17 13:39 - 2012-11-05 23:51 - 00665600 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll 2013-08-17 13:39 - 2012-10-12 04:08 - 00027880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys 2013-08-17 13:39 - 2012-10-12 02:14 - 00036352 _____ (Microsoft Corporation) C:\windows\system32\rfxvmt.dll 2013-08-17 13:39 - 2012-10-12 01:50 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll 2013-08-17 13:38 - 2013-08-17 13:38 - 00000037 ___SH C:\Users\Philip\AppData\Local\70149b02515b3bb20dd492.47983420 2013-08-17 13:38 - 2013-08-17 13:38 - 00000000 ____D C:\Users\Philip\AppData\Local\MetaGeek,_LLC 2013-08-17 13:38 - 2013-08-17 13:38 - 00000000 ____D C:\Users\Philip\AppData\Local\IsolatedStorage 2013-08-17 13:38 - 2012-11-06 03:52 - 00277736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys 2013-08-17 13:38 - 2012-11-06 03:33 - 00522640 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll 2013-08-17 13:38 - 2012-11-06 01:00 - 00463768 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll 2013-08-17 13:38 - 2012-11-06 00:20 - 00386560 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll 2013-08-17 13:38 - 2012-11-06 00:20 - 00375296 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlansec.dll 2013-08-17 13:38 - 2012-11-06 00:20 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\rdpclip.exe 2013-08-17 13:38 - 2012-11-06 00:20 - 00202240 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll 2013-08-17 13:38 - 2012-11-06 00:20 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\WcnApi.dll 2013-08-17 13:38 - 2012-11-06 00:20 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\wfdprov.dll 2013-08-17 13:38 - 2012-11-06 00:19 - 00470016 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll 2013-08-17 13:38 - 2012-11-06 00:19 - 00466944 _____ (Microsoft Corporation) C:\windows\system32\wcncsvc.dll 2013-08-17 13:38 - 2012-11-06 00:19 - 00446464 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll 2013-08-17 13:38 - 2012-11-06 00:19 - 00273408 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll 2013-08-17 13:38 - 2012-11-06 00:19 - 00214528 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll 2013-08-17 13:38 - 2012-11-06 00:19 - 00126976 _____ (Microsoft Corporation) C:\windows\system32\WcnApi.dll 2013-08-17 13:38 - 2012-11-06 00:19 - 00126464 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFCaptureEngine.dll 2013-08-17 13:38 - 2012-11-06 00:19 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\wfdprov.dll 2013-08-17 13:38 - 2012-11-06 00:19 - 00027136 _____ (Microsoft Corporation) C:\windows\system32\WcnEapPeerProxy.dll 2013-08-17 13:38 - 2012-11-06 00:19 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\WcnEapAuthProxy.dll 2013-08-17 13:38 - 2012-11-06 00:18 - 00281088 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll 2013-08-17 13:38 - 2012-11-06 00:18 - 00267264 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll 2013-08-17 13:38 - 2012-11-06 00:18 - 00189440 _____ (Microsoft Corporation) C:\windows\SysWOW64\bthprops.cpl 2013-08-17 13:38 - 2012-11-06 00:18 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\MFCaptureEngine.dll 2013-08-17 13:38 - 2012-11-06 00:18 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\fdWCN.dll 2013-08-17 13:38 - 2012-11-06 00:18 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\fdWCN.dll 2013-08-17 13:38 - 2012-11-06 00:17 - 00212992 _____ (Microsoft Corporation) C:\windows\system32\bthprops.cpl 2013-08-17 13:38 - 2012-11-06 00:17 - 00110080 _____ (Microsoft Corporation) C:\windows\system32\dafWCN.dll 2013-08-17 13:38 - 2012-11-06 00:00 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\iscsilog.dll 2013-08-17 13:38 - 2012-11-05 23:58 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll 2013-08-17 13:38 - 2012-11-05 23:56 - 00009728 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll 2013-08-17 13:38 - 2012-11-05 23:55 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdk8.sys 2013-08-17 13:38 - 2012-11-05 23:55 - 00089088 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelppm.sys 2013-08-17 13:38 - 2012-11-05 23:55 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdppm.sys 2013-08-17 13:38 - 2012-11-05 23:55 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\processr.sys 2013-08-17 13:38 - 2012-11-05 23:55 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fxppm.sys 2013-08-17 13:38 - 2012-11-05 23:53 - 00560640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys 2013-08-17 12:19 - 2013-08-17 12:19 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE 2013-08-17 11:43 - 2013-08-17 11:43 - 00000000 ____D C:\Program Files\cFosSpeed 2013-08-17 11:43 - 2013-04-19 16:46 - 01736544 _____ (cFos Software GmbH) C:\windows\system32\Drivers\cfosspeed6.sys 2013-08-17 11:42 - 2013-08-17 11:42 - 00000000 ____D C:\Users\Philip\AppData\Local\cFos 2013-08-17 11:42 - 2013-08-17 11:42 - 00000000 ____D C:\ProgramData\cFos 2013-08-17 07:44 - 2013-08-17 07:44 - 00003728 ____N C:\bootsqm.dat 2013-08-16 16:58 - 2013-08-18 05:59 - 00065536 _____ C:\windows\system32\Ikeext.etl 2013-08-16 14:24 - 2013-08-16 14:24 - 00000000 ____D C:\FRST 2013-08-16 11:40 - 2013-08-16 11:40 - 00000000 _____ C:\Users\Philip\defogger_reenable 2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\windows\SysWOW64\Atheros_L1e 2013-08-16 09:34 - 2013-08-16 09:34 - 00000000 ____D C:\Dell 2013-08-16 09:34 - 2011-12-23 17:57 - 00096368 _____ (Atheros Communications, Inc.) C:\windows\system32\Drivers\l1c51x64.sys 2013-08-16 09:32 - 2013-08-16 09:32 - 00000000 ____D C:\Users\Philip\AppData\Roaming\driveridentifier 2013-08-16 09:21 - 2013-08-16 09:21 - 00000000 ____D C:\Users\Philip\AppData\Roaming\TuneUp Software 2013-08-16 09:21 - 2013-08-16 09:21 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2013 2013-08-16 09:21 - 2013-01-28 14:19 - 00035104 _____ (TuneUp Software) C:\windows\system32\TURegOpt.exe 2013-08-16 09:21 - 2013-01-28 14:19 - 00026400 _____ (TuneUp Software) C:\windows\system32\authuitu.dll 2013-08-16 09:20 - 2013-08-16 10:00 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} 2013-08-16 09:20 - 2013-08-16 09:21 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-08-16 09:18 - 2013-08-16 09:18 - 00021712 _____ (Phoenix Technologies) C:\windows\SysWOW64\Drivers\DrvAgent64.SYS 2013-08-16 09:18 - 2013-08-16 09:18 - 00000000 ____D C:\Users\Philip\AppData\Local\eSupport.com 2013-08-16 09:15 - 2013-08-16 09:15 - 00000000 ____D C:\Program Files\CPUID 2013-08-15 18:56 - 2013-08-15 18:56 - 00000000 ____D C:\Users\Philip\Ekahau Site Survey 2013-08-15 18:54 - 2013-08-17 17:51 - 00000000 ____D C:\Program Files\Ekahau 2013-08-15 13:33 - 2013-08-15 13:34 - 00000000 ____D C:\windows\system32\MRT 2013-08-15 11:13 - 2013-07-26 01:13 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2013-08-15 11:13 - 2013-07-26 01:13 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2013-08-15 11:13 - 2013-07-26 01:13 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll 2013-08-15 11:13 - 2013-07-26 01:13 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll 2013-08-15 11:13 - 2013-07-26 01:13 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2013-08-15 11:13 - 2013-07-26 01:12 - 19239424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 15405056 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2013-08-15 11:13 - 2013-07-26 01:12 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2013-08-15 11:13 - 2013-07-25 23:35 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2013-08-15 11:13 - 2013-07-25 23:13 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2013-08-15 11:13 - 2013-07-25 23:13 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2013-08-15 11:13 - 2013-07-25 23:13 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 14329344 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2013-08-15 11:13 - 2013-07-25 23:12 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2013-08-15 11:13 - 2013-07-25 23:11 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2013-08-15 11:13 - 2013-07-25 23:11 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2013-08-15 11:13 - 2013-07-25 22:49 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2013-08-15 11:13 - 2013-07-25 20:54 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll 2013-08-15 11:11 - 2013-08-16 10:00 - 00000000 ____D C:\ProgramData\DriverGenius 2013-08-15 11:11 - 2013-07-01 20:44 - 00036288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys 2013-08-15 11:11 - 2013-07-01 18:08 - 00247216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys 2013-08-15 11:10 - 2013-07-09 02:07 - 02233168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2013-08-15 11:10 - 2013-05-23 19:02 - 01314816 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll 2013-08-15 11:10 - 2013-05-23 18:25 - 00694272 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll 2013-08-15 11:10 - 2012-12-13 00:00 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll 2013-08-15 11:10 - 2012-12-12 23:59 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll 2013-08-15 11:10 - 2012-10-02 03:34 - 00068608 _____ (Microsoft Corporation) C:\windows\system32\wwanprotdim.dll 2013-08-15 11:10 - 2012-09-27 03:17 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\newdev.exe 2013-08-15 11:10 - 2012-09-27 03:17 - 00075264 _____ (Microsoft Corporation) C:\windows\system32\ndadmin.exe 2013-08-15 11:10 - 2012-09-27 03:15 - 00301568 _____ (Microsoft Corporation) C:\windows\system32\newdev.dll 2013-08-15 11:10 - 2012-09-27 02:35 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\newdev.exe 2013-08-15 11:10 - 2012-09-27 02:35 - 00073728 _____ (Microsoft Corporation) C:\windows\SysWOW64\ndadmin.exe 2013-08-15 11:10 - 2012-09-27 02:34 - 00275968 _____ (Microsoft Corporation) C:\windows\SysWOW64\newdev.dll 2013-08-15 11:06 - 2013-07-13 02:18 - 00337408 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll 2013-08-15 11:06 - 2013-07-13 02:16 - 01889280 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll 2013-08-15 11:06 - 2013-07-13 02:16 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll 2013-08-15 11:06 - 2013-07-13 02:15 - 00124416 _____ (Microsoft Corporation) C:\windows\system32\apprepapi.dll 2013-08-15 11:06 - 2013-07-13 02:15 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\apprepsync.dll 2013-08-15 11:06 - 2013-07-13 00:24 - 00261120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll 2013-08-15 11:06 - 2013-07-13 00:23 - 01568256 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll 2013-08-15 11:06 - 2013-07-13 00:23 - 00087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\apprepapi.dll 2013-08-15 11:06 - 2013-07-13 00:23 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\apprepsync.dll 2013-08-15 11:03 - 2013-08-17 09:11 - 00016152 _____ C:\windows\system32\Drivers\SWDUMon.sys 2013-08-15 11:03 - 2013-08-17 09:11 - 00000426 _____ C:\windows\Tasks\SlimDrivers Startup.job 2013-08-15 11:02 - 2013-08-15 11:02 - 00000000 ____D C:\Users\Philip\AppData\Local\SlimWare Utilities Inc 2013-08-15 08:47 - 2013-08-15 08:47 - 00002114 _____ C:\Users\Public\Desktop\Mobile Connection Manager.lnk 2013-08-15 08:47 - 2013-08-15 08:47 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Telefónica 2013-08-15 08:46 - 2013-08-15 10:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-15 08:46 - 2013-08-15 08:46 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-15 08:46 - 2013-08-15 08:46 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Malwarebytes 2013-08-15 08:46 - 2013-08-15 08:46 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-08-15 08:46 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2013-08-15 08:40 - 2013-08-15 09:25 - 00181064 _____ (Sysinternals) C:\windows\PSEXESVC.EXE 2013-08-15 08:38 - 2013-08-15 08:38 - 00000000 ____D C:\RegBackup 2013-08-15 08:37 - 2013-08-15 10:54 - 00000000 ____D C:\Program Files (x86)\o2 2013-08-15 08:37 - 2013-08-15 08:38 - 00000000 ____D C:\Program Files (x86)\HUAWEI Modem Driver 2013-08-15 08:37 - 2010-11-04 05:52 - 00093696 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcacm.sys 2013-08-15 08:37 - 2010-10-09 02:49 - 00085504 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jubusenum.sys 2013-08-15 08:37 - 2010-09-26 06:01 - 00055296 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcecm.sys 2013-08-15 08:37 - 2010-09-26 06:01 - 00029184 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juextctrl.sys 2013-08-15 08:37 - 2010-09-03 05:36 - 00196608 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juwwanecm.sys 2013-08-15 08:37 - 2010-08-31 06:09 - 00256000 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbnet.sys 2013-08-15 08:37 - 2010-08-07 05:49 - 00121600 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbmdm.sys 2013-08-15 08:37 - 2010-07-26 21:52 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_hwusbdev.sys 2013-08-15 08:37 - 2010-05-10 02:22 - 00999936 _____ (DiBcom SA) C:\windows\system32\Drivers\mod7700.sys 2013-08-15 08:37 - 2010-03-20 00:06 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_usbenumfilter.sys 2013-08-15 08:37 - 2010-01-18 06:48 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\windows\system32\Drivers\ewdcsc.sys 2013-08-15 08:37 - 2008-03-27 04:51 - 01490656 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01007.dll 2013-08-15 08:37 - 2008-03-27 04:51 - 01490656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfCoInstaller01007.dll 2013-08-15 08:36 - 2013-08-15 08:36 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2013-08-15 08:11 - 2013-08-18 06:04 - 00003596 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-428423403-2423760254-1452003644-1001 2013-08-15 07:13 - 2013-05-02 11:29 - 00278800 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe 2013-08-14 14:28 - 2013-08-14 14:30 - 00000000 ____D C:\Users\Philip\AppData\Roaming\.technic 2013-08-14 09:06 - 2013-08-14 09:06 - 00000000 ____D C:\Users\Philip\AppData\Roaming\LolClient 2013-08-14 09:06 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_1.dll 2013-08-14 09:06 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_2.dll 2013-08-14 09:06 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_39.dll 2013-08-14 09:06 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_39.dll 2013-08-14 09:05 - 2013-08-14 09:05 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk 2013-08-14 09:05 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_39.dll 2013-08-14 09:03 - 2013-08-14 09:03 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Riot Games 2013-08-14 09:03 - 2013-08-14 09:03 - 00000000 ____D C:\Program Files (x86)\Pando Networks 2013-08-13 17:05 - 2013-08-15 10:54 - 00000000 ____D C:\Program Files\CCleaner 2013-08-13 17:05 - 2013-08-13 17:05 - 00000824 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-08-13 16:50 - 2013-08-13 16:50 - 00000000 ____D C:\ProgramData\Adobe 2013-08-13 16:41 - 2013-08-13 16:41 - 00003500 _____ C:\windows\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-cenniz@gmx.de 2013-08-13 16:40 - 2013-08-13 16:40 - 00001070 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2013-08-13 16:39 - 2013-08-13 16:39 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-08-13 16:31 - 2013-08-18 05:37 - 00000000 ____D C:\Users\Philip\AppData\Local\Adobe 2013-08-13 15:14 - 2013-08-13 15:14 - 00000000 ____D C:\Users\Philip\AppData\Roaming\IDT 2013-08-13 14:13 - 2013-08-13 14:19 - 00000000 ____D C:\windows\BrowserChoice 2013-08-13 12:38 - 2013-08-15 13:33 - 78161360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-08-13 11:50 - 2013-08-17 15:55 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Skype 2013-08-13 11:50 - 2013-08-13 11:50 - 00002515 _____ C:\Users\Public\Desktop\Skype.lnk 2013-08-13 11:50 - 2013-08-13 11:50 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-08-13 11:50 - 2013-08-13 11:50 - 00000000 ____D C:\ProgramData\Skype 2013-08-13 11:26 - 2013-05-30 19:24 - 01257472 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll 2013-08-13 11:26 - 2013-05-30 19:08 - 00974848 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll 2013-08-13 11:26 - 2013-03-02 06:57 - 00332520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys 2013-08-13 11:26 - 2013-03-02 06:57 - 00077544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storahci.sys 2013-08-13 11:26 - 2013-03-02 06:45 - 00148712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tpm.sys 2013-08-13 11:26 - 2013-03-02 06:39 - 00495336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vhdmp.sys 2013-08-13 11:26 - 2013-03-02 06:39 - 00327912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys 2013-08-13 11:26 - 2013-03-02 04:23 - 17560576 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 01338880 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 00893952 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 00601088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Globalization.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 00504320 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 00356352 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll 2013-08-13 11:26 - 2013-03-02 04:23 - 00100864 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSyncInfo.dll 2013-08-13 11:26 - 2013-03-02 04:22 - 05091840 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll 2013-08-13 11:26 - 2013-03-02 04:22 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll 2013-08-13 11:26 - 2013-03-02 04:21 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvstore.dll 2013-08-13 11:26 - 2013-03-02 04:21 - 00145408 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl 2013-08-13 11:26 - 2013-03-02 04:21 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\DevDispItemProvider.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 19748864 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 01627648 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 01161728 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 01149952 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 01101824 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00951808 _____ (Microsoft Corporation) C:\windows\system32\Windows.Globalization.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00645120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Authentication.OnlineId.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00245248 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00180224 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00171008 _____ (Microsoft Corporation) C:\windows\system32\TimeBrokerServer.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00103936 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll 2013-08-13 11:26 - 2013-03-01 22:45 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\WSDPrintProxy.DLL 2013-08-13 11:26 - 2013-03-01 22:44 - 05978624 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\drvstore.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00448512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\discan.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00128512 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncInfo.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\NdisImPlatform.dll 2013-08-13 11:26 - 2013-03-01 22:44 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\DevDispItemProvider.dll 2013-08-13 11:26 - 2013-03-01 22:43 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl 2013-08-13 11:26 - 2013-03-01 22:15 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mouhid.sys 2013-08-13 11:26 - 2013-03-01 00:56 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\monitor.sys 2013-08-13 11:26 - 2013-01-09 21:53 - 00028904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpiowin32.sys 2013-08-13 11:26 - 2013-01-09 21:40 - 01448168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys 2013-08-13 11:26 - 2013-01-09 21:40 - 00303848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys 2013-08-13 11:26 - 2013-01-09 21:29 - 00785504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys 2013-08-13 11:26 - 2013-01-09 21:29 - 00091880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\partmgr.sys 2013-08-13 11:26 - 2013-01-09 19:26 - 01752064 _____ (Microsoft Corporation) C:\windows\SysWOW64\setupapi.dll 2013-08-13 11:26 - 2013-01-09 19:26 - 01611776 _____ (Microsoft Corporation) C:\windows\SysWOW64\mmc.exe 2013-08-13 11:26 - 2013-01-09 19:26 - 00890880 _____ (Microsoft Corporation) C:\windows\SysWOW64\msctf.dll 2013-08-13 11:26 - 2013-01-09 19:26 - 00436736 _____ (Microsoft Corporation) C:\windows\SysWOW64\MP4SDECD.DLL 2013-08-13 11:26 - 2013-01-09 19:26 - 00410624 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll 2013-08-13 11:26 - 2013-01-09 19:26 - 00261120 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll 2013-08-13 11:26 - 2013-01-09 19:26 - 00083968 _____ (Microsoft Corporation) C:\windows\SysWOW64\wiaacmgr.exe 2013-08-13 11:26 - 2013-01-09 19:23 - 02094592 _____ (Microsoft Corporation) C:\windows\system32\mmc.exe 2013-08-13 11:26 - 2013-01-09 19:23 - 01964544 _____ (Microsoft Corporation) C:\windows\system32\wlidsvc.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 01886208 _____ (Microsoft Corporation) C:\windows\system32\setupapi.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 00594944 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 00406016 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 00256000 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll 2013-08-13 11:26 - 2013-01-09 19:23 - 00095232 _____ (Microsoft Corporation) C:\windows\system32\wiaacmgr.exe 2013-08-13 11:26 - 2013-01-09 19:22 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll 2013-08-13 11:26 - 2013-01-09 19:22 - 00894464 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll 2013-08-13 11:26 - 2013-01-09 19:22 - 00666112 _____ (Microsoft Corporation) C:\windows\system32\MP4SDECD.DLL 2013-08-13 11:26 - 2013-01-09 19:22 - 00438272 _____ (Microsoft Corporation) C:\windows\system32\lsm.dll 2013-08-13 11:26 - 2013-01-09 19:22 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\inetpp.dll 2013-08-13 11:26 - 2013-01-08 23:59 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\HdAudio.sys 2013-08-13 11:26 - 2012-11-02 01:19 - 00171520 _____ (Microsoft Corporation) C:\windows\system32\ncbservice.dll 2013-08-13 11:26 - 2012-11-02 01:18 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll 2013-08-13 11:26 - 2012-11-02 01:18 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll 2013-08-13 11:26 - 2012-11-02 01:18 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\adhapi.dll 2013-08-13 11:26 - 2012-11-02 01:18 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\httpprxp.dll 2013-08-13 11:26 - 2012-11-02 01:18 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\keepaliveprovider.dll 2013-08-13 11:25 - 2012-08-30 20:53 - 00017888 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr100_clr0400.dll 2013-08-13 11:25 - 2012-08-30 20:52 - 00017888 _____ (Microsoft Corporation) C:\windows\system32\msvcr100_clr0400.dll 2013-08-13 11:23 - 2013-05-04 03:58 - 00120736 _____ (Microsoft Corporation) C:\windows\system32\AuthHost.exe 2013-08-13 11:23 - 2013-05-04 03:34 - 00446720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS 2013-08-13 11:23 - 2013-05-04 03:34 - 00284416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys 2013-08-13 11:23 - 2013-05-04 03:30 - 00058312 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe 2013-08-13 11:23 - 2013-05-04 02:59 - 13644288 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 03241472 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 01619968 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 01483776 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe 2013-08-13 11:23 - 2013-05-04 02:59 - 00812544 _____ (Microsoft Corporation) C:\windows\system32\Magnify.exe 2013-08-13 11:23 - 2013-05-04 02:59 - 00760320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 00251904 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 00141824 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll 2013-08-13 11:23 - 2013-05-04 02:59 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe 2013-08-13 11:23 - 2013-05-04 02:58 - 10116096 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 01332736 _____ (Microsoft Corporation) C:\windows\system32\sysmain.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00470528 _____ (Microsoft Corporation) C:\windows\system32\netprofmsvc.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00330240 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00328192 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00173568 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00169984 _____ (Microsoft Corporation) C:\windows\system32\netplwiz.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00151552 _____ (Microsoft Corporation) C:\windows\system32\netprofm.dll 2013-08-13 11:23 - 2013-05-04 02:58 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\psmsrv.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 02305024 _____ (Microsoft Corporation) C:\windows\system32\authui.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 01131520 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentServer.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00708096 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00560640 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00501760 _____ (Microsoft Corporation) C:\windows\system32\DevicePairing.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00389120 _____ (Microsoft Corporation) C:\windows\system32\BCP47Langs.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00122368 _____ (Microsoft Corporation) C:\windows\system32\biwinrt.dll 2013-08-13 11:23 - 2013-05-04 02:57 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\muifontsetup.dll 2013-08-13 11:23 - 2013-05-04 02:56 - 00419840 _____ (Microsoft Corporation) C:\windows\system32\intl.cpl 2013-08-13 11:23 - 2013-05-04 00:58 - 00758784 _____ (Microsoft Corporation) C:\windows\SysWOW64\Magnify.exe 2013-08-13 11:23 - 2013-05-04 00:58 - 00621056 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll 2013-08-13 11:23 - 2013-05-04 00:58 - 00125952 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll 2013-08-13 11:23 - 2013-05-04 00:58 - 00083968 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll 2013-08-13 11:23 - 2013-05-04 00:58 - 00034304 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe 2013-08-13 11:23 - 2013-05-04 00:57 - 10788864 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 08857088 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00303616 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00247296 _____ (Microsoft Corporation) C:\windows\SysWOW64\ubpm.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00151040 _____ (Microsoft Corporation) C:\windows\SysWOW64\netplwiz.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\netprofm.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00018432 _____ (Microsoft Corporation) C:\windows\SysWOW64\npmproxy.dll 2013-08-13 11:23 - 2013-05-04 00:57 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\muifontsetup.dll 2013-08-13 11:23 - 2013-05-04 00:56 - 02035712 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll 2013-08-13 11:23 - 2013-05-04 00:56 - 00449536 _____ (Microsoft Corporation) C:\windows\SysWOW64\DevicePairing.dll 2013-08-13 11:23 - 2013-05-04 00:56 - 00411136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll 2013-08-13 11:23 - 2013-05-04 00:56 - 00309760 _____ (Microsoft Corporation) C:\windows\SysWOW64\BCP47Langs.dll 2013-08-13 11:23 - 2013-05-04 00:56 - 00092160 _____ (Microsoft Corporation) C:\windows\SysWOW64\biwinrt.dll 2013-08-13 11:23 - 2013-05-04 00:55 - 00389632 _____ (Microsoft Corporation) C:\windows\SysWOW64\intl.cpl 2013-08-13 11:23 - 2013-05-04 00:51 - 00014848 _____ (Microsoft) C:\windows\system32\rars.rs 2013-08-13 11:23 - 2013-05-04 00:47 - 00427520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdbss.sys 2013-08-13 11:23 - 2013-05-04 00:10 - 00014848 _____ (Microsoft) C:\windows\SysWOW64\rars.rs 2013-08-13 11:23 - 2013-03-02 06:39 - 00069864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pdc.sys 2013-08-13 11:23 - 2013-03-01 22:45 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\taskhost.exe 2013-08-13 11:23 - 2013-03-01 22:45 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\taskhostex.exe 2013-08-13 11:23 - 2013-03-01 22:45 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\wups.dll 2013-08-13 11:23 - 2013-03-01 22:43 - 02146304 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll 2013-08-13 11:23 - 2013-02-06 21:33 - 00754176 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll 2013-08-13 11:23 - 2013-02-02 04:39 - 00015872 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlmproxy.dll 2013-08-13 11:23 - 2013-02-02 04:39 - 00012288 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlmsprep.dll 2013-08-13 11:23 - 2012-11-20 00:54 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidi2c.sys 2013-08-13 11:23 - 2012-11-06 00:20 - 00018432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll 2013-08-13 11:23 - 2012-11-06 00:20 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\wuaext.dll 2013-08-13 11:23 - 2012-11-06 00:00 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\wushareduxresources.dll 2013-08-13 11:23 - 2012-11-02 01:20 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll 2013-08-13 11:22 - 2013-05-23 19:01 - 01300992 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll 2013-08-13 11:22 - 2013-05-23 18:27 - 01022464 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll 2013-08-13 11:22 - 2013-05-14 22:25 - 00888320 _____ (Microsoft Corporation) C:\windows\system32\autochk.exe 2013-08-13 11:22 - 2013-05-14 22:25 - 00542208 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll 2013-08-13 11:22 - 2013-05-14 22:24 - 00793088 _____ (Microsoft Corporation) C:\windows\SysWOW64\autochk.exe 2013-08-13 11:22 - 2013-05-14 22:24 - 00482816 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll 2013-08-13 11:16 - 2013-06-01 05:25 - 00496640 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll 2013-08-13 11:16 - 2013-06-01 05:21 - 00595968 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll 2013-08-13 11:16 - 2013-05-30 19:14 - 04036096 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2013-08-13 11:16 - 2013-04-23 19:13 - 01013248 _____ (Microsoft Corporation) C:\windows\SysWOW64\certutil.exe 2013-08-13 11:16 - 2013-04-23 19:12 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll 2013-08-13 11:16 - 2013-04-23 18:56 - 01255936 _____ (Microsoft Corporation) C:\windows\system32\certutil.exe 2013-08-13 11:16 - 2013-04-23 18:55 - 00141312 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll 2013-08-13 11:16 - 2013-04-11 18:30 - 01421312 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll 2013-08-13 11:16 - 2013-04-11 18:22 - 01838080 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll 2013-08-13 11:16 - 2013-03-02 05:59 - 00411880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS 2013-08-13 11:16 - 2013-03-02 04:22 - 00361984 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll 2013-08-13 11:16 - 2013-03-01 22:44 - 00468992 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll 2013-08-13 11:16 - 2013-02-05 18:31 - 00622080 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys 2013-08-13 11:16 - 2013-02-05 18:29 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys 2013-08-13 11:16 - 2013-02-05 18:28 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys 2013-08-13 11:16 - 2013-02-05 18:28 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys 2013-08-13 11:16 - 2013-02-02 07:19 - 00496872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys 2013-08-13 11:16 - 2013-02-02 07:19 - 00061672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\crashdmp.sys 2013-08-13 11:16 - 2013-02-02 06:54 - 01933544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys 2013-08-13 11:16 - 2013-02-02 04:40 - 00410624 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlroamextension.dll 2013-08-13 11:16 - 2013-02-02 04:40 - 00370688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WWanAPI.dll 2013-08-13 11:16 - 2013-02-02 04:40 - 00197632 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.Connectivity.dll 2013-08-13 11:16 - 2013-02-02 04:40 - 00155136 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsRasterService.dll 2013-08-13 11:16 - 2013-02-02 04:40 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\tasklist.exe 2013-08-13 11:16 - 2013-02-02 04:40 - 00079360 _____ (Microsoft Corporation) C:\windows\SysWOW64\taskkill.exe 2013-08-13 11:16 - 2013-02-02 04:39 - 00325632 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll 2013-08-13 11:16 - 2013-02-02 04:39 - 00157696 _____ (Microsoft Corporation) C:\windows\SysWOW64\mbsmsapi.dll 2013-08-13 11:16 - 2013-02-02 04:39 - 00055296 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll 2013-08-13 11:16 - 2013-02-02 04:38 - 00567808 _____ (Microsoft Corporation) C:\windows\SysWOW64\duser.dll 2013-08-13 11:16 - 2013-02-02 04:24 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\taskkill.exe 2013-08-13 11:16 - 2013-02-02 04:24 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\tasklist.exe 2013-08-13 11:16 - 2013-02-02 04:23 - 00611840 _____ (Microsoft Corporation) C:\windows\system32\wpd_ci.dll 2013-08-13 11:16 - 2013-02-02 04:23 - 00543232 _____ (Microsoft Corporation) C:\windows\system32\wlroamextension.dll 2013-08-13 11:16 - 2013-02-02 04:23 - 00475136 _____ (Microsoft Corporation) C:\windows\system32\WWanAPI.dll 2013-08-13 11:16 - 2013-02-02 04:23 - 00293376 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.Connectivity.dll 2013-08-13 11:16 - 2013-02-02 04:23 - 00228352 _____ (Microsoft Corporation) C:\windows\system32\XpsRasterService.dll 2013-08-13 11:16 - 2013-02-02 04:23 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\wersvc.dll 2013-08-13 11:16 - 2013-02-02 04:22 - 00416256 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll 2013-08-13 11:16 - 2013-02-02 04:21 - 00385024 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll 2013-08-13 11:16 - 2013-02-02 04:21 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\mbsmsapi.dll 2013-08-13 11:16 - 2013-02-02 04:20 - 00729600 _____ (Microsoft Corporation) C:\windows\system32\duser.dll 2013-08-13 11:16 - 2013-02-02 04:20 - 00260096 _____ (Microsoft Corporation) C:\windows\system32\hotspotauth.dll 2013-08-13 11:16 - 2013-02-02 03:25 - 00297984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys 2013-08-13 11:16 - 2012-11-26 23:57 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BtaMPM.sys 2013-08-13 11:16 - 2012-11-26 23:55 - 00029952 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BthhfHid.sys 2013-08-13 11:16 - 2012-11-26 00:21 - 00071168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptsslp.dll 2013-08-13 11:16 - 2012-11-26 00:20 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\ncryptsslp.dll 2013-08-13 11:16 - 2012-11-20 00:56 - 00027136 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys 2013-08-13 11:16 - 2012-10-23 23:25 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\ReAgentc.exe 2013-08-13 11:16 - 2012-10-23 22:48 - 00024064 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReAgentc.exe 2013-08-13 11:16 - 2012-10-10 03:04 - 00094208 _____ (Microsoft Corporation) C:\windows\system32\synceng.dll 2013-08-13 11:16 - 2012-10-10 02:31 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\synceng.dll 2013-08-13 11:15 - 2013-05-04 02:59 - 02842112 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL 2013-08-13 11:15 - 2013-05-04 00:57 - 02620928 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL 2013-08-13 11:15 - 2013-04-27 01:20 - 00733184 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll 2013-08-13 11:15 - 2013-04-02 19:37 - 00025088 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptdlg.dll 2013-08-13 11:15 - 2013-04-02 19:12 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\cryptdlg.dll 2013-08-13 11:15 - 2013-02-11 20:17 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usb8023.sys 2013-08-13 11:15 - 2013-02-02 01:41 - 01437184 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll 2013-08-13 11:15 - 2013-02-02 01:31 - 01690624 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll 2013-08-13 11:15 - 2012-12-16 04:28 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll 2013-08-13 11:15 - 2012-12-16 04:20 - 00035328 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll 2013-08-13 11:15 - 2012-12-16 04:08 - 00362496 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll 2013-08-13 11:15 - 2012-12-16 03:57 - 00300032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll 2013-08-13 11:15 - 2012-11-08 00:24 - 00075776 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll 2013-08-13 11:15 - 2012-11-08 00:24 - 00010752 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll 2013-08-13 11:15 - 2012-11-08 00:20 - 00096256 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll 2013-08-13 11:15 - 2012-11-08 00:20 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll 2013-08-13 11:15 - 2012-11-08 00:02 - 00003072 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll 2013-08-13 11:15 - 2012-11-08 00:01 - 00003072 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll 2013-08-13 11:15 - 2012-11-03 01:26 - 00034816 _____ (Microsoft Corporation) C:\windows\system32\dpnsvr.exe 2013-08-13 11:15 - 2012-11-03 01:26 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnsvr.exe 2013-08-13 11:15 - 2012-11-03 01:24 - 00463872 _____ (Microsoft Corporation) C:\windows\system32\dpnet.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00375808 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnet.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\dpnathlp.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00058880 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnathlp.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00009216 _____ (Microsoft Corporation) C:\windows\system32\dpnhupnp.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00009216 _____ (Microsoft Corporation) C:\windows\system32\dpnhpast.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnhupnp.dll 2013-08-13 11:15 - 2012-11-03 01:24 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnhpast.dll 2013-08-13 11:15 - 2012-11-03 01:04 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\dpnlobby.dll 2013-08-13 11:15 - 2012-11-03 01:04 - 00003584 _____ (Microsoft Corporation) C:\windows\system32\dpnaddr.dll 2013-08-13 11:15 - 2012-11-03 01:00 - 00003072 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnlobby.dll 2013-08-13 11:15 - 2012-11-03 01:00 - 00002560 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnaddr.dll 2013-08-13 11:15 - 2012-11-01 00:40 - 02361344 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll 2013-08-13 11:15 - 2012-10-23 23:25 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\pcalua.exe 2013-08-13 11:15 - 2012-10-23 23:24 - 00405504 _____ (Microsoft Corporation) C:\windows\system32\pcasvc.dll 2013-08-13 11:15 - 2012-10-23 23:24 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\pcadm.dll 2013-08-13 11:15 - 2012-10-23 23:05 - 00011776 _____ (Microsoft Corporation) C:\windows\system32\pcaevts.dll 2013-08-13 11:14 - 2012-11-01 00:41 - 01802240 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll 2013-08-13 11:14 - 2012-11-01 00:41 - 01438720 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll 2013-08-13 11:14 - 2012-11-01 00:40 - 01836032 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll 2013-08-13 11:14 - 2012-11-01 00:21 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll 2013-08-13 11:14 - 2012-11-01 00:21 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll 2013-08-13 11:14 - 2012-11-01 00:20 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll 2013-08-13 11:14 - 2012-11-01 00:20 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll 2013-08-13 11:13 - 2013-08-13 11:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Hewlett-Packard 2013-08-11 09:56 - 2013-08-13 13:42 - 00000000 ____D C:\Windows.old 2013-08-11 09:56 - 2013-08-11 09:56 - 00262144 _____ C:\windows\system32\config\userdiff 2013-08-11 06:49 - 2013-08-11 06:49 - 01093032 _____ (Oracle Corporation) C:\windows\system32\npDeployJava1.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00972712 _____ (Oracle Corporation) C:\windows\system32\deployJava1.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00312232 _____ (Oracle Corporation) C:\windows\system32\javaws.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00188840 _____ (Oracle Corporation) C:\windows\system32\java.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00000000 ____D C:\Program Files\Java 2013-08-11 06:37 - 2013-08-11 06:37 - 00263592 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll 2013-08-11 06:37 - 2013-08-11 06:37 - 00000000 ____D C:\Program Files (x86)\Java 2013-08-11 06:32 - 2013-08-11 06:32 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2013-08-11 06:31 - 2013-08-15 07:09 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Notepad++ 2013-08-11 06:31 - 2013-08-11 06:32 - 00000000 ____D C:\Program Files (x86)\Notepad++ 2013-08-11 06:31 - 2013-08-11 06:31 - 00000783 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft.lnk 2013-08-11 06:30 - 2013-08-15 07:18 - 00004024 _____ C:\windows\System32\Tasks\HPGenoobeReminder 2013-08-11 06:30 - 2013-08-11 06:30 - 00000728 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps.lnk 2013-08-11 06:30 - 2013-08-11 06:30 - 00000564 _____ C:\Users\Philip\Desktop\Fraps.lnk 2013-08-11 06:30 - 2013-08-11 06:30 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps 2013-08-11 06:27 - 2013-08-18 05:53 - 00000000 ____D C:\Users\Philip\AppData\Roaming\TS3Client 2013-08-11 06:27 - 2013-08-11 06:27 - 00001465 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client (2).lnk 2013-08-11 06:24 - 2013-08-17 10:18 - 00000000 ____D C:\Users\Philip\AppData\Roaming\.minecraft 2013-08-11 06:24 - 2013-08-11 06:24 - 00001465 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk 2013-08-11 06:24 - 2013-05-15 18:35 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\tssdisai.dll 2013-08-11 06:24 - 2012-11-10 00:23 - 00148480 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe 2013-08-11 06:24 - 2012-11-10 00:23 - 00132608 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe 2013-08-11 06:24 - 2012-11-10 00:22 - 00126976 _____ (Microsoft Corporation) C:\windows\system32\RDWebAI.dll 2013-08-11 06:24 - 2012-11-10 00:22 - 00122880 _____ (Microsoft Corporation) C:\windows\system32\VmHostAI.dll 2013-08-11 06:24 - 2012-11-10 00:20 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\appserverai.dll 2013-08-11 06:21 - 2013-08-11 06:30 - 00000000 ____D C:\Users\Philip\AppData\Roaming\WinRAR 2013-08-11 06:20 - 2013-08-11 06:21 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-08-11 06:20 - 2013-08-11 06:20 - 00001174 _____ C:\Users\Philip\Desktop\TeamSpeak 3 Client.lnk 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Users\Philip\AppData\Local\TeamSpeak 3 Client 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Program Files\WinRAR 2013-08-11 06:18 - 2013-08-11 07:43 - 00002406 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2013-08-11 06:17 - 2013-03-02 04:23 - 00375808 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReAgent.dll 2013-08-11 06:17 - 2013-03-01 22:44 - 01011200 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll 2013-08-11 06:17 - 2012-12-15 00:55 - 00443392 _____ (Microsoft Corporation) C:\windows\system32\ReAgent.dll 2013-08-11 06:17 - 2012-11-03 01:26 - 00132096 _____ (Microsoft Corporation) C:\windows\system32\sysreset.exe 2013-08-11 06:17 - 2012-11-03 01:25 - 00945152 _____ (Microsoft Corporation) C:\windows\system32\resetengmig.dll 2013-08-11 06:16 - 2013-08-11 06:37 - 00867240 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll 2013-08-11 06:16 - 2013-08-11 06:37 - 00789416 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll 2013-08-11 06:16 - 2013-08-11 06:16 - 00000000 ____D C:\ProgramData\Sun 2013-08-11 06:13 - 2013-08-16 11:08 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-11 06:13 - 2013-08-16 11:08 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-11 06:13 - 2013-08-16 10:58 - 00004098 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-08-11 06:13 - 2013-08-16 10:58 - 00003862 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-08-11 06:13 - 2013-08-11 06:15 - 00000000 ____D C:\Users\Philip\AppData\Local\Google 2013-08-11 06:13 - 2013-08-11 06:14 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-11 06:13 - 2013-08-11 06:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Deployment 2013-08-11 06:13 - 2013-08-11 06:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Apps\2.0 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Macromedia 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Roaming\ATI 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Local\ATI 2013-08-11 06:10 - 2013-08-17 17:51 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-08-11 06:10 - 2013-08-13 16:40 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Adobe 2013-08-11 06:10 - 2013-08-13 14:19 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-08-11 06:10 - 2013-08-11 06:10 - 00001432 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-11 06:10 - 2013-08-11 06:10 - 00000000 ____D C:\windows\System32\Tasks\WPD 2013-08-11 06:09 - 2013-08-11 06:09 - 00000000 __RSH C:\windows\SysWOW64\Drivers\103C_HP_cPC_p7-1534_Y53316J_0U_Q4CE3060CX5_E13NA1RR8603_4A_I2AE0_SMSI_V1.0_B8.14_T121218_W8101-0_L409_M7576_J1000_7AMD_8F01_93.20_#130116_N19691091;1814539B_Z_G10029904_Ohp CDDVDW SH-216BB_DACR0294.MRK 2013-08-11 06:09 - 2013-08-11 06:09 - 00000000 __RSH C:\windows\system32\Drivers\103C_HP_cPC_p7-1534_Y53316J_0U_Q4CE3060CX5_E13NA1RR8603_4A_I2AE0_SMSI_V1.0_B8.14_T121218_W8101-0_L409_M7576_J1000_7AMD_8F01_93.20_#130116_N19691091;1814539B_Z_G10029904_Ohp CDDVDW SH-216BB_DACR0294.MRK 2013-08-11 06:07 - 2013-08-13 13:13 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Hewlett-Packard 2013-08-11 06:07 - 2013-08-11 06:07 - 00000141 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc 2013-08-11 06:06 - 2013-08-11 06:06 - 00000000 ____D C:\Users\Philip\AppData\Local\Power2Go8 2013-08-11 06:06 - 2012-10-06 00:53 - 02893824 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll 2013-08-11 06:06 - 2012-10-06 00:15 - 02400256 _____ (Microsoft Corporation) C:\windows\SysWOW64\msmpeg2vdec.dll 2013-08-11 06:05 - 2013-08-13 15:08 - 00000000 ____D C:\Users\Philip\AppData\Local\VirtualStore 2013-08-11 06:05 - 2013-08-11 06:05 - 00000020 ___SH C:\Users\Philip\ntuser.ini 2013-08-11 06:02 - 2013-08-11 06:02 - 00006995 _____ C:\Users\Administrator\AppData\Local\Application.xml 2013-08-11 06:01 - 2013-01-16 19:01 - 00002103 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk 2013-08-11 06:00 - 2013-08-17 18:24 - 00000000 ____D C:\Users\Philip 2013-08-11 06:00 - 2013-08-11 06:02 - 00017148 _____ C:\windows\diagwrn.xml 2013-08-11 06:00 - 2013-08-11 06:02 - 00017148 _____ C:\windows\diagerr.xml 2013-08-11 06:00 - 2012-07-26 04:13 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-08-11 06:00 - 2012-07-26 04:13 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-08-11 06:00 - 2012-07-26 04:13 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-08-11 06:00 - 2012-07-26 04:13 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-08-10 08:31 - 2013-08-10 08:32 - 961261773 _____ C:\Users\Philip\Documents\Pro.mp4 2013-08-10 06:18 - 2013-08-10 06:21 - 73560303 _____ C:\Users\Philip\Documents\Montage.mp4 2013-08-01 17:13 - 2013-08-01 17:24 - 122123600 _____ C:\Users\Philip\Part2.wav 2013-08-01 16:56 - 2013-08-01 17:12 - 183039440 _____ C:\Users\Philip\Part1.wav 2013-08-01 16:53 - 2013-08-01 16:55 - 20167760 _____ C:\Users\Philip\Parody1.wav 2013-07-30 18:15 - 2013-07-30 18:19 - 28284120 _____ C:\Users\Philip\ts3_recording_13_07_30_18_15_37.wav 2013-07-23 18:22 - 2013-07-23 18:22 - 01309520 _____ C:\Users\Philip\JA ICH WEIS.wav ==================== One Month Modified Files and Folders ======= 2013-08-18 06:04 - 2013-08-18 06:03 - 01575580 _____ (Farbar) C:\Users\Philip\Downloads\FRST64.exe 2013-08-18 06:04 - 2013-08-15 08:11 - 00003596 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-428423403-2423760254-1452003644-1001 2013-08-18 06:03 - 2012-07-26 03:28 - 00876494 _____ C:\windows\system32\PerfStringBackup.INI 2013-08-18 06:02 - 2013-08-18 06:02 - 00001058 _____ C:\Users\Philip\Documents\JRT.txt 2013-08-18 06:02 - 2013-08-18 06:02 - 00001058 _____ C:\Users\Philip\Desktop\JRT.txt 2013-08-18 06:00 - 2012-07-26 04:12 - 00000000 ____D C:\windows\system32\sru 2013-08-18 05:59 - 2013-08-17 17:43 - 00226048 _____ C:\windows\WindowsUpdate.log 2013-08-18 05:59 - 2013-08-16 16:58 - 00065536 _____ C:\windows\system32\Ikeext.etl 2013-08-18 05:59 - 2012-07-26 03:22 - 00000006 ____H C:\windows\Tasks\SA.DAT 2013-08-18 05:58 - 2013-08-18 05:57 - 00001172 _____ C:\AdwCleaner[S1].txt 2013-08-18 05:58 - 2013-08-17 15:32 - 00003295 _____ C:\windows\SysWOW64\bufferpool.txt 2013-08-18 05:56 - 2013-08-18 05:56 - 01018166 _____ (Thisisu) C:\Users\Philip\Downloads\JRT.exe 2013-08-18 05:56 - 2013-08-18 05:56 - 00666633 _____ C:\Users\Philip\Downloads\adwcleaner.exe 2013-08-18 05:56 - 2013-08-18 05:56 - 00000000 ____D C:\windows\ERUNT 2013-08-18 05:53 - 2013-08-11 06:27 - 00000000 ____D C:\Users\Philip\AppData\Roaming\TS3Client 2013-08-18 05:37 - 2013-08-13 16:31 - 00000000 ____D C:\Users\Philip\AppData\Local\Adobe 2013-08-18 05:36 - 2012-07-26 04:12 - 00000000 ____D C:\windows\tracing 2013-08-17 18:37 - 2012-07-26 04:12 - 00000000 ____D C:\windows\system32\NDF 2013-08-17 18:28 - 2013-08-17 18:28 - 00020975 _____ C:\ComboFix.txt 2013-08-17 18:28 - 2013-08-17 18:19 - 00000000 ____D C:\Qoobox 2013-08-17 18:27 - 2013-08-17 18:19 - 00000000 ____D C:\windows\erdnt 2013-08-17 18:26 - 2012-07-26 01:26 - 00000215 _____ C:\windows\system.ini 2013-08-17 18:25 - 2013-08-17 18:25 - 00002226 _____ C:\windows\PFRO.log 2013-08-17 18:24 - 2013-08-11 06:00 - 00000000 ____D C:\Users\Philip 2013-08-17 18:18 - 2013-08-17 18:17 - 05105390 ____R (Swearware) C:\Users\Philip\Downloads\ComboFix.exe 2013-08-17 18:03 - 2013-01-16 18:40 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-08-17 18:02 - 2013-01-16 18:45 - 00000000 ____D C:\ProgramData\CyberLink 2013-08-17 17:53 - 2013-07-16 06:14 - 00000000 ____D C:\Users\Philip\Desktop\Sachen 2013-08-17 17:51 - 2013-08-15 18:54 - 00000000 ____D C:\Program Files\Ekahau 2013-08-17 17:51 - 2013-08-11 06:10 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-08-17 17:44 - 2013-08-17 17:44 - 00000000 _____ C:\windows\setuperr.log 2013-08-17 17:44 - 2013-08-17 17:44 - 00000000 _____ C:\windows\setupact.log 2013-08-17 17:44 - 2013-08-17 17:43 - 00291288 _____ C:\windows\system32\FNTCACHE.DAT 2013-08-17 17:43 - 2013-08-17 17:43 - 00000000 ____D C:\windows\pss 2013-08-17 17:27 - 2013-08-17 17:27 - 00000000 ____D C:\ProgramData\RegInOut 2013-08-17 15:55 - 2013-08-17 15:54 - 00007598 _____ C:\Users\Philip\AppData\Local\Resmon.ResmonCfg 2013-08-17 15:55 - 2013-08-13 11:50 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Skype 2013-08-17 14:29 - 2013-08-17 14:29 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Avira 2013-08-17 14:28 - 2013-08-17 14:28 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Mozilla 2013-08-17 14:27 - 2013-08-17 14:27 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys 2013-08-17 14:27 - 2013-08-17 14:27 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys 2013-08-17 14:27 - 2013-08-17 14:27 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys 2013-08-17 14:27 - 2013-08-17 14:27 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys 2013-08-17 14:27 - 2013-08-17 14:27 - 00002068 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-08-17 14:27 - 2013-08-17 14:27 - 00000000 ____D C:\ProgramData\Avira 2013-08-17 14:27 - 2013-08-17 14:27 - 00000000 ____D C:\Program Files (x86)\Avira 2013-08-17 14:23 - 2013-08-17 14:23 - 00001069 _____ C:\Users\Philip\Desktop\SIW Home Edition.lnk 2013-08-17 14:23 - 2013-08-17 14:23 - 00000000 ____D C:\Users\Philip\AppData\Local\CrashRpt 2013-08-17 14:23 - 2013-08-17 14:23 - 00000000 ____D C:\Program Files (x86)\SIW 2013 Home Edition 2013-08-17 14:17 - 2013-08-17 14:17 - 00000976 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TCPOptimizer.lnk 2013-08-17 14:04 - 2012-07-26 04:12 - 00000000 ___RD C:\windows\ToastData 2013-08-17 14:04 - 2012-07-26 04:12 - 00000000 ____D C:\windows\WinStore 2013-08-17 13:38 - 2013-08-17 13:38 - 00000037 ___SH C:\Users\Philip\AppData\Local\70149b02515b3bb20dd492.47983420 2013-08-17 13:38 - 2013-08-17 13:38 - 00000000 ____D C:\Users\Philip\AppData\Local\MetaGeek,_LLC 2013-08-17 13:38 - 2013-08-17 13:38 - 00000000 ____D C:\Users\Philip\AppData\Local\IsolatedStorage 2013-08-17 12:19 - 2013-08-17 12:19 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE 2013-08-17 11:43 - 2013-08-17 11:43 - 00000000 ____D C:\Program Files\cFosSpeed 2013-08-17 11:42 - 2013-08-17 11:42 - 00000000 ____D C:\Users\Philip\AppData\Local\cFos 2013-08-17 11:42 - 2013-08-17 11:42 - 00000000 ____D C:\ProgramData\cFos 2013-08-17 10:18 - 2013-08-11 06:24 - 00000000 ____D C:\Users\Philip\AppData\Roaming\.minecraft 2013-08-17 09:11 - 2013-08-15 11:03 - 00016152 _____ C:\windows\system32\Drivers\SWDUMon.sys 2013-08-17 09:11 - 2013-08-15 11:03 - 00000426 _____ C:\windows\Tasks\SlimDrivers Startup.job 2013-08-17 08:44 - 2012-07-26 01:26 - 00262144 ___SH C:\windows\system32\config\BBI 2013-08-17 07:44 - 2013-08-17 07:44 - 00003728 ____N C:\bootsqm.dat 2013-08-16 14:24 - 2013-08-16 14:24 - 00000000 ____D C:\FRST 2013-08-16 13:04 - 2012-07-26 04:12 - 00000000 ____D C:\windows\rescache 2013-08-16 11:40 - 2013-08-16 11:40 - 00000000 _____ C:\Users\Philip\defogger_reenable 2013-08-16 11:17 - 2013-06-04 11:58 - 00000000 ____D C:\Users\Philip\Documents\Musikpack 2013-08-16 11:08 - 2013-08-11 06:13 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-16 11:08 - 2013-08-11 06:13 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-16 10:58 - 2013-08-11 06:13 - 00004098 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-08-16 10:58 - 2013-08-11 06:13 - 00003862 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-08-16 10:37 - 2013-04-14 11:31 - 00000000 ____D C:\found.000 2013-08-16 10:37 - 2013-01-16 18:45 - 00000000 ____D C:\ProgramData\install_clap 2013-08-16 10:37 - 2012-08-10 20:49 - 00000000 ____D C:\windows\Panther 2013-08-16 10:22 - 2012-07-26 04:12 - 00000000 ____D C:\windows\AUInstallAgent 2013-08-16 10:00 - 2013-08-16 09:20 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} 2013-08-16 10:00 - 2013-08-15 11:11 - 00000000 ____D C:\ProgramData\DriverGenius 2013-08-16 10:00 - 2013-01-16 18:41 - 00000000 ____D C:\ProgramData\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF} 2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\windows\SysWOW64\Atheros_L1e 2013-08-16 09:34 - 2013-08-16 09:34 - 00000000 ____D C:\Dell 2013-08-16 09:32 - 2013-08-16 09:32 - 00000000 ____D C:\Users\Philip\AppData\Roaming\driveridentifier 2013-08-16 09:21 - 2013-08-16 09:21 - 00000000 ____D C:\Users\Philip\AppData\Roaming\TuneUp Software 2013-08-16 09:21 - 2013-08-16 09:21 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2013 2013-08-16 09:21 - 2013-08-16 09:20 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-08-16 09:18 - 2013-08-16 09:18 - 00021712 _____ (Phoenix Technologies) C:\windows\SysWOW64\Drivers\DrvAgent64.SYS 2013-08-16 09:18 - 2013-08-16 09:18 - 00000000 ____D C:\Users\Philip\AppData\Local\eSupport.com 2013-08-16 09:15 - 2013-08-16 09:15 - 00000000 ____D C:\Program Files\CPUID 2013-08-15 18:56 - 2013-08-15 18:56 - 00000000 ____D C:\Users\Philip\Ekahau Site Survey 2013-08-15 18:28 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files\Windows Defender 2013-08-15 18:28 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-08-15 13:34 - 2013-08-15 13:33 - 00000000 ____D C:\windows\system32\MRT 2013-08-15 13:33 - 2013-08-13 12:38 - 78161360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-08-15 11:02 - 2013-08-15 11:02 - 00000000 ____D C:\Users\Philip\AppData\Local\SlimWare Utilities Inc 2013-08-15 10:59 - 2012-08-10 19:52 - 00000000 ____D C:\Users\Administrator 2013-08-15 10:59 - 2012-07-26 03:52 - 00000000 ____D C:\Program Files\Windows Journal 2013-08-15 10:55 - 2013-01-16 18:45 - 00000000 ____D C:\ProgramData\Apple 2013-08-15 10:55 - 2013-01-16 18:41 - 00000000 ____D C:\ProgramData\Ralink Driver 2013-08-15 10:55 - 2013-01-16 18:39 - 00000000 ____D C:\ProgramData\Hewlett-Packard 2013-08-15 10:55 - 2012-07-26 04:12 - 00000000 ____D C:\windows\registration 2013-08-15 10:55 - 2012-07-26 01:38 - 00000000 ____D C:\windows\system32\Sysprep 2013-08-15 10:54 - 2013-08-15 08:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-15 10:54 - 2013-08-15 08:37 - 00000000 ____D C:\Program Files (x86)\o2 2013-08-15 10:54 - 2013-08-13 17:05 - 00000000 ____D C:\Program Files\CCleaner 2013-08-15 10:54 - 2013-01-16 19:01 - 00000000 ___RD C:\Program Files\Online Services 2013-08-15 10:54 - 2013-01-16 18:40 - 00000000 ____D C:\Program Files\IDT 2013-08-15 10:54 - 2013-01-16 18:38 - 00000000 ____D C:\Program Files\Hewlett-Packard 2013-08-15 10:54 - 2013-01-16 18:35 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2013-08-15 10:54 - 2012-08-10 19:55 - 00000000 ____D C:\inetpub 2013-08-15 10:54 - 2012-08-10 19:54 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-08-15 10:54 - 2012-08-10 19:54 - 00000000 ____D C:\Program Files\MSBuild 2013-08-15 10:54 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-08-15 10:54 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files\Windows NT 2013-08-15 10:54 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files\Common Files\System 2013-08-15 10:54 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-08-15 09:25 - 2013-08-15 08:40 - 00181064 _____ (Sysinternals) C:\windows\PSEXESVC.EXE 2013-08-15 09:22 - 2012-07-26 01:26 - 00000128 _____ C:\windows\win.ini 2013-08-15 09:21 - 2012-08-10 19:56 - 00876494 _____ C:\windows\SysWOW64\PerfStringBackup.INI 2013-08-15 09:05 - 2012-07-26 01:26 - 00000855 _____ C:\windows\system32\Drivers\etc\hosts_bak_374 2013-08-15 08:56 - 2012-07-26 01:26 - 00000855 _____ C:\windows\system32\Drivers\etc\hosts_bak_678 2013-08-15 08:47 - 2013-08-15 08:47 - 00002114 _____ C:\Users\Public\Desktop\Mobile Connection Manager.lnk 2013-08-15 08:47 - 2013-08-15 08:47 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Telefónica 2013-08-15 08:46 - 2013-08-15 08:46 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-15 08:46 - 2013-08-15 08:46 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Malwarebytes 2013-08-15 08:46 - 2013-08-15 08:46 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-08-15 08:42 - 2012-07-26 01:26 - 00000855 _____ C:\windows\system32\Drivers\etc\hosts_bak_629 2013-08-15 08:38 - 2013-08-15 08:38 - 00000000 ____D C:\RegBackup 2013-08-15 08:38 - 2013-08-15 08:37 - 00000000 ____D C:\Program Files (x86)\HUAWEI Modem Driver 2013-08-15 08:36 - 2013-08-15 08:36 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2013-08-15 07:18 - 2013-08-11 06:30 - 00004024 _____ C:\windows\System32\Tasks\HPGenoobeReminder 2013-08-15 07:09 - 2013-08-11 06:31 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Notepad++ 2013-08-15 06:51 - 2013-01-16 19:02 - 00000000 ____D C:\ProgramData\Norton 2013-08-14 14:30 - 2013-08-14 14:28 - 00000000 ____D C:\Users\Philip\AppData\Roaming\.technic 2013-08-14 09:06 - 2013-08-14 09:06 - 00000000 ____D C:\Users\Philip\AppData\Roaming\LolClient 2013-08-14 09:05 - 2013-08-14 09:05 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk 2013-08-14 09:03 - 2013-08-14 09:03 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Riot Games 2013-08-14 09:03 - 2013-08-14 09:03 - 00000000 ____D C:\Program Files (x86)\Pando Networks 2013-08-13 17:06 - 2012-07-26 04:12 - 00000000 ___HD C:\windows\ELAMBKUP 2013-08-13 17:06 - 2012-07-26 01:26 - 00262144 ___SH C:\windows\system32\config\ELAM 2013-08-13 17:05 - 2013-08-13 17:05 - 00000824 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-08-13 16:50 - 2013-08-13 16:50 - 00000000 ____D C:\ProgramData\Adobe 2013-08-13 16:41 - 2013-08-13 16:41 - 00003500 _____ C:\windows\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-cenniz@gmx.de 2013-08-13 16:40 - 2013-08-13 16:40 - 00001070 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2013-08-13 16:40 - 2013-08-11 06:10 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Adobe 2013-08-13 16:39 - 2013-08-13 16:39 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-08-13 15:14 - 2013-08-13 15:14 - 00000000 ____D C:\Users\Philip\AppData\Roaming\IDT 2013-08-13 15:08 - 2013-08-11 06:05 - 00000000 ____D C:\Users\Philip\AppData\Local\VirtualStore 2013-08-13 14:19 - 2013-08-13 14:13 - 00000000 ____D C:\windows\BrowserChoice 2013-08-13 14:19 - 2013-08-11 06:10 - 00000000 ___RD C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-08-13 14:19 - 2012-08-10 19:52 - 00000000 ____D C:\ProgramData\PRICache 2013-08-13 14:17 - 2012-07-26 01:37 - 00000000 ____D C:\windows\servicing 2013-08-13 14:13 - 2012-07-26 01:38 - 00000000 ____D C:\windows\system32\oobe 2013-08-13 14:12 - 2012-07-26 04:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2013-08-13 14:12 - 2012-07-26 01:38 - 00000000 ____D C:\windows\SysWOW64\Dism 2013-08-13 14:12 - 2012-07-26 01:38 - 00000000 ____D C:\windows\system32\Dism 2013-08-13 13:42 - 2013-08-11 09:56 - 00000000 ____D C:\Windows.old 2013-08-13 13:13 - 2013-08-11 06:07 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Hewlett-Packard 2013-08-13 11:50 - 2013-08-13 11:50 - 00002515 _____ C:\Users\Public\Desktop\Skype.lnk 2013-08-13 11:50 - 2013-08-13 11:50 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-08-13 11:50 - 2013-08-13 11:50 - 00000000 ____D C:\ProgramData\Skype 2013-08-13 11:13 - 2013-08-13 11:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Hewlett-Packard 2013-08-11 09:56 - 2013-08-11 09:56 - 00262144 _____ C:\windows\system32\config\userdiff 2013-08-11 09:56 - 2012-07-26 04:13 - 00262144 _____ C:\windows\system32\config\BCD-Template 2013-08-11 07:43 - 2013-08-11 06:18 - 00002406 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2013-08-11 06:49 - 2013-08-11 06:49 - 01093032 _____ (Oracle Corporation) C:\windows\system32\npDeployJava1.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00972712 _____ (Oracle Corporation) C:\windows\system32\deployJava1.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00312232 _____ (Oracle Corporation) C:\windows\system32\javaws.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00188840 _____ (Oracle Corporation) C:\windows\system32\java.exe 2013-08-11 06:49 - 2013-08-11 06:49 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll 2013-08-11 06:49 - 2013-08-11 06:49 - 00000000 ____D C:\Program Files\Java 2013-08-11 06:37 - 2013-08-11 06:37 - 00263592 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe 2013-08-11 06:37 - 2013-08-11 06:37 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll 2013-08-11 06:37 - 2013-08-11 06:37 - 00000000 ____D C:\Program Files (x86)\Java 2013-08-11 06:37 - 2013-08-11 06:16 - 00867240 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll 2013-08-11 06:37 - 2013-08-11 06:16 - 00789416 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll 2013-08-11 06:32 - 2013-08-11 06:32 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2013-08-11 06:32 - 2013-08-11 06:31 - 00000000 ____D C:\Program Files (x86)\Notepad++ 2013-08-11 06:31 - 2013-08-11 06:31 - 00000783 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft.lnk 2013-08-11 06:30 - 2013-08-11 06:30 - 00000728 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps.lnk 2013-08-11 06:30 - 2013-08-11 06:30 - 00000564 _____ C:\Users\Philip\Desktop\Fraps.lnk 2013-08-11 06:30 - 2013-08-11 06:30 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps 2013-08-11 06:30 - 2013-08-11 06:21 - 00000000 ____D C:\Users\Philip\AppData\Roaming\WinRAR 2013-08-11 06:27 - 2013-08-11 06:27 - 00001465 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client (2).lnk 2013-08-11 06:24 - 2013-08-11 06:24 - 00001465 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk 2013-08-11 06:22 - 2013-01-16 18:41 - 00002859 _____ C:\windows\system32\RaCoInst.log 2013-08-11 06:21 - 2013-08-11 06:20 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-08-11 06:20 - 2013-08-11 06:20 - 00001174 _____ C:\Users\Philip\Desktop\TeamSpeak 3 Client.lnk 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Users\Philip\AppData\Local\TeamSpeak 3 Client 2013-08-11 06:20 - 2013-08-11 06:20 - 00000000 ____D C:\Program Files\WinRAR 2013-08-11 06:16 - 2013-08-11 06:16 - 00000000 ____D C:\ProgramData\Sun 2013-08-11 06:15 - 2013-08-11 06:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Google 2013-08-11 06:15 - 2012-07-26 04:12 - 00000000 ____D C:\windows\system32\restore 2013-08-11 06:14 - 2013-08-11 06:13 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-11 06:13 - 2013-08-11 06:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Deployment 2013-08-11 06:13 - 2013-08-11 06:13 - 00000000 ____D C:\Users\Philip\AppData\Local\Apps\2.0 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Macromedia 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Roaming\ATI 2013-08-11 06:11 - 2013-08-11 06:11 - 00000000 ____D C:\Users\Philip\AppData\Local\ATI 2013-08-11 06:10 - 2013-08-11 06:10 - 00001432 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-11 06:10 - 2013-08-11 06:10 - 00000000 ____D C:\windows\System32\Tasks\WPD 2013-08-11 06:10 - 2013-04-05 18:01 - 00000000 ____D C:\Users\Philip\AppData\Local\Packages 2013-08-11 06:10 - 2012-10-11 23:24 - 00000000 ____D C:\SWSETUP 2013-08-11 06:10 - 2012-10-11 23:21 - 00000000 ___RD C:\SYSTEM.SAV 2013-08-11 06:09 - 2013-08-11 06:09 - 00000000 __RSH C:\windows\SysWOW64\Drivers\103C_HP_cPC_p7-1534_Y53316J_0U_Q4CE3060CX5_E13NA1RR8603_4A_I2AE0_SMSI_V1.0_B8.14_T121218_W8101-0_L409_M7576_J1000_7AMD_8F01_93.20_#130116_N19691091;1814539B_Z_G10029904_Ohp CDDVDW SH-216BB_DACR0294.MRK 2013-08-11 06:09 - 2013-08-11 06:09 - 00000000 __RSH C:\windows\system32\Drivers\103C_HP_cPC_p7-1534_Y53316J_0U_Q4CE3060CX5_E13NA1RR8603_4A_I2AE0_SMSI_V1.0_B8.14_T121218_W8101-0_L409_M7576_J1000_7AMD_8F01_93.20_#130116_N19691091;1814539B_Z_G10029904_Ohp CDDVDW SH-216BB_DACR0294.MRK 2013-08-11 06:09 - 2013-01-16 18:44 - 00000000 ___RD C:\Program Files (x86)\Online Services 2013-08-11 06:09 - 2013-01-07 07:13 - 00000000 ___RD C:\hp 2013-08-11 06:07 - 2013-08-11 06:07 - 00000141 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc 2013-08-11 06:06 - 2013-08-11 06:06 - 00000000 ____D C:\Users\Philip\AppData\Local\Power2Go8 2013-08-11 06:05 - 2013-08-11 06:05 - 00000020 ___SH C:\Users\Philip\ntuser.ini 2013-08-11 06:02 - 2013-08-11 06:02 - 00006995 _____ C:\Users\Administrator\AppData\Local\Application.xml 2013-08-11 06:02 - 2013-08-11 06:00 - 00017148 _____ C:\windows\diagwrn.xml 2013-08-11 06:02 - 2013-08-11 06:00 - 00017148 _____ C:\windows\diagerr.xml 2013-08-11 06:02 - 2012-07-26 04:12 - 00000000 __RHD C:\Users\Public\Libraries 2013-08-11 06:02 - 2012-07-26 04:12 - 00000000 ____D C:\windows\system32\Recovery 2013-08-11 06:02 - 2012-07-26 01:37 - 00000000 __RHD C:\Users\Default 2013-08-10 08:32 - 2013-08-10 08:31 - 961261773 _____ C:\Users\Philip\Documents\Pro.mp4 2013-08-10 06:21 - 2013-08-10 06:18 - 73560303 _____ C:\Users\Philip\Documents\Montage.mp4 2013-08-03 14:07 - 2013-05-21 00:10 - 00000000 ____D C:\Users\Philip\Documents\Sachen 2013-08-01 17:24 - 2013-08-01 17:13 - 122123600 _____ C:\Users\Philip\Part2.wav 2013-08-01 17:12 - 2013-08-01 16:56 - 183039440 _____ C:\Users\Philip\Part1.wav 2013-08-01 16:55 - 2013-08-01 16:53 - 20167760 _____ C:\Users\Philip\Parody1.wav 2013-07-31 08:01 - 2013-06-03 21:23 - 00001110 _____ C:\Users\Philip\Documents\EselLP.txt 2013-07-30 18:19 - 2013-07-30 18:15 - 28284120 _____ C:\Users\Philip\ts3_recording_13_07_30_18_15_37.wav 2013-07-29 11:04 - 2013-05-03 20:20 - 00000000 ____D C:\DxTory 2013-07-26 01:13 - 2013-08-15 11:13 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2013-07-26 01:13 - 2013-08-15 11:13 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2013-07-26 01:13 - 2013-08-15 11:13 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll 2013-07-26 01:13 - 2013-08-15 11:13 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll 2013-07-26 01:13 - 2013-08-15 11:13 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2013-07-26 01:12 - 2013-08-15 11:13 - 19239424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 15405056 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2013-07-26 01:12 - 2013-08-15 11:13 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2013-07-25 23:35 - 2013-08-15 11:13 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2013-07-25 23:13 - 2013-08-15 11:13 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2013-07-25 23:13 - 2013-08-15 11:13 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2013-07-25 23:13 - 2013-08-15 11:13 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 14329344 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2013-07-25 23:12 - 2013-08-15 11:13 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2013-07-25 23:11 - 2013-08-15 11:13 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2013-07-25 23:11 - 2013-08-15 11:13 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2013-07-25 22:49 - 2013-08-15 11:13 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2013-07-25 20:54 - 2013-08-15 11:13 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll 2013-07-23 18:22 - 2013-07-23 18:22 - 01309520 _____ C:\Users\Philip\JA ICH WEIS.wav ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2012-08-10 19:49 ==================== End Of Log ============================ |
18.08.2013, 16:31 | #6 |
/// the machine /// TB-Ausbilder | Internetverbindung nach einer Zeit immer langsamer High Ping Erkennt ihr was?ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Internetverbindung nach einer Zeit immer langsamer High Ping Erkennt ihr was? |
Themen zu Internetverbindung nach einer Zeit immer langsamer High Ping Erkennt ihr was? |
administrator, defender, desktop, detected, explorer, google, hijackthis, internet, internet explorer, internetverbindung, keine viren, log, logfile, lsass.exe, malwarebytes, micro, microsoft, registry, software, spoolsv.exe, system32, update, verbindung, viren, windows, windows media player |