Hallo zusammen!

Habe mir gerade eine Interpol-Sperrung auf meinem Laptop eingefangen und bitte um Hilfe.
Ich habe gerade versucht den First-Scan mit Hilfe des Farbar Recovery Scan Tool auf einem USB Stick durchzuführen ...

... allerdings erscheint mir bei der Eingabe-Aufforderung (e:\FRST.exe. die Meldung:

Das zum Unterstützen des Abbildtyps erforderliche Subsystem ist nicht vorhanden.

Bitte um HILFE!!!!

Danke im vorhinein!

Hi,

welches Betriebssystem? 32 oder 64bit?

soviel ich glaube 64bit - aber kann ich das irgendwo sicher nachschauen?

ach ja und das ist viell. auch noch wichtig zu wissen:
mein laptop kann derzeit zwar noch normal gestartet werden, ich komme jedoch nicht ins internet um die toolbar herunterzuladen bzw. die nötigen informationen für euch zusammen zu schreiben... (bin jetzt mit einem anderen pc im forum)
und plötzlich kommt dann wieder diese interpol-sperrungs-nachricht, dann ist der Laptop sowieso ausser gefecht...

und ich bin wirklich ein pc-wildschwein (was ihr wahrscheinlich eh schon gemerkt habt... )

danke dennoch!!

Nun ist es mir doch gelungen, den FRST-SCAN durchzuführen; hier das Ergebnis:


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-08-2013
Ran by SYSTEM on 25-08-2013 14:51:33
Running from D:\
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-11-20] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-09-02] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-09-02] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] - C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-12-05] ()
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1532992 2013-03-13] (McAfee, Inc.)
HKLM-x32\...\Run: [LManager] -  [x]
HKLM-x32\...\Run: [RadioController] - C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-02-04] (Dritek System Inc.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Dolby PCEE4\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248040 2010-02-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-29] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-26] (APN)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-10-24] (Acer Incorporated)
HKU\Default User\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-10-24] (Acer Incorporated)
AppInit_DLLs: C:\PROGRA~3\Wincert\WIN64C~1.DLL C:\PROGRA~2\MOVIES~1\Datamngr\x64\mgrldr.dll  [21504 2013-08-07] ()
AppInit_DLLs-x32: C:\PROGRA~3\Wincert\WIN32C~1.DLL C:\PROGRA~2\MOVIES~1\Datamngr\mgrldr.dll  [17408 2013-08-07] ()
Startup: C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jgqubpaypdelyptpbjm.lnk
ShortcutTarget: jgqubpaypdelyptpbjm.lnk -> C:\Users\Sandra\AppData\Local\Temp\mjbptpyledpyapbuqgj.bfg (Microsoft Corporation)

==================== Services (Whitelisted) =================

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-29] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-29] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [811064 2013-07-29] (Avira Operations GmbH & Co. KG)
S2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.)
S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [231552 2012-12-05] (Qualcomm Atheros Commnucations)
S2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2449552 2012-10-25] (Acer Incorporated)
S2 DatamngrCoordinator; C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrCoordinator.exe [3179520 2013-08-07] (Bandoo Media Inc.)
S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658064 2012-10-23] (Acer Incorporated)
S2 ETDService; C:\Program Files\Elantech\ETDService.exe [100752 2012-11-20] (ELAN Microelectronics Corp.)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [332080 2012-01-26] (McAfee, Inc.)
S2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [384048 2013-02-25] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)
S2 MfeASUM; C:\Program Files\McAfee\AppStats\MfeASUM.exe [335216 2013-08-07] (McAfee, Inc.)
S2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)
S2 mfevtp; C:\windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
S2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
S2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-11-02] (NTI Corporation)
S2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-02-04] (Dritek System INC.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-01] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-07-29] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-07-29] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-07-29] (Avira Operations GmbH & Co. KG)
S2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [83672 2013-07-29] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2012-12-05] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-25] (Microsoft Corporation)
S1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-25] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)
S1 MfeASKM; C:\Program Files\McAfee\AppStats\MfeASKM.sys [31408 2013-08-07] (McAfee, Inc.)
S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69168 2013-02-19] (McAfee, Inc.)
S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.)
S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
S0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
S3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-02-04] (Dritek System Inc.)
S3 mfeavfk01; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-25 02:05 - 2013-08-25 02:05 - 00275576 _____ (Корпорация Майкрософт) C:\Users\Sandra\teamviewer.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00275576 _____ (Корпорация Майкрософт) C:\Users\Sandra\java.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000165 _____ C:\ProgramData\jgqubpaypdelyptpbjm.reg
2013-08-25 02:05 - 2013-08-25 02:05 - 00000070 _____ C:\ProgramData\jgqubpaypdelyptpbjm.bat
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 ____D C:\Users\Sandra\AppData\Local\CrashDumps
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\winlogon.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\skype.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\iexplore.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\icq.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\firefox.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\ctfmon.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\conhost.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\chrome.exe
2013-08-19 01:24 - 2013-08-19 01:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-19 00:15 - 2013-08-19 00:16 - 00014848 ___SH C:\Users\Sandra\Desktop\Thumbs.db
2013-08-16 13:43 - 2013-08-16 14:01 - 00000000 ____D C:\Users\Sandra\Documents\Hochzeit Susanne u. Johannes
2013-08-16 13:43 - 2013-08-16 13:43 - 00000000 ____D C:\Users\Sandra\AppData\Local\clear.fi
2013-08-16 11:02 - 2013-07-08 22:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-08-16 11:02 - 2013-05-23 15:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2013-08-16 11:02 - 2013-05-23 14:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-16 11:01 - 2013-07-25 21:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-08-16 11:01 - 2013-07-25 21:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-08-16 11:01 - 2013-07-25 21:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\System32\uxtheme.dll
2013-08-16 11:01 - 2013-07-25 21:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\UXInit.dll
2013-08-16 11:01 - 2013-07-25 21:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-08-16 11:01 - 2013-07-25 21:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-08-16 11:01 - 2013-07-25 21:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-08-16 11:01 - 2013-07-25 21:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-08-16 11:01 - 2013-07-25 21:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-08-16 11:01 - 2013-07-25 21:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-08-16 11:01 - 2013-07-25 21:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-08-16 11:01 - 2013-07-25 21:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-08-16 11:01 - 2013-07-25 21:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-08-16 11:01 - 2013-07-25 21:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-08-16 11:01 - 2013-07-25 21:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-08-16 11:01 - 2013-07-25 19:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-08-16 11:01 - 2013-07-25 19:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-16 11:01 - 2013-07-25 19:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-16 11:01 - 2013-07-25 19:13 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-08-16 11:01 - 2013-07-25 19:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-16 11:01 - 2013-07-25 19:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-16 11:01 - 2013-07-25 19:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-16 11:01 - 2013-07-25 19:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-16 11:01 - 2013-07-25 19:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-16 11:01 - 2013-07-25 19:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-16 11:01 - 2013-07-25 19:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-16 11:01 - 2013-07-25 19:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-16 11:01 - 2013-07-25 18:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-16 11:01 - 2013-07-25 16:54 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-08-16 11:01 - 2013-07-01 16:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdBoot.sys
2013-08-16 11:01 - 2013-07-01 14:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdFilter.sys
2013-08-16 11:00 - 2013-07-25 19:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-16 11:00 - 2013-07-25 19:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-16 10:59 - 2013-07-12 22:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2013-08-16 10:59 - 2013-07-12 22:16 - 01889280 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-08-16 10:59 - 2013-07-12 22:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-08-16 10:59 - 2013-07-12 22:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\System32\apprepapi.dll
2013-08-16 10:59 - 2013-07-12 22:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\System32\apprepsync.dll
2013-08-16 10:59 - 2013-07-12 20:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-16 10:59 - 2013-07-12 20:23 - 01568256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-16 10:59 - 2013-07-12 20:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-08-16 10:59 - 2013-07-12 20:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-08-13 02:36 - 2013-08-13 02:36 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-08-12 23:20 - 2013-08-12 23:20 - 00001402 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-08-12 23:19 - 2013-08-12 23:20 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-12 23:13 - 2013-08-12 23:20 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\DVDVideoSoft
2013-08-12 23:12 - 2013-08-12 23:12 - 01211376 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Sandra\Downloads\FreeYouTubeToMP3Converter-3.12.9.725.exe
2013-08-10 09:06 - 2013-08-16 13:42 - 00000000 ____D C:\Users\Sandra\AppData\Local\Deployment
2013-08-10 09:06 - 2013-08-10 09:06 - 00000000 ____D C:\Users\Sandra\AppData\Local\Apps\2.0
2013-08-10 08:54 - 2013-08-10 08:54 - 00427328 _____ C:\Windows\System32\FNTCACHE.DAT
2013-08-10 08:43 - 2013-08-10 08:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-08-10 08:42 - 2013-08-10 08:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-08-10 08:41 - 2013-08-10 08:41 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-10 08:39 - 2013-08-10 08:39 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-10 08:39 - 2013-08-10 08:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-08-10 08:38 - 2013-08-10 08:38 - 00000000 __RHD C:\MSOCache
2013-08-10 08:35 - 2013-08-10 08:36 - 00000000 ____D C:\Office
2013-08-10 04:55 - 2013-08-10 07:43 - 264821640 _____ C:\Users\Sandra\Downloads\EnterWW.cab
2013-08-10 01:57 - 2013-08-25 04:46 - 00000000 ____D C:\ProgramData\Datamngr
2013-08-10 01:57 - 2013-08-10 01:57 - 00000000 ____D C:\ProgramData\Wincert
2013-08-10 01:57 - 2013-08-10 01:57 - 00000000 ____D C:\Program Files (x86)\Movies Toolbar
2013-08-08 11:40 - 2013-08-19 00:22 - 00000000 ____D C:\Windows\System32\MRT
2013-08-08 11:07 - 2013-08-10 08:45 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-08 11:07 - 2013-08-08 11:07 - 00000000 ____D C:\Users\Sandra\AppData\Local\Microsoft Help
2013-08-08 01:41 - 2013-08-08 01:41 - 00000000 ____D C:\Users\Sandra\AppData\Local\Macromedia
2013-08-08 01:39 - 2013-08-08 01:41 - 00000000 ____D C:\Users\Sandra\AppData\Local\Adobe
2013-08-07 12:39 - 2013-08-07 12:39 - 00000783 _____ C:\Windows\ie8_main.log
2013-08-07 10:59 - 2013-06-16 14:41 - 00997632 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndis.sys
2013-08-07 10:59 - 2013-06-01 01:20 - 02219520 _____ (Microsoft Corporation) C:\Windows\System32\dwmcore.dll
2013-08-07 10:58 - 2013-06-01 03:54 - 00194816 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sdbus.sys
2013-08-07 10:58 - 2013-06-01 03:54 - 00125184 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dumpsd.sys
2013-08-07 10:58 - 2013-06-01 03:34 - 02391280 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-08-07 10:58 - 2013-06-01 03:29 - 00337152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBXHCI.SYS
2013-08-07 10:58 - 2013-06-01 03:29 - 00213248 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\UCX01000.SYS
2013-08-07 10:58 - 2013-06-01 03:26 - 06987008 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-08-07 10:58 - 2013-06-01 03:26 - 00327936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\volsnap.sys
2013-08-07 10:58 - 2013-06-01 02:24 - 02106176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-08-07 10:58 - 2013-06-01 01:25 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-08-07 10:58 - 2013-06-01 01:25 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2013-08-07 10:58 - 2013-06-01 01:24 - 01453568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2013-08-07 10:58 - 2013-06-01 01:24 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2013-08-07 10:58 - 2013-06-01 01:24 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2013-08-07 10:58 - 2013-06-01 01:23 - 01842176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2013-08-07 10:58 - 2013-06-01 01:23 - 00680960 _____ (Microsoft Corporation) C:\Windows\System32\vds.exe
2013-08-07 10:58 - 2013-06-01 01:22 - 00523264 _____ (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-08-07 10:58 - 2013-06-01 01:22 - 00446976 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-08-07 10:58 - 2013-06-01 01:22 - 00190976 _____ (Microsoft Corporation) C:\Windows\System32\vdsutil.dll
2013-08-07 10:58 - 2013-06-01 01:22 - 00080896 _____ (Microsoft Corporation) C:\Windows\System32\MbaeParserTask.exe
2013-08-07 10:58 - 2013-06-01 01:21 - 00729600 _____ (Microsoft Corporation) C:\Windows\System32\samsrv.dll
2013-08-07 10:58 - 2013-06-01 01:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\System32\samlib.dll
2013-08-07 10:58 - 2013-06-01 01:20 - 01527808 _____ (Microsoft Corporation) C:\Windows\System32\mfcore.dll
2013-08-07 10:58 - 2013-06-01 01:20 - 01048576 _____ (Microsoft Corporation) C:\Windows\System32\mfasfsrcsnk.dll
2013-08-07 10:58 - 2013-06-01 01:20 - 00583168 _____ (Microsoft Corporation) C:\Windows\System32\mscms.dll
2013-08-07 10:58 - 2013-06-01 01:19 - 00785408 _____ (Microsoft Corporation) C:\Windows\System32\audiosrv.dll
2013-08-07 10:58 - 2013-06-01 01:19 - 00207872 _____ (Microsoft Corporation) C:\Windows\System32\DeviceSetupManager.dll
2013-08-07 10:58 - 2013-05-31 19:08 - 00037632 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\BthAvrcpTg.sys
2013-08-07 10:58 - 2013-05-24 14:09 - 01403296 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi
2013-08-07 10:58 - 2013-05-24 14:09 - 01271584 _____ (Microsoft Corporation) C:\Windows\System32\winload.exe
2013-08-07 10:58 - 2013-05-24 14:09 - 01217352 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi
2013-08-07 10:58 - 2013-05-24 14:09 - 01093904 _____ (Microsoft Corporation) C:\Windows\System32\winresume.exe
2013-08-07 10:58 - 2013-05-19 16:08 - 00386642 _____ C:\Windows\System32\ApnDatabase.xml
2013-08-07 10:48 - 2012-11-19 21:24 - 01164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2013-08-07 10:48 - 2012-11-19 21:17 - 01184256 _____ (Microsoft Corporation) C:\Windows\System32\Display.dll
2013-08-07 10:48 - 2012-11-19 21:02 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDKURD.DLL
2013-08-07 10:48 - 2012-11-19 20:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDKURD.DLL
2013-08-07 10:48 - 2012-11-07 20:25 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-08-07 10:48 - 2012-11-07 20:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-08-07 10:48 - 2012-11-07 20:25 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-08-07 10:48 - 2012-11-07 20:22 - 00641536 _____ (Microsoft Corporation) C:\Windows\System32\WSShared.dll
2013-08-07 10:48 - 2012-11-07 20:22 - 00198656 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.dll
2013-08-07 10:48 - 2012-11-07 20:22 - 00163840 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-08-07 10:47 - 2012-11-26 22:39 - 01122768 _____ (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
2013-08-07 10:47 - 2012-11-26 20:49 - 01027152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Taskmgr.exe
2013-08-07 10:47 - 2012-11-26 20:20 - 01217536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2013-08-07 10:47 - 2012-11-26 20:20 - 01123840 _____ (Microsoft Corporation) C:\Windows\System32\mstsc.exe
2013-08-07 10:47 - 2012-11-26 20:20 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-08-07 10:47 - 2012-11-26 20:20 - 00798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2013-08-07 10:47 - 2012-11-26 20:20 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-08-07 10:47 - 2012-11-26 20:20 - 00560128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
2013-08-07 10:47 - 2012-11-26 20:20 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2013-08-07 10:47 - 2012-11-26 20:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vds_ps.dll
2013-08-07 10:47 - 2012-11-26 20:19 - 03245568 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorets.dll
2013-08-07 10:47 - 2012-11-26 20:19 - 01536512 _____ (Microsoft Corporation) C:\Windows\System32\storagewmi.dll
2013-08-07 10:47 - 2012-11-26 20:19 - 00955904 _____ (Microsoft Corporation) C:\Windows\System32\WebcamUi.dll
2013-08-07 10:47 - 2012-11-26 20:19 - 00631808 _____ (Microsoft Corporation) C:\Windows\System32\UserLanguagesCpl.dll
2013-08-07 10:47 - 2012-11-26 20:19 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-08-07 10:47 - 2012-11-26 20:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\System32\wpnapps.dll
2013-08-07 10:47 - 2012-11-26 20:18 - 01071104 _____ (Microsoft Corporation) C:\Windows\System32\IKEEXT.DLL
2013-08-07 10:47 - 2012-11-26 20:18 - 00888832 _____ (Microsoft Corporation) C:\Windows\System32\nshwfp.dll
2013-08-07 10:47 - 2012-11-26 20:18 - 00378880 _____ (Microsoft Corporation) C:\Windows\System32\FWPUCLNT.DLL
2013-08-07 10:47 - 2012-11-26 20:17 - 00718848 _____ (Microsoft Corporation) C:\Windows\System32\BFE.DLL
2013-08-07 10:47 - 2012-09-10 21:28 - 00023552 _____ (Microsoft Corporation) C:\Windows\System32\vdsldr.exe
2013-08-07 10:47 - 2012-09-10 21:27 - 00120832 _____ (Microsoft Corporation) C:\Windows\System32\vds_ps.dll
2013-08-07 10:46 - 2012-12-03 20:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\System32\sppwinob.dll
2013-08-07 10:45 - 2012-11-05 23:52 - 00277736 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\msiscsi.sys
2013-08-07 10:45 - 2012-11-05 23:33 - 01566432 _____ (Microsoft Corporation) C:\Windows\System32\ole32.dll
2013-08-07 10:45 - 2012-11-05 20:48 - 01150160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2013-08-07 10:45 - 2012-11-05 20:20 - 00883712 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2013-08-07 10:45 - 2012-11-05 20:20 - 00516608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2013-08-07 10:45 - 2012-11-05 20:20 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2013-08-07 10:45 - 2012-11-05 20:20 - 00375296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2013-08-07 10:45 - 2012-11-05 20:20 - 00314880 _____ (Microsoft Corporation) C:\Windows\System32\rdpclip.exe
2013-08-07 10:45 - 2012-11-05 20:20 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2013-08-07 10:45 - 2012-11-05 20:20 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 08552448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 01386496 _____ (Microsoft Corporation) C:\Windows\System32\wlansvc.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 00710656 _____ (Microsoft Corporation) C:\Windows\System32\winhttp.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 00470016 _____ (Microsoft Corporation) C:\Windows\System32\wlanmsm.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 00466944 _____ (Microsoft Corporation) C:\Windows\System32\wcncsvc.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 00446464 _____ (Microsoft Corporation) C:\Windows\System32\wlansec.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 00273408 _____ (Microsoft Corporation) C:\Windows\System32\wlanapi.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 00126976 _____ (Microsoft Corporation) C:\Windows\System32\WcnApi.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\wfdprov.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 00027136 _____ (Microsoft Corporation) C:\Windows\System32\WcnEapPeerProxy.dll
2013-08-07 10:45 - 2012-11-05 20:19 - 00026624 _____ (Microsoft Corporation) C:\Windows\System32\WcnEapAuthProxy.dll
2013-08-07 10:45 - 2012-11-05 20:18 - 11459584 _____ (Microsoft Corporation) C:\Windows\System32\glcndFilter.dll
2013-08-07 10:45 - 2012-11-05 20:18 - 01037312 _____ (Microsoft Corporation) C:\Windows\System32\localspl.dll
2013-08-07 10:45 - 2012-11-05 20:18 - 00976384 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-08-07 10:45 - 2012-11-05 20:18 - 00189440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
2013-08-07 10:45 - 2012-11-05 20:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\System32\MFCaptureEngine.dll
2013-08-07 10:45 - 2012-11-05 20:18 - 00102400 _____ (Microsoft Corporation) C:\Windows\System32\fdWCN.dll
2013-08-07 10:45 - 2012-11-05 20:18 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll
2013-08-07 10:45 - 2012-11-05 20:17 - 00212992 _____ (Microsoft Corporation) C:\Windows\System32\bthprops.cpl
2013-08-07 10:45 - 2012-11-05 20:17 - 00110080 _____ (Microsoft Corporation) C:\Windows\System32\dafWCN.dll
2013-08-07 10:45 - 2012-11-05 19:53 - 00560640 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-08-07 10:45 - 2012-11-05 19:51 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-08-07 10:44 - 2012-11-05 20:20 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2013-08-07 10:44 - 2012-11-05 20:00 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\iscsilog.dll
2013-08-07 10:44 - 2012-11-05 19:58 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\wlanhlp.dll
2013-08-07 10:44 - 2012-11-05 19:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2013-08-07 10:44 - 2012-11-05 19:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\amdk8.sys
2013-08-07 10:44 - 2012-11-05 19:55 - 00089088 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelppm.sys
2013-08-07 10:44 - 2012-11-05 19:55 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\amdppm.sys
2013-08-07 10:44 - 2012-11-05 19:55 - 00087552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\processr.sys
2013-08-07 10:44 - 2012-11-05 19:55 - 00022528 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\fxppm.sys
2013-08-05 08:59 - 2013-08-05 08:59 - 00015360 ___SH C:\Users\Sandra\Downloads\Thumbs.db
2013-08-03 01:01 - 2013-08-03 01:01 - 00000000 ____D C:\Users\Sandra\AppData\Local\Mozilla
2013-08-03 00:59 - 2013-08-24 13:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-03 00:59 - 2013-08-03 00:59 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-03 00:59 - 2013-08-03 00:59 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-03 00:55 - 2013-08-03 00:56 - 00003542 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-07-30 03:29 - 2013-05-15 14:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\System32\tssdisai.dll
2013-07-30 03:14 - 2013-06-27 14:04 - 00693112 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-30 03:14 - 2013-06-27 14:04 - 00078200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-30 02:20 - 2013-08-03 00:55 - 00000000 ___RD C:\Windows\BrowserChoice
2013-07-30 01:39 - 2013-08-19 00:20 - 78161360 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-07-29 11:57 - 2013-07-29 11:57 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Avira
2013-07-29 11:53 - 2013-08-03 01:03 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Mozilla
2013-07-29 11:53 - 2013-07-29 11:53 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-29 11:53 - 2013-07-29 11:53 - 00000000 ____D C:\ProgramData\APN
2013-07-29 11:53 - 2013-07-29 11:53 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-07-29 11:51 - 2013-08-25 02:23 - 00003822 _____ C:\Windows\SysWOW64\bufferpool.txt
2013-07-29 11:51 - 2013-07-29 11:51 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-29 11:51 - 2013-07-29 11:51 - 00000000 ____D C:\ProgramData\Avira
2013-07-29 11:51 - 2013-07-29 11:51 - 00000000 ____D C:\Program Files (x86)\Avira
2013-07-29 11:51 - 2013-07-29 11:45 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-07-29 11:51 - 2013-07-29 11:45 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2013-07-29 11:51 - 2013-07-29 11:45 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2013-07-29 11:51 - 2013-07-29 11:45 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avkmgr.sys
2013-07-29 11:33 - 2013-07-29 11:33 - 00411368 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\deployJava1.dll
2013-07-29 11:33 - 2013-07-29 11:33 - 00153376 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaws.exe
2013-07-29 11:33 - 2013-07-29 11:33 - 00145184 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaw.exe
2013-07-29 11:33 - 2013-07-29 11:33 - 00145184 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\java.exe
2013-07-29 11:33 - 2013-07-29 11:33 - 00000000 ____D C:\ProgramData\Sun
2013-07-29 11:33 - 2013-07-29 11:33 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-29 04:56 - 2013-07-29 04:56 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-07-29 01:31 - 2013-04-02 15:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-07-29 01:31 - 2013-04-02 15:12 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-07-29 01:31 - 2012-10-23 19:25 - 00026624 _____ (Microsoft Corporation) C:\Windows\System32\ReAgentc.exe
2013-07-29 01:31 - 2012-10-23 19:25 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\pcalua.exe
2013-07-29 01:31 - 2012-10-23 19:24 - 00405504 _____ (Microsoft Corporation) C:\Windows\System32\pcasvc.dll
2013-07-29 01:31 - 2012-10-23 19:24 - 00031232 _____ (Microsoft Corporation) C:\Windows\System32\pcadm.dll
2013-07-29 01:31 - 2012-10-23 19:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\System32\pcaevts.dll
2013-07-29 01:31 - 2012-10-23 18:48 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2013-07-29 01:30 - 2013-03-21 19:49 - 02382336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2013-07-29 01:30 - 2013-03-21 14:47 - 02851840 _____ (Microsoft Corporation) C:\Windows\System32\esent.dll
2013-07-29 01:30 - 2013-03-02 00:23 - 00375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2013-07-29 01:30 - 2013-03-01 18:44 - 01011200 _____ (Microsoft Corporation) C:\Windows\System32\reseteng.dll
2013-07-29 01:30 - 2012-12-14 20:55 - 00443392 _____ (Microsoft Corporation) C:\Windows\System32\ReAgent.dll
2013-07-29 01:30 - 2012-11-02 21:26 - 00132096 _____ (Microsoft Corporation) C:\Windows\System32\sysreset.exe
2013-07-29 01:30 - 2012-11-02 21:25 - 00945152 _____ (Microsoft Corporation) C:\Windows\System32\resetengmig.dll
2013-07-28 23:34 - 2013-01-09 17:53 - 00028904 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\msgpiowin32.sys
2013-07-28 23:34 - 2013-01-09 17:29 - 00785504 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys
2013-07-28 23:34 - 2013-01-09 17:29 - 00091880 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\partmgr.sys
2013-07-28 23:34 - 2013-01-09 15:26 - 01752064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2013-07-28 23:34 - 2013-01-09 15:26 - 01611776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2013-07-28 23:34 - 2013-01-09 15:26 - 00890880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2013-07-28 23:34 - 2013-01-09 15:26 - 00436736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2013-07-28 23:34 - 2013-01-09 15:26 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2013-07-28 23:34 - 2013-01-09 15:26 - 00083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiaacmgr.exe
2013-07-28 23:34 - 2013-01-09 15:23 - 02094592 _____ (Microsoft Corporation) C:\Windows\System32\mmc.exe
2013-07-28 23:34 - 2013-01-09 15:23 - 01964544 _____ (Microsoft Corporation) C:\Windows\System32\wlidsvc.dll
2013-07-28 23:34 - 2013-01-09 15:23 - 01886208 _____ (Microsoft Corporation) C:\Windows\System32\setupapi.dll
2013-07-28 23:34 - 2013-01-09 15:23 - 00406016 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Media.dll
2013-07-28 23:34 - 2013-01-09 15:23 - 00256000 _____ (Microsoft Corporation) C:\Windows\System32\WSDMon.dll
2013-07-28 23:34 - 2013-01-09 15:23 - 00095232 _____ (Microsoft Corporation) C:\Windows\System32\wiaacmgr.exe
2013-07-28 23:34 - 2013-01-09 15:22 - 01120768 _____ (Microsoft Corporation) C:\Windows\System32\msctf.dll
2013-07-28 23:34 - 2013-01-09 15:22 - 00894464 _____ (Microsoft Corporation) C:\Windows\System32\iphlpsvc.dll
2013-07-28 23:34 - 2013-01-09 15:22 - 00666112 _____ (Microsoft Corporation) C:\Windows\System32\MP4SDECD.DLL
2013-07-28 23:34 - 2013-01-09 15:22 - 00438272 _____ (Microsoft Corporation) C:\Windows\System32\lsm.dll
2013-07-28 23:34 - 2013-01-09 15:22 - 00159232 _____ (Microsoft Corporation) C:\Windows\System32\inetpp.dll
2013-07-28 23:34 - 2013-01-08 19:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\HdAudio.sys
2013-07-28 23:34 - 2012-11-01 21:19 - 00171520 _____ (Microsoft Corporation) C:\Windows\System32\ncbservice.dll
2013-07-28 23:34 - 2012-11-01 21:18 - 00107520 _____ (Microsoft Corporation) C:\Windows\System32\httpprxm.dll
2013-07-28 23:34 - 2012-11-01 21:18 - 00062464 _____ (Microsoft Corporation) C:\Windows\System32\adhsvc.dll
2013-07-28 23:34 - 2012-11-01 21:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\System32\adhapi.dll
2013-07-28 23:34 - 2012-11-01 21:18 - 00017920 _____ (Microsoft Corporation) C:\Windows\System32\httpprxp.dll
2013-07-28 23:34 - 2012-11-01 21:18 - 00015872 _____ (Microsoft Corporation) C:\Windows\System32\keepaliveprovider.dll
2013-07-28 23:31 - 2013-05-03 23:58 - 00120736 _____ (Microsoft Corporation) C:\Windows\System32\AuthHost.exe
2013-07-28 23:31 - 2013-05-03 23:34 - 00446720 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBHUB3.SYS
2013-07-28 23:31 - 2013-05-03 23:34 - 00284416 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys
2013-07-28 23:31 - 2013-05-03 23:30 - 00058312 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2013-07-28 23:31 - 2013-05-03 22:59 - 13644288 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll
2013-07-28 23:31 - 2013-05-03 22:59 - 03241472 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2013-07-28 23:31 - 2013-05-03 22:59 - 01619968 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2013-07-28 23:31 - 2013-05-03 22:59 - 01483776 _____ (Microsoft Corporation) C:\Windows\System32\VSSVC.exe
2013-07-28 23:31 - 2013-05-03 22:59 - 00812544 _____ (Microsoft Corporation) C:\Windows\System32\Magnify.exe
2013-07-28 23:31 - 2013-05-03 22:59 - 00760320 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2013-07-28 23:31 - 2013-05-03 22:59 - 00251904 _____ (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll
2013-07-28 23:31 - 2013-05-03 22:59 - 00141824 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2013-07-28 23:31 - 2013-05-03 22:59 - 00098304 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2013-07-28 23:31 - 2013-05-03 22:59 - 00039424 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2013-07-28 23:31 - 2013-05-03 22:58 - 10116096 _____ (Microsoft Corporation) C:\Windows\System32\twinui.dll
2013-07-28 23:31 - 2013-05-03 22:58 - 01332736 _____ (Microsoft Corporation) C:\Windows\System32\sysmain.dll
2013-07-28 23:31 - 2013-05-03 22:58 - 00470528 _____ (Microsoft Corporation) C:\Windows\System32\netprofmsvc.dll
2013-07-28 23:31 - 2013-05-03 22:58 - 00330240 _____ (Microsoft Corporation) C:\Windows\System32\stobject.dll
2013-07-28 23:31 - 2013-05-03 22:58 - 00328192 _____ (Microsoft Corporation) C:\Windows\System32\ubpm.dll
2013-07-28 23:31 - 2013-05-03 22:58 - 00173568 _____ (Microsoft Corporation) C:\Windows\System32\storewuauth.dll
2013-07-28 23:31 - 2013-05-03 22:58 - 00169984 _____ (Microsoft Corporation) C:\Windows\System32\netplwiz.dll
2013-07-28 23:31 - 2013-05-03 22:58 - 00151552 _____ (Microsoft Corporation) C:\Windows\System32\netprofm.dll
2013-07-28 23:31 - 2013-05-03 22:58 - 00093696 _____ (Microsoft Corporation) C:\Windows\System32\psmsrv.dll
2013-07-28 23:31 - 2013-05-03 22:57 - 02305024 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-07-28 23:31 - 2013-05-03 22:57 - 01131520 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentServer.dll
2013-07-28 23:31 - 2013-05-03 22:57 - 00708096 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentExtensions.dll
2013-07-28 23:31 - 2013-05-03 22:57 - 00560640 _____ (Microsoft Corporation) C:\Windows\System32\mfmp4srcsnk.dll
2013-07-28 23:31 - 2013-05-03 22:57 - 00501760 _____ (Microsoft Corporation) C:\Windows\System32\DevicePairing.dll
2013-07-28 23:31 - 2013-05-03 22:57 - 00389120 _____ (Microsoft Corporation) C:\Windows\System32\BCP47Langs.dll
2013-07-28 23:31 - 2013-05-03 22:57 - 00179712 _____ (Microsoft Corporation) C:\Windows\System32\bisrv.dll
2013-07-28 23:31 - 2013-05-03 22:57 - 00122368 _____ (Microsoft Corporation) C:\Windows\System32\biwinrt.dll
2013-07-28 23:31 - 2013-05-03 22:57 - 00017408 _____ (Microsoft Corporation) C:\Windows\System32\muifontsetup.dll
2013-07-28 23:31 - 2013-05-03 22:56 - 00419840 _____ (Microsoft Corporation) C:\Windows\System32\intl.cpl
2013-07-28 23:31 - 2013-05-03 20:58 - 00758784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Magnify.exe
2013-07-28 23:31 - 2013-05-03 20:58 - 00621056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-07-28 23:31 - 2013-05-03 20:58 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-07-28 23:31 - 2013-05-03 20:58 - 00083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-07-28 23:31 - 2013-05-03 20:58 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-07-28 23:31 - 2013-05-03 20:57 - 10788864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2013-07-28 23:31 - 2013-05-03 20:57 - 08857088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-07-28 23:31 - 2013-05-03 20:57 - 00303616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2013-07-28 23:31 - 2013-05-03 20:57 - 00247296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2013-07-28 23:31 - 2013-05-03 20:57 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
2013-07-28 23:31 - 2013-05-03 20:57 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netprofm.dll
2013-07-28 23:31 - 2013-05-03 20:57 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2013-07-28 23:31 - 2013-05-03 20:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\muifontsetup.dll
2013-07-28 23:31 - 2013-05-03 20:56 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-07-28 23:31 - 2013-05-03 20:56 - 00449536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2013-07-28 23:31 - 2013-05-03 20:56 - 00411136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2013-07-28 23:31 - 2013-05-03 20:56 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BCP47Langs.dll
2013-07-28 23:31 - 2013-05-03 20:56 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\biwinrt.dll
2013-07-28 23:31 - 2013-05-03 20:55 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl
2013-07-28 23:31 - 2013-05-03 20:51 - 00014848 _____ (Microsoft) C:\Windows\System32\rars.rs
2013-07-28 23:31 - 2013-05-03 20:47 - 00427520 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdbss.sys
2013-07-28 23:31 - 2013-05-03 20:10 - 00014848 _____ (Microsoft) C:\Windows\SysWOW64\rars.rs
2013-07-28 23:31 - 2013-03-01 18:45 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\taskhost.exe
2013-07-28 23:31 - 2013-03-01 18:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\System32\taskhostex.exe
2013-07-28 23:31 - 2013-03-01 18:45 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2013-07-28 23:31 - 2013-02-02 00:39 - 00015872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlmproxy.dll
2013-07-28 23:31 - 2013-02-02 00:39 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlmsprep.dll
2013-07-28 23:31 - 2012-11-05 20:20 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2013-07-28 23:31 - 2012-11-05 20:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\System32\wuaext.dll
2013-07-28 23:31 - 2012-11-05 20:00 - 00099328 _____ (Microsoft Corporation) C:\Windows\System32\wushareduxresources.dll
2013-07-28 23:30 - 2013-05-30 15:24 - 01257472 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-07-28 23:30 - 2013-05-30 15:08 - 00974848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-07-28 23:30 - 2013-05-14 18:25 - 00888320 _____ (Microsoft Corporation) C:\Windows\System32\autochk.exe
2013-07-28 23:30 - 2013-05-14 18:25 - 00542208 _____ (Microsoft Corporation) C:\Windows\System32\untfs.dll
2013-07-28 23:30 - 2013-05-14 18:24 - 00793088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2013-07-28 23:30 - 2013-05-14 18:24 - 00482816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2013-07-28 23:30 - 2013-03-02 02:57 - 00332520 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\storport.sys
2013-07-28 23:30 - 2013-03-02 02:39 - 00327912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Classpnp.sys
2013-07-28 23:30 - 2013-03-02 00:23 - 01338880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-07-28 23:30 - 2013-03-02 00:22 - 05091840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-07-28 23:30 - 2013-03-02 00:22 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2013-07-28 23:30 - 2013-03-01 18:45 - 01627648 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-07-28 23:30 - 2013-03-01 18:45 - 01161728 _____ (Microsoft Corporation) C:\Windows\System32\sppobjs.dll
2013-07-28 23:30 - 2013-03-01 18:45 - 01149952 _____ (Microsoft Corporation) C:\Windows\System32\winmde.dll
2013-07-28 23:30 - 2013-03-01 18:45 - 01101824 _____ (Microsoft Corporation) C:\Windows\System32\wmpmde.dll
2013-07-28 23:30 - 2013-03-01 18:45 - 00951808 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Globalization.dll
2013-07-28 23:30 - 2013-03-01 18:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll
2013-07-28 23:30 - 2013-03-01 18:45 - 00180224 _____ (Microsoft Corporation) C:\Windows\System32\SystemEventsBrokerServer.dll
2013-07-28 23:30 - 2013-03-01 18:45 - 00171008 _____ (Microsoft Corporation) C:\Windows\System32\TimeBrokerServer.dll
2013-07-28 23:30 - 2013-03-01 18:44 - 05978624 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-07-28 23:30 - 2013-02-28 20:55 - 01175040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\bthport.sys
2013-07-28 23:29 - 2013-05-23 15:01 - 01300992 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2013-07-28 23:29 - 2013-05-23 14:27 - 01022464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-07-28 23:29 - 2013-03-02 02:57 - 00077544 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\storahci.sys
2013-07-28 23:29 - 2013-03-02 02:45 - 00148712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tpm.sys
2013-07-28 23:29 - 2013-03-02 02:39 - 00495336 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\vhdmp.sys
2013-07-28 23:29 - 2013-03-02 00:23 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2013-07-28 23:29 - 2013-03-02 00:23 - 00601088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2013-07-28 23:29 - 2013-03-02 00:23 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2013-07-28 23:29 - 2013-03-02 00:23 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2013-07-28 23:29 - 2013-03-02 00:23 - 00100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncInfo.dll
2013-07-28 23:29 - 2013-03-02 00:21 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2013-07-28 23:29 - 2013-03-02 00:21 - 00145408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2013-07-28 23:29 - 2013-03-02 00:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevDispItemProvider.dll
2013-07-28 23:29 - 2013-03-01 18:45 - 00245248 _____ (Microsoft Corporation) C:\Windows\System32\usbmon.dll
2013-07-28 23:29 - 2013-03-01 18:45 - 00240640 _____ (Microsoft Corporation) C:\Windows\System32\fsquirt.exe
2013-07-28 23:29 - 2013-03-01 18:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\System32\wpdbusenum.dll
2013-07-28 23:29 - 2013-03-01 18:45 - 00071168 _____ (Microsoft Corporation) C:\Windows\System32\WSDPrintProxy.DLL
2013-07-28 23:29 - 2013-03-01 18:44 - 00703488 _____ (Microsoft Corporation) C:\Windows\System32\drvstore.dll
2013-07-28 23:29 - 2013-03-01 18:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\System32\netcfgx.dll
2013-07-28 23:29 - 2013-03-01 18:44 - 00448512 _____ (Microsoft Corporation) C:\Windows\System32\SettingSync.dll
2013-07-28 23:29 - 2013-03-01 18:44 - 00150016 _____ (Microsoft Corporation) C:\Windows\System32\discan.dll
2013-07-28 23:29 - 2013-03-01 18:44 - 00128512 _____ (Microsoft Corporation) C:\Windows\System32\SettingSyncInfo.dll
2013-07-28 23:29 - 2013-03-01 18:44 - 00117248 _____ (Microsoft Corporation) C:\Windows\System32\NdisImPlatform.dll
2013-07-28 23:29 - 2013-03-01 18:44 - 00049152 _____ (Microsoft Corporation) C:\Windows\System32\DevDispItemProvider.dll
2013-07-28 23:29 - 2013-03-01 18:43 - 00156160 _____ (Microsoft Corporation) C:\Windows\System32\powercfg.cpl
2013-07-28 23:29 - 2013-03-01 18:15 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mouhid.sys
2013-07-28 23:29 - 2013-02-28 20:56 - 00156672 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rfcomm.sys
2013-07-28 23:29 - 2013-02-28 20:56 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\monitor.sys
2013-07-28 23:29 - 2013-01-08 19:59 - 00074752 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\BTHUSB.SYS
2013-07-28 23:29 - 2013-01-08 19:58 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\bthenum.sys
2013-07-28 23:22 - 2013-04-08 21:33 - 00489576 _____ (Microsoft Corporation) C:\Windows\System32\AudioEng.dll
2013-07-28 23:22 - 2013-04-08 21:33 - 00446792 _____ (Microsoft Corporation) C:\Windows\System32\AudioSes.dll
2013-07-28 23:22 - 2013-04-08 21:33 - 00253544 _____ (Microsoft Corporation) C:\Windows\System32\audiodg.exe
2013-07-28 23:22 - 2013-04-08 21:20 - 00306952 _____ (Microsoft Corporation) C:\Windows\System32\kd_02_10ec.dll
2013-07-28 23:22 - 2013-04-08 21:20 - 00086280 _____ (Microsoft Corporation) C:\Windows\System32\kdnet.dll
2013-07-28 23:22 - 2013-04-08 21:18 - 00077960 _____ (Microsoft Corporation) C:\Windows\System32\kdvm.dll
2013-07-28 23:22 - 2013-04-08 21:17 - 01829408 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-07-28 23:22 - 2013-04-08 20:52 - 00816128 _____ (Microsoft Corporation) C:\Windows\System32\SearchIndexer.exe
2013-07-28 23:22 - 2013-04-08 20:52 - 00804352 _____ (Microsoft Corporation) C:\Windows\System32\RecoveryDrive.exe
2013-07-28 23:22 - 2013-04-08 20:52 - 00373760 _____ (Microsoft Corporation) C:\Windows\System32\SearchProtocolHost.exe
2013-07-28 23:22 - 2013-04-08 20:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\SearchFilterHost.exe
2013-07-28 23:22 - 2013-04-08 20:52 - 00126464 _____ (Microsoft Corporation) C:\Windows\System32\Robocopy.exe
2013-07-28 23:22 - 2013-04-08 20:51 - 14267904 _____ (Microsoft Corporation) C:\Windows\System32\wmp.dll
2013-07-28 23:22 - 2013-04-08 20:51 - 03552768 _____ (Microsoft Corporation) C:\Windows\System32\tquery.dll
2013-07-28 23:22 - 2013-04-08 20:51 - 00595456 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Networking.dll
2013-07-28 23:22 - 2013-04-08 20:51 - 00456704 _____ (Microsoft Corporation) C:\Windows\System32\wpncore.dll
2013-07-28 23:22 - 2013-04-08 20:51 - 00391168 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Networking.BackgroundTransfer.dll
2013-07-28 23:22 - 2013-04-08 20:51 - 00367616 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-07-28 23:22 - 2013-04-08 20:51 - 00099840 _____ (Microsoft Corporation) C:\Windows\System32\wscsvc.dll
2013-07-28 23:22 - 2013-04-08 20:50 - 02107904 _____ (Microsoft Corporation) C:\Windows\System32\mssrch.dll
2013-07-28 23:22 - 2013-04-08 20:50 - 01285632 _____ (Microsoft Corporation) C:\Windows\System32\schedsvc.dll
2013-07-28 23:22 - 2013-04-08 20:50 - 00745984 _____ (Microsoft Corporation) C:\Windows\System32\mssvp.dll
2013-07-28 23:22 - 2013-04-08 20:50 - 00435200 _____ (Microsoft Corporation) C:\Windows\System32\mssph.dll
2013-07-28 23:22 - 2013-04-08 20:50 - 00422400 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2013-07-28 23:22 - 2013-04-08 20:50 - 00414720 _____ (Microsoft Corporation) C:\Windows\System32\GenuineCenter.dll
2013-07-28 23:22 - 2013-04-08 20:50 - 00096256 _____ (Microsoft Corporation) C:\Windows\System32\mssprxy.dll
2013-07-28 23:22 - 2013-04-08 20:50 - 00065024 _____ (Microsoft Corporation) C:\Windows\System32\msscntrs.dll
2013-07-28 23:22 - 2013-04-08 20:50 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\msshooks.dll
2013-07-28 23:22 - 2013-04-08 20:49 - 01444864 _____ (Microsoft Corporation) C:\Windows\System32\MSAudDecMFT.dll
2013-07-28 23:22 - 2013-04-08 20:49 - 00817152 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2013-07-28 23:22 - 2013-04-08 20:49 - 00468992 _____ (Microsoft Corporation) C:\Windows\System32\MFMediaEngine.dll
2013-07-28 23:22 - 2013-04-08 20:49 - 00281088 _____ (Microsoft Corporation) C:\Windows\System32\mfreadwrite.dll
2013-07-28 23:22 - 2013-04-08 20:49 - 00231936 _____ (Microsoft Corporation) C:\Windows\System32\fhengine.dll
2013-07-28 23:22 - 2013-04-08 20:49 - 00210432 _____ (Microsoft Corporation) C:\Windows\System32\iuilp.dll
2013-07-28 23:22 - 2013-04-08 20:49 - 00196096 _____ (Microsoft Corporation) C:\Windows\System32\dmvdsitf.dll
2013-07-28 23:22 - 2013-04-08 20:49 - 00172544 _____ (Microsoft Corporation) C:\Windows\System32\dwmredir.dll
2013-07-28 23:22 - 2013-04-08 20:49 - 00050176 _____ (Microsoft Corporation) C:\Windows\System32\fmifs.dll
2013-07-28 23:22 - 2013-04-08 20:48 - 00169472 _____ (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll
2013-07-28 23:22 - 2013-04-08 18:34 - 00095744 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidbth.sys
2013-07-28 23:22 - 2013-04-08 18:34 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2013-07-28 23:22 - 2013-04-08 18:34 - 00027648 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidusb.sys
2013-07-28 23:22 - 2013-04-08 18:33 - 00623104 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys
2013-07-28 23:22 - 2013-04-08 18:33 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndproxy.sys
2013-07-28 23:22 - 2013-04-08 18:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\PEAuth.sys
2013-07-28 23:22 - 2013-04-08 18:31 - 00247808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys
2013-07-28 23:22 - 2013-04-08 18:31 - 00083456 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wanarp.sys
2013-07-28 23:22 - 2013-04-08 15:44 - 00123880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2013-07-28 23:22 - 2013-04-08 15:39 - 01408896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-07-28 23:22 - 2013-04-08 15:37 - 00426024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2013-07-28 23:22 - 2013-04-08 15:37 - 00324368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2013-07-28 23:22 - 2013-04-08 13:52 - 11878912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-07-28 23:22 - 2013-04-08 13:52 - 00670208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-07-28 23:22 - 2013-04-08 13:52 - 00302592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-07-28 23:22 - 2013-04-08 13:52 - 00171008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-07-28 23:22 - 2013-04-08 13:52 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe
2013-07-28 23:22 - 2013-04-08 13:51 - 02767360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 01593344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 01113600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAudDecMFT.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00659456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00411136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00403968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00214528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fmifs.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2013-07-28 23:22 - 2013-04-08 13:51 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2013-07-28 23:22 - 2013-04-04 15:30 - 00503080 _____ (Microsoft Corporation) C:\Windows\System32\ci.dll
2013-07-28 23:22 - 2013-03-15 14:05 - 00298456 _____ (Microsoft Corporation) C:\Windows\System32\rsaenh.dll
2013-07-28 23:22 - 2013-03-15 14:05 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2013-07-28 23:22 - 2013-03-02 02:39 - 00069864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\pdc.sys
2013-07-28 23:22 - 2013-03-01 18:43 - 02146304 _____ (Microsoft Corporation) C:\Windows\System32\actxprxy.dll
2013-07-28 23:22 - 2013-02-06 17:33 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2013-07-28 23:22 - 2013-02-02 00:40 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll
2013-07-28 23:22 - 2013-02-02 00:23 - 00228352 _____ (Microsoft Corporation) C:\Windows\System32\XpsRasterService.dll
2013-07-28 23:22 - 2013-01-09 17:40 - 00303848 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-07-28 23:22 - 2012-12-12 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-07-28 23:22 - 2012-12-12 19:59 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-07-28 23:22 - 2012-11-19 20:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidi2c.sys
2013-07-28 23:22 - 2012-11-05 23:33 - 00522640 _____ (Microsoft Corporation) C:\Windows\System32\AUDIOKSE.dll
2013-07-28 23:22 - 2012-11-05 21:00 - 00463768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2013-07-28 23:22 - 2012-11-05 20:18 - 00267264 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll
2013-07-28 23:12 - 2012-04-20 06:40 - 00196440 _____ (McAfee, Inc.) C:\Windows\System32\Drivers\HipShieldK.sys
2013-07-28 22:05 - 2013-04-15 18:34 - 01455368 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-07-28 22:05 - 2012-11-25 20:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2013-07-28 22:05 - 2012-11-25 20:20 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\ncryptsslp.dll
2013-07-28 22:04 - 2012-11-09 20:23 - 00148480 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2013-07-28 22:04 - 2012-11-09 20:23 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-07-28 22:04 - 2012-11-09 20:22 - 00126976 _____ (Microsoft Corporation) C:\Windows\System32\RDWebAI.dll
2013-07-28 22:04 - 2012-11-09 20:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\System32\VmHostAI.dll
2013-07-28 22:04 - 2012-11-09 20:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\appserverai.dll
2013-07-28 22:00 - 2013-05-30 15:14 - 04036096 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-07-28 22:00 - 2013-03-02 01:59 - 00411880 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2013-07-28 21:59 - 2013-04-23 15:13 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-07-28 21:59 - 2013-04-23 15:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-07-28 21:59 - 2013-04-23 14:56 - 01255936 _____ (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-07-28 21:59 - 2013-04-23 14:55 - 00141312 _____ (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-07-28 21:57 - 2013-06-01 01:25 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-28 21:57 - 2013-06-01 01:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
2013-07-28 21:52 - 2013-02-02 03:19 - 00496872 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys
2013-07-28 21:52 - 2013-02-02 03:19 - 00061672 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\crashdmp.sys
2013-07-28 21:52 - 2013-02-02 02:54 - 01933544 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-07-28 21:52 - 2013-02-02 00:40 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlroamextension.dll
2013-07-28 21:52 - 2013-02-02 00:40 - 00370688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll
2013-07-28 21:52 - 2013-02-02 00:40 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2013-07-28 21:52 - 2013-02-02 00:40 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tasklist.exe
2013-07-28 21:52 - 2013-02-02 00:40 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskkill.exe
2013-07-28 21:52 - 2013-02-02 00:39 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2013-07-28 21:52 - 2013-02-02 00:39 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-07-28 21:52 - 2013-02-02 00:38 - 00567808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\duser.dll
2013-07-28 21:52 - 2013-02-02 00:24 - 00107520 _____ (Microsoft Corporation) C:\Windows\System32\taskkill.exe
2013-07-28 21:52 - 2013-02-02 00:24 - 00102400 _____ (Microsoft Corporation) C:\Windows\System32\tasklist.exe
2013-07-28 21:52 - 2013-02-02 00:23 - 00611840 _____ (Microsoft Corporation) C:\Windows\System32\wpd_ci.dll
2013-07-28 21:52 - 2013-02-02 00:23 - 00543232 _____ (Microsoft Corporation) C:\Windows\System32\wlroamextension.dll
2013-07-28 21:52 - 2013-02-02 00:23 - 00475136 _____ (Microsoft Corporation) C:\Windows\System32\WWanAPI.dll
2013-07-28 21:52 - 2013-02-02 00:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Networking.Connectivity.dll
2013-07-28 21:52 - 2013-02-02 00:23 - 00087552 _____ (Microsoft Corporation) C:\Windows\System32\wersvc.dll
2013-07-28 21:52 - 2013-02-02 00:21 - 00385024 _____ (Microsoft Corporation) C:\Windows\System32\ncsi.dll
2013-07-28 21:52 - 2013-02-02 00:21 - 00225280 _____ (Microsoft Corporation) C:\Windows\System32\mbsmsapi.dll
2013-07-28 21:52 - 2013-02-02 00:20 - 00729600 _____ (Microsoft Corporation) C:\Windows\System32\duser.dll
2013-07-28 21:52 - 2013-02-02 00:20 - 00260096 _____ (Microsoft Corporation) C:\Windows\System32\hotspotauth.dll
2013-07-28 21:52 - 2013-02-01 23:25 - 00297984 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ks.sys
2013-07-28 21:52 - 2012-11-26 19:57 - 00018432 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\BtaMPM.sys
2013-07-28 21:52 - 2012-11-26 19:55 - 00029952 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\BthhfHid.sys
2013-07-28 21:52 - 2012-11-19 20:56 - 00027136 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbohci.sys
2013-07-28 21:51 - 2013-02-05 14:29 - 00370688 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2013-07-28 21:51 - 2013-02-05 14:28 - 00215552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2013-07-28 21:50 - 2013-02-01 21:41 - 01437184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2013-07-28 21:50 - 2013-02-01 21:31 - 01690624 _____ (Microsoft Corporation) C:\Windows\System32\GdiPlus.dll
2013-07-28 21:49 - 2013-04-11 14:30 - 01421312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-28 21:49 - 2013-04-11 14:22 - 01838080 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-07-28 21:48 - 2013-03-05 22:31 - 19758592 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-07-28 21:48 - 2013-02-11 16:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys
2013-07-28 21:47 - 2013-05-03 22:59 - 02842112 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
2013-07-28 21:47 - 2013-05-03 20:57 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-28 21:47 - 2013-03-05 23:10 - 00112872 _____ (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-07-28 21:47 - 2013-03-05 22:31 - 00222208 _____ (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-07-28 21:47 - 2013-03-05 22:29 - 00070144 _____ (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-07-28 21:47 - 2013-03-05 21:03 - 17561600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-07-28 21:47 - 2013-03-05 21:03 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-07-28 21:46 - 2013-04-26 21:20 - 00733184 _____ (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-07-28 21:44 - 2012-11-02 21:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\System32\dpnsvr.exe
2013-07-28 21:44 - 2012-11-02 21:26 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe
2013-07-28 21:44 - 2012-11-02 21:24 - 00463872 _____ (Microsoft Corporation) C:\Windows\System32\dpnet.dll
2013-07-28 21:44 - 2012-11-02 21:24 - 00375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-07-28 21:44 - 2012-11-02 21:24 - 00067584 _____ (Microsoft Corporation) C:\Windows\System32\dpnathlp.dll
2013-07-28 21:44 - 2012-11-02 21:24 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll
2013-07-28 21:44 - 2012-11-02 21:24 - 00009216 _____ (Microsoft Corporation) C:\Windows\System32\dpnhupnp.dll
2013-07-28 21:44 - 2012-11-02 21:24 - 00009216 _____ (Microsoft Corporation) C:\Windows\System32\dpnhpast.dll
2013-07-28 21:44 - 2012-11-02 21:24 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll
2013-07-28 21:44 - 2012-11-02 21:24 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll
2013-07-28 21:44 - 2012-11-02 21:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\dpnlobby.dll
2013-07-28 21:44 - 2012-11-02 21:04 - 00003584 _____ (Microsoft Corporation) C:\Windows\System32\dpnaddr.dll
2013-07-28 21:44 - 2012-11-02 21:00 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnlobby.dll
2013-07-28 21:44 - 2012-11-02 21:00 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnaddr.dll
2013-07-28 21:44 - 2012-10-31 20:41 - 01802240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-07-28 21:44 - 2012-10-31 20:41 - 01438720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-07-28 21:44 - 2012-10-31 20:40 - 02361344 _____ (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2013-07-28 21:44 - 2012-10-31 20:40 - 01836032 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2013-07-28 21:44 - 2012-10-31 20:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml6r.dll
2013-07-28 21:44 - 2012-10-31 20:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2013-07-28 21:44 - 2012-10-31 20:20 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2013-07-28 21:44 - 2012-10-31 20:20 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-07-28 21:43 - 2013-03-14 16:17 - 00861184 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\http.sys
2013-07-28 21:43 - 2012-12-16 00:28 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-07-28 21:43 - 2012-12-16 00:20 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-07-28 21:43 - 2012-12-16 00:08 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-07-28 21:43 - 2012-12-15 23:57 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-07-28 21:43 - 2012-11-07 20:24 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-07-28 21:43 - 2012-11-07 20:24 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-07-28 21:43 - 2012-11-07 20:20 - 00096256 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2013-07-28 21:43 - 2012-11-07 20:20 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2013-07-28 21:43 - 2012-11-07 20:02 - 00003072 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2013-07-28 21:43 - 2012-11-07 20:01 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Programme
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-07-27 10:06 - 2013-07-27 10:06 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2013-07-27 10:00 - 2013-07-27 10:00 - 00000000 ____D C:\Users\Sandra\AppData\Local\EgisTec IPS
2013-07-27 09:57 - 2013-08-25 03:42 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-670448937-171419631-3567303464-1001
2013-07-27 09:53 - 2013-07-27 09:53 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Atheros
2013-07-27 09:52 - 2013-07-27 09:52 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-07-27 09:52 - 2013-07-27 09:52 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Macromedia
2013-07-27 09:51 - 2013-07-27 09:51 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\lm
2013-07-27 09:51 - 2013-07-27 09:51 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Adobe
2013-07-27 09:50 - 2013-08-25 02:05 - 00000000 ____D C:\users\Sandra
2013-07-27 09:50 - 2013-08-24 13:30 - 01962505 _____ C:\Windows\WindowsUpdate.log
2013-07-27 09:50 - 2013-08-03 00:55 - 00000000 ____D C:\Users\Sandra\AppData\Local\Packages
2013-07-27 09:50 - 2013-07-27 09:50 - 00000020 ___SH C:\Users\Sandra\ntuser.ini
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Vorlagen
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Startmenü
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Netzwerkumgebung
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Lokale Einstellungen
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Eigene Dateien
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Druckumgebung
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Documents\Eigene Musik
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Documents\Eigene Bilder
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\AppData\Local\Verlauf
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\AppData\Local\Anwendungsdaten
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Anwendungsdaten
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 ____D C:\Users\Sandra\AppData\Local\VirtualStore

==================== One Month Modified Files and Folders =======

2013-08-25 04:46 - 2013-08-10 01:57 - 00000000 ____D C:\ProgramData\Datamngr
2013-08-25 03:42 - 2013-07-27 09:57 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-670448937-171419631-3567303464-1001
2013-08-25 03:41 - 2013-02-04 14:19 - 00753134 _____ C:\Windows\System32\perfh007.dat
2013-08-25 03:41 - 2013-02-04 14:19 - 00155826 _____ C:\Windows\System32\perfc007.dat
2013-08-25 03:41 - 2012-07-25 23:28 - 01745416 _____ C:\Windows\System32\PerfStringBackup.INI
2013-08-25 03:36 - 2012-12-24 09:48 - 00053284 _____ C:\Windows\System32\wpbbin.exe
2013-08-25 03:36 - 2012-07-25 23:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-25 02:23 - 2013-07-29 11:51 - 00003822 _____ C:\Windows\SysWOW64\bufferpool.txt
2013-08-25 02:05 - 2013-08-25 02:05 - 00275576 _____ (Корпорация Майкрософт) C:\Users\Sandra\teamviewer.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00275576 _____ (Корпорация Майкрософт) C:\Users\Sandra\java.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000165 _____ C:\ProgramData\jgqubpaypdelyptpbjm.reg
2013-08-25 02:05 - 2013-08-25 02:05 - 00000070 _____ C:\ProgramData\jgqubpaypdelyptpbjm.bat
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 ____D C:\Users\Sandra\AppData\Local\CrashDumps
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\winlogon.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\skype.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\iexplore.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\icq.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\firefox.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\ctfmon.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\conhost.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\chrome.exe
2013-08-25 02:05 - 2013-07-27 09:50 - 00000000 ____D C:\users\Sandra
2013-08-25 02:02 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\sru
2013-08-24 13:44 - 2012-07-25 21:26 - 00262144 ___SH C:\Windows\System32\config\ELAM
2013-08-24 13:40 - 2013-08-03 00:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-24 13:40 - 2012-12-24 11:08 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-08-24 13:40 - 2012-12-24 09:48 - 00023614 _____ C:\Windows\PFRO.log
2013-08-24 13:37 - 2013-07-27 09:50 - 01962505 _____ C:\Windows\WindowsUpdate.log
2013-08-24 02:21 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-08-20 04:17 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\rescache
2013-08-19 01:24 - 2013-08-19 01:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-19 00:27 - 2012-07-25 21:26 - 00262144 ___SH C:\Windows\System32\config\BBI
2013-08-19 00:24 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-19 00:24 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-19 00:22 - 2013-08-08 11:40 - 00000000 ____D C:\Windows\System32\MRT
2013-08-19 00:20 - 2013-07-30 01:39 - 78161360 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-08-19 00:16 - 2013-08-19 00:15 - 00014848 ___SH C:\Users\Sandra\Desktop\Thumbs.db
2013-08-18 22:35 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\NDF
2013-08-16 14:01 - 2013-08-16 13:43 - 00000000 ____D C:\Users\Sandra\Documents\Hochzeit Susanne u. Johannes
2013-08-16 13:43 - 2013-08-16 13:43 - 00000000 ____D C:\Users\Sandra\AppData\Local\clear.fi
2013-08-16 13:42 - 2013-08-10 09:06 - 00000000 ____D C:\Users\Sandra\AppData\Local\Deployment
2013-08-13 02:36 - 2013-08-13 02:36 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-08-13 02:36 - 2012-07-25 23:21 - 00026188 _____ C:\Windows\setupact.log
2013-08-12 23:20 - 2013-08-12 23:20 - 00001402 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-08-12 23:20 - 2013-08-12 23:19 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-12 23:20 - 2013-08-12 23:13 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\DVDVideoSoft
2013-08-12 23:12 - 2013-08-12 23:12 - 01211376 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Sandra\Downloads\FreeYouTubeToMP3Converter-3.12.9.725.exe
2013-08-10 09:06 - 2013-08-10 09:06 - 00000000 ____D C:\Users\Sandra\AppData\Local\Apps\2.0
2013-08-10 08:54 - 2013-08-10 08:54 - 00427328 _____ C:\Windows\System32\FNTCACHE.DAT
2013-08-10 08:45 - 2013-08-08 11:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-10 08:43 - 2013-08-10 08:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-08-10 08:43 - 2013-02-04 06:13 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-08-10 08:43 - 2012-12-24 09:57 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-08-10 08:42 - 2013-08-10 08:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-08-10 08:41 - 2013-08-10 08:41 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-10 08:40 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-08-10 08:39 - 2013-08-10 08:39 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-10 08:39 - 2013-08-10 08:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-08-10 08:39 - 2012-07-25 23:52 - 00000000 ____D C:\Windows\ShellNew
2013-08-10 08:39 - 2012-07-25 21:26 - 00000199 _____ C:\Windows\win.ini
2013-08-10 08:38 - 2013-08-10 08:38 - 00000000 __RHD C:\MSOCache
2013-08-10 08:36 - 2013-08-10 08:35 - 00000000 ____D C:\Office
2013-08-10 07:43 - 2013-08-10 04:55 - 264821640 _____ C:\Users\Sandra\Downloads\EnterWW.cab
2013-08-10 01:57 - 2013-08-10 01:57 - 00000000 ____D C:\ProgramData\Wincert
2013-08-10 01:57 - 2013-08-10 01:57 - 00000000 ____D C:\Program Files (x86)\Movies Toolbar
2013-08-08 11:07 - 2013-08-08 11:07 - 00000000 ____D C:\Users\Sandra\AppData\Local\Microsoft Help
2013-08-08 09:50 - 2012-07-26 00:12 - 00000000 ___RD C:\Windows\ToastData
2013-08-08 01:41 - 2013-08-08 01:41 - 00000000 ____D C:\Users\Sandra\AppData\Local\Macromedia
2013-08-08 01:41 - 2013-08-08 01:39 - 00000000 ____D C:\Users\Sandra\AppData\Local\Adobe
2013-08-07 12:39 - 2013-08-07 12:39 - 00000783 _____ C:\Windows\ie8_main.log
2013-08-06 10:56 - 2012-07-25 21:37 - 00000000 ____D C:\Windows\servicing
2013-08-06 10:54 - 2013-02-04 06:16 - 00000000 ____D C:\ProgramData\Norton
2013-08-05 08:59 - 2013-08-05 08:59 - 00015360 ___SH C:\Users\Sandra\Downloads\Thumbs.db
2013-08-03 01:03 - 2013-07-29 11:53 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Mozilla
2013-08-03 01:01 - 2013-08-03 01:01 - 00000000 ____D C:\Users\Sandra\AppData\Local\Mozilla
2013-08-03 00:59 - 2013-08-03 00:59 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-03 00:59 - 2013-08-03 00:59 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-03 00:56 - 2013-08-03 00:55 - 00003542 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-08-03 00:55 - 2013-07-30 02:20 - 00000000 ___RD C:\Windows\BrowserChoice
2013-08-03 00:55 - 2013-07-27 09:50 - 00000000 ____D C:\Users\Sandra\AppData\Local\Packages
2013-08-03 00:55 - 2012-12-24 09:59 - 00000000 ____D C:\ProgramData\PRICache
2013-07-30 03:13 - 2012-12-24 11:08 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-07-30 02:20 - 2012-07-25 23:52 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-30 02:18 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\System32\oobe
2013-07-30 02:16 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\WinStore
2013-07-30 02:16 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-07-30 02:16 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-07-30 02:16 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-07-30 02:16 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\System32\Dism
2013-07-29 11:57 - 2013-07-29 11:57 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Avira
2013-07-29 11:53 - 2013-07-29 11:53 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-29 11:53 - 2013-07-29 11:53 - 00000000 ____D C:\ProgramData\APN
2013-07-29 11:53 - 2013-07-29 11:53 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-07-29 11:51 - 2013-07-29 11:51 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-29 11:51 - 2013-07-29 11:51 - 00000000 ____D C:\ProgramData\Avira
2013-07-29 11:51 - 2013-07-29 11:51 - 00000000 ____D C:\Program Files (x86)\Avira
2013-07-29 11:45 - 2013-07-29 11:51 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-07-29 11:45 - 2013-07-29 11:51 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2013-07-29 11:45 - 2013-07-29 11:51 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2013-07-29 11:45 - 2013-07-29 11:51 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avkmgr.sys
2013-07-29 11:33 - 2013-07-29 11:33 - 00411368 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\deployJava1.dll
2013-07-29 11:33 - 2013-07-29 11:33 - 00153376 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaws.exe
2013-07-29 11:33 - 2013-07-29 11:33 - 00145184 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaw.exe
2013-07-29 11:33 - 2013-07-29 11:33 - 00145184 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\java.exe
2013-07-29 11:33 - 2013-07-29 11:33 - 00000000 ____D C:\ProgramData\Sun
2013-07-29 11:33 - 2013-07-29 11:33 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-29 04:56 - 2013-07-29 04:56 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-07-28 23:13 - 2012-12-24 11:08 - 00000000 ____D C:\ProgramData\McAfee
2013-07-28 23:11 - 2012-07-26 00:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-07-28 21:50 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\restore
2013-07-28 21:34 - 2012-12-24 11:08 - 00000000 ____D C:\Program Files\mcafee
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Programme
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-07-27 16:45 - 2013-07-27 16:45 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-07-27 16:45 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files\Windows NT
2013-07-27 16:45 - 2012-07-25 21:37 - 00000000 __RHD C:\users\Default
2013-07-27 10:06 - 2013-07-27 10:06 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2013-07-27 10:00 - 2013-07-27 10:00 - 00000000 ____D C:\Users\Sandra\AppData\Local\EgisTec IPS
2013-07-27 10:00 - 2012-12-24 11:12 - 00000000 ____D C:\ProgramData\EgisTec IPS
2013-07-27 09:53 - 2013-07-27 09:53 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Atheros
2013-07-27 09:52 - 2013-07-27 09:52 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-07-27 09:52 - 2013-07-27 09:52 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Macromedia
2013-07-27 09:52 - 2012-12-24 09:39 - 00000000 ___HD C:\OEM
2013-07-27 09:51 - 2013-07-27 09:51 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\lm
2013-07-27 09:51 - 2013-07-27 09:51 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Adobe
2013-07-27 09:50 - 2013-07-27 09:50 - 00000020 ___SH C:\Users\Sandra\ntuser.ini
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Vorlagen
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Startmenü
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Netzwerkumgebung
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Lokale Einstellungen
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Eigene Dateien
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Druckumgebung
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Documents\Eigene Musik
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Documents\Eigene Bilder
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\AppData\Local\Verlauf
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\AppData\Local\Anwendungsdaten
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 _SHDL C:\Users\Sandra\Anwendungsdaten
2013-07-27 09:50 - 2013-07-27 09:50 - 00000000 ____D C:\Users\Sandra\AppData\Local\VirtualStore
2013-07-27 09:50 - 2012-07-26 00:12 - 00000000 ___RD C:\Windows\ImmersiveControlPanel

Files to move or delete:
====================
C:\PROGRA~2\MOVIES~1\Datamngr\mgrldr.dll
C:\ProgramData\jgqubpaypdelyptpbjm.bat
C:\ProgramData\jgqubpaypdelyptpbjm.reg
C:\Users\Sandra\chrome.exe
C:\Users\Sandra\conhost.exe
C:\Users\Sandra\ctfmon.exe
C:\Users\Sandra\firefox.exe
C:\Users\Sandra\icq.exe
C:\Users\Sandra\iexplore.exe
C:\Users\Sandra\java.exe
C:\Users\Sandra\skype.exe
C:\Users\Sandra\teamviewer.exe
C:\Users\Sandra\winlogon.exe
C:\Users\Sandra\AppData\Local\Temp\kdInd51n.exe.part
C:\Users\Sandra\AppData\Local\Temp\~convert3591457963108336489.exe
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\setup.exe
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\DW20.EXE
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\dwdcw20.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\dwtrig20.exe
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\msvcr80.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\osetupui.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\1031\dwintl20.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Enterprise.WW\ose.exe
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Enterprise.WW\osetup.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\oct.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\octca.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\zh-tw\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\zh-cn\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\ko-kr\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\ja-jp\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\it-it\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\fr-fr\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\es-es\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\en-us\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\de-de\octres.dll
C:\Users\Sandra\AppData\Local\Temp\SDIAG_9d4861e4-81ee-428e-9f84-035313ee5006\DiagPackage.dll
C:\Users\Sandra\AppData\Local\Temp\SDIAG_9d4861e4-81ee-428e-9f84-035313ee5006\NetworkDiagnosticSnapIn.dll
C:\Users\Sandra\AppData\Local\Temp\SDIAG_9d4861e4-81ee-428e-9f84-035313ee5006\de-DE\DiagPackage.dll.mui
C:\Users\Sandra\AppData\Local\Temp\is-3OIUC.tmp\dvssyshelper.dll
C:\Users\Sandra\AppData\Local\Temp\is-3OIUC.tmp\InnoCallback.dll
C:\Users\Sandra\AppData\Local\Temp\is-3OIUC.tmp\psvince.dll
C:\Users\Sandra\AppData\Local\Temp\is-3OIUC.tmp\_isetup\_shfoldr.dll

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-08-05 07:51:53
Restore point made on: 2013-08-08 09:48:03
Restore point made on: 2013-08-10 08:37:58
Restore point made on: 2013-08-17 06:40:26

==================== Memory info =========================== 

Percentage of memory in use: 16%
Total physical RAM: 3891.59 MB
Available physical RAM: 3230.1 MB
Total Pagefile: 3891.59 MB
Available Pagefile: 3240.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:449.37 GB) (Free:400.79 GB) NTFS
Drive d: (KINGSTON) (Removable) (Total:1.9 GB) (Free:1.89 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: A98576D3)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 2 GB) (Disk ID: 04030201)
Partition 1: (Not Active) - (Size=2 GB) - (Type=06)


LastRegBack: 2013-08-20 03:47

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Startup: C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jgqubpaypdelyptpbjm.lnk
ShortcutTarget: jgqubpaypdelyptpbjm.lnk -> C:\Users\Sandra\AppData\Local\Temp\mjbptpyledpyapbuqgj.bfg (Microsoft Corporation)
:\Users\Sandra\AppData\Local\Temp\mjbptpyledpyapbuqgj.bfg
C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jgqubpaypdelyptpbjm.lnk
2013-08-25 02:05 - 2013-08-25 02:05 - 00275576 _____ (Корпорация Майкрософт) C:\Users\Sandra\teamviewer.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00275576 _____ (Корпорация Майкрософт) C:\Users\Sandra\java.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000165 _____ C:\ProgramData\jgqubpaypdelyptpbjm.reg
2013-08-25 02:05 - 2013-08-25 02:05 - 00000070 _____ C:\ProgramData\jgqubpaypdelyptpbjm.bat
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 ____D C:\Users\Sandra\AppData\Local\CrashDumps
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\winlogon.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\skype.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\iexplore.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\icq.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\firefox.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\ctfmon.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\conhost.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\chrome.exe
C:\PROGRA~2\MOVIES~1\Datamngr\mgrldr.dll
C:\ProgramData\jgqubpaypdelyptpbjm.bat
C:\ProgramData\jgqubpaypdelyptpbjm.reg
         

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

• Starte deinen Rechner erneut in die Reparaturoptionen
• Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.


Rechner normal starten, freuen

servus! danke für antwort...
so also hier nun das ergebniss...
ok. ich start mal meinen laptop neu und hoffe, dass ich lachen kann ;-)

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-08-2013
Ran by SYSTEM at 2013-08-28 14:53:15 Run:1
Running from D:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
Startup: C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jgqubpaypdelyptpbjm.lnk
ShortcutTarget: jgqubpaypdelyptpbjm.lnk -> C:\Users\Sandra\AppData\Local\Temp\mjbptpyledpyapbuqgj.bfg (Microsoft Corporation)
:\Users\Sandra\AppData\Local\Temp\mjbptpyledpyapbuqgj.bfg
C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jgqubpaypdelyptpbjm.lnk
2013-08-25 02:05 - 2013-08-25 02:05 - 00275576 _____ (?????????? ??????????) C:\Users\Sandra\teamviewer.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00275576 _____ (?????????? ??????????) C:\Users\Sandra\java.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000165 _____ C:\ProgramData\jgqubpaypdelyptpbjm.reg
2013-08-25 02:05 - 2013-08-25 02:05 - 00000070 _____ C:\ProgramData\jgqubpaypdelyptpbjm.bat
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 ____D C:\Users\Sandra\AppData\Local\CrashDumps
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\winlogon.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\skype.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\iexplore.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\icq.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\firefox.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\ctfmon.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\conhost.exe
2013-08-25 02:05 - 2013-08-25 02:05 - 00000000 _____ C:\Users\Sandra\chrome.exe
C:\PROGRA~2\MOVIES~1\Datamngr\mgrldr.dll
C:\ProgramData\jgqubpaypdelyptpbjm.bat
C:\ProgramData\jgqubpaypdelyptpbjm.reg
         
*****************

C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jgqubpaypdelyptpbjm.lnk => Moved successfully.
C:\Users\Sandra\AppData\Local\Temp\mjbptpyledpyapbuqgj.bfg => Moved successfully.
"C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jgqubpaypdelyptpbjm.lnk" => File/Directory not found.
C:\Users\Sandra\teamviewer.exe => Moved successfully.
C:\Users\Sandra\java.exe => Moved successfully.
C:\ProgramData\jgqubpaypdelyptpbjm.reg => Moved successfully.
C:\ProgramData\jgqubpaypdelyptpbjm.bat => Moved successfully.
C:\Users\Sandra\AppData\Local\CrashDumps => Moved successfully.
C:\Users\Sandra\winlogon.exe => Moved successfully.
C:\Users\Sandra\skype.exe => Moved successfully.
C:\Users\Sandra\iexplore.exe => Moved successfully.
C:\Users\Sandra\icq.exe => Moved successfully.
C:\Users\Sandra\firefox.exe => Moved successfully.
C:\Users\Sandra\ctfmon.exe => Moved successfully.
C:\Users\Sandra\conhost.exe => Moved successfully.
C:\Users\Sandra\chrome.exe => Moved successfully.
C:\PROGRA~2\MOVIES~1\Datamngr\mgrldr.dll => Moved successfully.
"C:\ProgramData\jgqubpaypdelyptpbjm.bat" => File/Directory not found.
"C:\ProgramData\jgqubpaypdelyptpbjm.reg" => File/Directory not found.

==== End of Fixlog ====
         

und?

ja mir ist schon ein erleichtertes lächeln über die lippen gerutscht :-)
vielen dank ... !!!!!
und bedeutet dies nun dass der pc wieder komplett sauber ist oder soll ich besser noch die festpallte neu formatieren?

Nix formatieren, wir machen noch paar Scans im normalen Modus

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

ok, zu befehl;-)
hier dir nr. 1

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.08.29.03

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16660
Sandra :: BEN [Administrator]

29.08.2013 12:30:34
mbam-log-2013-08-29 (12-30-34).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 219654
Laufzeit: 7 Minute(n), 23 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 1
HKCU\Software\Datamngr (PUP.Optional.DataMngr) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 4
C:\Users\Sandra\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sandra\AppData\Local\Temp\kdInd51n.exe.part (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\$Recycle.Bin\S-1-5-21-670448937-171419631-3567303464-1001\$R5FM65J.exe (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\$Recycle.Bin\S-1-5-21-670448937-171419631-3567303464-1001\$RM0KW15.exe (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

poste die Logs zusammen wenn Du sie hast

... kann ich glaub nicht, weil dann finde ich die einzelnen logfiles nicht mehr... sorry.
nr. 2

# AdwCleaner v3.001 - Report created 29/08/2013 at 13:12:32
# Updated 24/08/2013 by Xplode
# Operating System : Windows 8  (64 bits)
# Username : Sandra - BEN
# Running from : C:\Users\Sandra\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : APNMCP
Service Deleted : DatamngrCoordinator

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\AskPartnerNetwork
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\Program Files (x86)\AskPartnerNetwork
Folder Deleted : C:\Users\Sandra\AppData\Local\Temp\apn
Folder Deleted : C:\Users\Sandra\AppData\LocalLow\ilividmoviestoolbardla
Folder Deleted : C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\fhqqeuge.default\ilividmoviestoolbardla
Folder Deleted : C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\fhqqeuge.default\Extensions\{C4A4F5A0-4B89-4392-AFAC-D58010E349AF}
Folder Deleted : C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\fhqqeuge.default\Extensions\{EC2BAE47-25AF-4CE9-9E78-10627A49C9EA}
File Deleted : C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\fhqqeuge.default\searchplugins\Ask.xml

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EC2BAE47-25AF-4CE9-9E78-10627A49C9EA}
Key Deleted : HKCU\Software\APN DTX
Key Deleted : HKCU\Software\AskPartnerNetwork
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\ilividmoviestoolbardla
Key Deleted : HKLM\Software\AskPartnerNetwork
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilividmoviestoolbardlaFF
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\WIN32C~1.DLL
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\MOVIES~1\Datamngr\mgrldr.dll
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\WIN64C~1.DLL
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\MOVIES~1\Datamngr\x64\mgrldr.dll

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Mozilla Firefox v23.0.1 (de)

[ File : C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\fhqqeuge.default\prefs.js ]

Line Deleted : user_pref("browser.search.order.1", "Ask.com");
Line Deleted : user_pref("keyword.URL", "hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=362&systemid=406&v=n8708-70&apn_dtid=BND406&apn_ptnrs=AG6&apn_uid=6616225043804051&o=APN10645&q=");

*************************

AdwCleaner[R0].txt - [3534 octets] - [29/08/2013 13:08:44]
AdwCleaner[S0].txt - [3159 octets] - [29/08/2013 13:12:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3219 octets] ##########
         

ok

next one:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.5 (08.28.2013:1)
OS: Windows 8 x64
Ran by Sandra on 29.08.2013 at 14:37:12,82
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Failed to delete: [Folder] "C:\ProgramData\boost_interprocess"
Failed to delete: [Folder] "C:\ProgramData\datamngr"
Failed to delete: [Folder] "C:\ProgramData\wincert"
Failed to delete: [Folder] "C:\Program Files (x86)\movies toolbar"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 29.08.2013 at 14:44:30,47
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

und hier die letzten zwei:
mei, vielen vielen vielen dank!!! :-)


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by Sandra (administrator) on 29-08-2013 14:54:39
Running from C:\Users\Sandra\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\McAfee\AppStats\MfeASUM.exe
(McAfee, Inc.) C:\windows\system32\mfevtps.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
(McAfee, Inc.) c:\PROGRA~1\mcafee.com\agent\mcagent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PMMUpdate.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(McAfee, Inc.) C:\Program Files\mcafee\VirusScan\mcods.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(McAfee, Inc.) c:\PROGRA~2\mcafee\SITEAD~1\saui.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-11-20] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-09-03] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-09-03] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] - C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-12-05] ()
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1532992 2013-03-13] (McAfee, Inc.)
HKLM-x32\...\Run: [LManager] -  [x]
HKLM-x32\...\Run: [RadioController] - C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-02-04] (Dritek System Inc.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Dolby PCEE4\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248040 2010-02-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-29] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-10-24] (Acer Incorporated)
HKU\Default User\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-10-24] (Acer Incorporated)
AppInit_DLLs:    [0 ] ()
AppInit_DLLs-x32:   [0 ] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk
ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
SearchScopes: HKLM - DefaultScope {559FBB58-28EC-4CD2-B5E8-25F8A2D87047} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {559FBB58-28EC-4CD2-B5E8-25F8A2D87047} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {559FBB58-28EC-4CD2-B5E8-25F8A2D87047} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - DefaultScope {559FBB58-28EC-4CD2-B5E8-25F8A2D87047} URL = 
SearchScopes: HKCU - {559FBB58-28EC-4CD2-B5E8-25F8A2D87047} URL = 
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
DPF: HKLM-x32 {5852F5ED-8BF4-11D4-A245-0080C6F74284} hxxp://javadl-esd.oracle.com/update/1.6.0/jinstall-6u20-windows-i586.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Handler-x32: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~1\mcafee\msc\MCSNIE~1.DLL (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\fhqqeuge.default
FF SelectedSearchEngine: Google
FF Homepage: www.google.at
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-29] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-29] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [811064 2013-07-29] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [231552 2012-12-05] (Qualcomm Atheros Commnucations)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2449552 2012-10-25] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658064 2012-10-23] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [100752 2012-11-20] (ELAN Microelectronics Corp.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [332080 2012-01-27] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [384048 2013-02-25] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)
R2 MfeASUM; C:\Program Files\McAfee\AppStats\MfeASUM.exe [335216 2013-08-07] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-11-03] (NTI Corporation)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-02-04] (Dritek System INC.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-07-29] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-07-29] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-07-29] (Avira Operations GmbH & Co. KG)
S2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [83672 2013-07-29] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2012-12-05] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)
R1 MfeASKM; C:\Program Files\McAfee\AppStats\MfeASKM.sys [31408 2013-08-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69168 2013-02-19] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
R3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-02-04] (Dritek System Inc.)
U3 mfeavfk01; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-29 14:44 - 2013-08-29 14:44 - 00000854 _____ C:\Users\Sandra\Desktop\JRT.txt
2013-08-29 14:37 - 2013-08-29 14:37 - 00000000 ____D C:\Windows\ERUNT
2013-08-29 14:36 - 2013-08-29 14:36 - 01023533 _____ (Thisisu) C:\Users\Sandra\Downloads\JRT (1).exe
2013-08-29 14:23 - 2013-08-29 14:23 - 01023533 _____ (Thisisu) C:\Users\Sandra\Downloads\JRT.exe
2013-08-29 14:20 - 2013-08-29 14:23 - 01023533 _____ (Thisisu) C:\Users\Sandra\Downloads\JRT_exe
2013-08-29 13:16 - 2013-08-29 13:16 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-08-29 13:08 - 2013-08-29 13:12 - 00000000 ____D C:\AdwCleaner
2013-08-29 12:44 - 2013-08-29 12:44 - 00994642 _____ C:\Users\Sandra\Desktop\adwcleaner.exe
2013-08-29 12:26 - 2013-08-29 12:26 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Malwarebytes
2013-08-29 12:25 - 2013-08-29 12:25 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-29 12:25 - 2013-08-29 12:25 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-29 12:25 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-29 12:24 - 2013-08-29 12:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Sandra\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-26 00:51 - 2013-08-26 00:51 - 00000000 ____D C:\FRST
2013-08-25 15:05 - 2013-08-25 15:05 - 00050477 _____ C:\Users\Sandra\Desktop\Defogger.exe
2013-08-19 11:24 - 2013-08-19 11:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-19 10:15 - 2013-08-19 10:16 - 00014848 ___SH C:\Users\Sandra\Desktop\Thumbs.db
2013-08-16 23:43 - 2013-08-17 00:01 - 00000000 ____D C:\Users\Sandra\Documents\Hochzeit Susanne u. Johannes
2013-08-16 23:43 - 2013-08-16 23:43 - 00000000 ____D C:\Users\Sandra\AppData\Local\clear.fi
2013-08-16 21:02 - 2013-07-09 08:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-16 21:02 - 2013-05-24 01:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-16 21:02 - 2013-05-24 00:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-16 21:01 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-16 21:01 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-16 21:01 - 2013-07-26 07:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-08-16 21:01 - 2013-07-26 07:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-08-16 21:01 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-16 21:01 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-16 21:01 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-16 21:01 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-16 21:01 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-16 21:01 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-16 21:01 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-16 21:01 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-16 21:01 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-16 21:01 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-16 21:01 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-16 21:01 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-16 21:01 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-16 21:01 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-16 21:01 - 2013-07-26 05:13 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-08-16 21:01 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-16 21:01 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-16 21:01 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-16 21:01 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-16 21:01 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-16 21:01 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-16 21:01 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-16 21:01 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-16 21:01 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-16 21:01 - 2013-07-26 02:54 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-08-16 21:01 - 2013-07-02 02:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2013-08-16 21:01 - 2013-07-02 00:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2013-08-16 21:00 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-16 21:00 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-16 20:59 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-16 20:59 - 2013-07-13 08:16 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-16 20:59 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-16 20:59 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2013-08-16 20:59 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2013-08-16 20:59 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-16 20:59 - 2013-07-13 06:23 - 01568256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-16 20:59 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-08-16 20:59 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-08-13 12:36 - 2013-08-13 12:36 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-08-13 09:20 - 2013-08-13 09:20 - 00001402 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-08-13 09:19 - 2013-08-13 09:20 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-13 09:13 - 2013-08-29 12:40 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\DVDVideoSoft
2013-08-13 09:12 - 2013-08-13 09:12 - 01211376 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Sandra\Downloads\FreeYouTubeToMP3Converter-3.12.9.725.exe
2013-08-10 19:06 - 2013-08-16 23:42 - 00000000 ____D C:\Users\Sandra\AppData\Local\Deployment
2013-08-10 19:06 - 2013-08-10 19:06 - 00000000 ____D C:\Users\Sandra\AppData\Local\Apps\2.0
2013-08-10 18:54 - 2013-08-10 18:54 - 00427328 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-10 18:43 - 2013-08-10 18:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-08-10 18:42 - 2013-08-10 18:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-08-10 18:41 - 2013-08-10 18:41 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-10 18:39 - 2013-08-10 18:39 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-10 18:39 - 2013-08-10 18:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-08-10 18:38 - 2013-08-10 18:38 - 00000000 __RHD C:\MSOCache
2013-08-10 18:35 - 2013-08-10 18:36 - 00000000 ____D C:\Office
2013-08-10 14:55 - 2013-08-10 17:43 - 264821640 _____ C:\Users\Sandra\Downloads\EnterWW.cab
2013-08-10 11:57 - 2013-08-29 13:12 - 00000000 ____D C:\ProgramData\Datamngr
2013-08-10 11:57 - 2013-08-10 11:57 - 00000000 ____D C:\ProgramData\Wincert
2013-08-10 11:57 - 2013-08-10 11:57 - 00000000 ____D C:\Program Files (x86)\Movies Toolbar
2013-08-08 21:40 - 2013-08-19 10:22 - 00000000 ____D C:\Windows\system32\MRT
2013-08-08 21:07 - 2013-08-10 18:45 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-08 21:07 - 2013-08-08 21:07 - 00000000 ____D C:\Users\Sandra\AppData\Local\Microsoft Help
2013-08-08 11:41 - 2013-08-08 11:41 - 00000000 ____D C:\Users\Sandra\AppData\Local\Macromedia
2013-08-08 11:39 - 2013-08-08 11:41 - 00000000 ____D C:\Users\Sandra\AppData\Local\Adobe
2013-08-07 22:39 - 2013-08-07 22:39 - 00000783 _____ C:\Windows\ie8_main.log
2013-08-07 20:59 - 2013-06-17 00:41 - 00997632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-08-07 20:59 - 2013-06-01 11:20 - 02219520 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2013-08-07 20:58 - 2013-06-01 13:54 - 00194816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2013-08-07 20:58 - 2013-06-01 13:54 - 00125184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2013-08-07 20:58 - 2013-06-01 13:34 - 02391280 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-08-07 20:58 - 2013-06-01 13:29 - 00337152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-08-07 20:58 - 2013-06-01 13:29 - 00213248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-08-07 20:58 - 2013-06-01 13:26 - 06987008 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-07 20:58 - 2013-06-01 13:26 - 00327936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2013-08-07 20:58 - 2013-06-01 12:24 - 02106176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-08-07 20:58 - 2013-06-01 11:25 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-08-07 20:58 - 2013-06-01 11:25 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2013-08-07 20:58 - 2013-06-01 11:24 - 01453568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2013-08-07 20:58 - 2013-06-01 11:24 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2013-08-07 20:58 - 2013-06-01 11:24 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2013-08-07 20:58 - 2013-06-01 11:23 - 01842176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2013-08-07 20:58 - 2013-06-01 11:23 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2013-08-07 20:58 - 2013-06-01 11:22 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-08-07 20:58 - 2013-06-01 11:22 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-08-07 20:58 - 2013-06-01 11:22 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2013-08-07 20:58 - 2013-06-01 11:22 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\MbaeParserTask.exe
2013-08-07 20:58 - 2013-06-01 11:21 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2013-08-07 20:58 - 2013-06-01 11:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2013-08-07 20:58 - 2013-06-01 11:20 - 01527808 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2013-08-07 20:58 - 2013-06-01 11:20 - 01048576 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2013-08-07 20:58 - 2013-06-01 11:20 - 00583168 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2013-08-07 20:58 - 2013-06-01 11:19 - 00785408 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2013-08-07 20:58 - 2013-06-01 11:19 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupManager.dll
2013-08-07 20:58 - 2013-06-01 05:08 - 00037632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthAvrcpTg.sys
2013-08-07 20:58 - 2013-05-25 00:09 - 01403296 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2013-08-07 20:58 - 2013-05-25 00:09 - 01271584 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2013-08-07 20:58 - 2013-05-25 00:09 - 01217352 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2013-08-07 20:58 - 2013-05-25 00:09 - 01093904 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2013-08-07 20:58 - 2013-05-20 02:08 - 00386642 _____ C:\Windows\system32\ApnDatabase.xml
2013-08-07 20:48 - 2012-11-20 07:24 - 01164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2013-08-07 20:48 - 2012-11-20 07:17 - 01184256 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2013-08-07 20:48 - 2012-11-20 07:02 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDKURD.DLL
2013-08-07 20:48 - 2012-11-20 06:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDKURD.DLL
2013-08-07 20:48 - 2012-11-08 06:25 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-08-07 20:48 - 2012-11-08 06:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-08-07 20:48 - 2012-11-08 06:25 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-08-07 20:48 - 2012-11-08 06:22 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2013-08-07 20:48 - 2012-11-08 06:22 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2013-08-07 20:48 - 2012-11-08 06:22 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-08-07 20:47 - 2012-11-27 08:39 - 01122768 _____ (Microsoft Corporation) C:\Windows\system32\Taskmgr.exe
2013-08-07 20:47 - 2012-11-27 06:49 - 01027152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Taskmgr.exe
2013-08-07 20:47 - 2012-11-27 06:20 - 01217536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2013-08-07 20:47 - 2012-11-27 06:20 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-08-07 20:47 - 2012-11-27 06:20 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-08-07 20:47 - 2012-11-27 06:20 - 00798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2013-08-07 20:47 - 2012-11-27 06:20 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-08-07 20:47 - 2012-11-27 06:20 - 00560128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
2013-08-07 20:47 - 2012-11-27 06:20 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2013-08-07 20:47 - 2012-11-27 06:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vds_ps.dll
2013-08-07 20:47 - 2012-11-27 06:19 - 03245568 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2013-08-07 20:47 - 2012-11-27 06:19 - 01536512 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2013-08-07 20:47 - 2012-11-27 06:19 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2013-08-07 20:47 - 2012-11-27 06:19 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguagesCpl.dll
2013-08-07 20:47 - 2012-11-27 06:19 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-08-07 20:47 - 2012-11-27 06:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2013-08-07 20:47 - 2012-11-27 06:18 - 01071104 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-08-07 20:47 - 2012-11-27 06:18 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-08-07 20:47 - 2012-11-27 06:18 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-08-07 20:47 - 2012-11-27 06:17 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2013-08-07 20:47 - 2012-09-11 07:28 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\vdsldr.exe
2013-08-07 20:47 - 2012-09-11 07:27 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\vds_ps.dll
2013-08-07 20:46 - 2012-12-04 06:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2013-08-07 20:45 - 2012-11-06 09:52 - 00277736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2013-08-07 20:45 - 2012-11-06 09:33 - 01566432 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2013-08-07 20:45 - 2012-11-06 06:48 - 01150160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2013-08-07 20:45 - 2012-11-06 06:20 - 00883712 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2013-08-07 20:45 - 2012-11-06 06:20 - 00516608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2013-08-07 20:45 - 2012-11-06 06:20 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2013-08-07 20:45 - 2012-11-06 06:20 - 00375296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2013-08-07 20:45 - 2012-11-06 06:20 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2013-08-07 20:45 - 2012-11-06 06:20 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2013-08-07 20:45 - 2012-11-06 06:20 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 08552448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 00466944 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapPeerProxy.dll
2013-08-07 20:45 - 2012-11-06 06:19 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapAuthProxy.dll
2013-08-07 20:45 - 2012-11-06 06:18 - 11459584 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2013-08-07 20:45 - 2012-11-06 06:18 - 01037312 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-08-07 20:45 - 2012-11-06 06:18 - 00976384 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-08-07 20:45 - 2012-11-06 06:18 - 00189440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
2013-08-07 20:45 - 2012-11-06 06:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2013-08-07 20:45 - 2012-11-06 06:18 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2013-08-07 20:45 - 2012-11-06 06:18 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll
2013-08-07 20:45 - 2012-11-06 06:17 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
2013-08-07 20:45 - 2012-11-06 06:17 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\dafWCN.dll
2013-08-07 20:45 - 2012-11-06 05:53 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-08-07 20:45 - 2012-11-06 05:51 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-08-07 20:44 - 2012-11-06 06:20 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2013-08-07 20:44 - 2012-11-06 06:00 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\iscsilog.dll
2013-08-07 20:44 - 2012-11-06 05:58 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2013-08-07 20:44 - 2012-11-06 05:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2013-08-07 20:44 - 2012-11-06 05:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2013-08-07 20:44 - 2012-11-06 05:55 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2013-08-07 20:44 - 2012-11-06 05:55 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2013-08-07 20:44 - 2012-11-06 05:55 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2013-08-07 20:44 - 2012-11-06 05:55 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fxppm.sys
2013-08-05 18:59 - 2013-08-05 18:59 - 00015360 ___SH C:\Users\Sandra\Downloads\Thumbs.db
2013-08-03 11:01 - 2013-08-03 11:01 - 00000000 ____D C:\Users\Sandra\AppData\Local\Mozilla
2013-08-03 10:59 - 2013-08-24 23:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-03 10:59 - 2013-08-03 10:59 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-03 10:59 - 2013-08-03 10:59 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-03 10:55 - 2013-08-03 10:56 - 00003542 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-07-30 13:29 - 2013-05-16 00:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-07-30 13:14 - 2013-06-28 00:04 - 00693112 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-30 13:14 - 2013-06-28 00:04 - 00078200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-30 12:20 - 2013-08-03 10:55 - 00000000 ___RD C:\Windows\BrowserChoice
2013-07-30 11:39 - 2013-08-19 10:20 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== One Month Modified Files and Folders =======

2013-08-29 14:53 - 2013-08-29 14:53 - 01579080 _____ (Farbar) C:\Users\Sandra\Desktop\FRST64.exe
2013-08-29 14:50 - 2013-07-27 19:57 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-670448937-171419631-3567303464-1001
2013-08-29 14:48 - 2013-07-27 19:50 - 01422480 _____ C:\Windows\WindowsUpdate.log
2013-08-29 14:44 - 2013-08-29 14:44 - 00000854 _____ C:\Users\Sandra\Desktop\JRT.txt
2013-08-29 14:37 - 2013-08-29 14:37 - 00000000 ____D C:\Windows\ERUNT
2013-08-29 14:36 - 2013-08-29 14:36 - 01023533 _____ (Thisisu) C:\Users\Sandra\Downloads\JRT (1).exe
2013-08-29 14:23 - 2013-08-29 14:23 - 01023533 _____ (Thisisu) C:\Users\Sandra\Downloads\JRT.exe
2013-08-29 14:23 - 2013-08-29 14:20 - 01023533 _____ (Thisisu) C:\Users\Sandra\Downloads\JRT_exe
2013-08-29 14:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-08-29 13:20 - 2013-02-05 00:19 - 00753134 _____ C:\Windows\system32\perfh007.dat
2013-08-29 13:20 - 2013-02-05 00:19 - 00155826 _____ C:\Windows\system32\perfc007.dat
2013-08-29 13:20 - 2012-07-26 09:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-29 13:16 - 2013-08-29 13:16 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-08-29 13:16 - 2012-12-24 19:48 - 00053284 _____ C:\Windows\system32\wpbbin.exe
2013-08-29 13:16 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-29 13:12 - 2013-08-29 13:08 - 00000000 ____D C:\AdwCleaner
2013-08-29 13:12 - 2013-08-10 11:57 - 00000000 ____D C:\ProgramData\Datamngr
2013-08-29 12:55 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-08-29 12:46 - 2012-12-24 21:08 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-08-29 12:46 - 2012-12-24 19:48 - 00025074 _____ C:\Windows\PFRO.log
2013-08-29 12:44 - 2013-08-29 12:44 - 00994642 _____ C:\Users\Sandra\Desktop\adwcleaner.exe
2013-08-29 12:40 - 2013-08-13 09:13 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\DVDVideoSoft
2013-08-29 12:34 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-08-29 12:26 - 2013-08-29 12:26 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Malwarebytes
2013-08-29 12:25 - 2013-08-29 12:25 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-29 12:25 - 2013-08-29 12:25 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-29 12:24 - 2013-08-29 12:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Sandra\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-29 00:53 - 2013-07-27 19:51 - 00000000 ___RD C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-29 00:53 - 2013-07-27 19:50 - 00000000 ____D C:\Users\Sandra
2013-08-28 15:10 - 2013-07-29 21:51 - 00004914 _____ C:\Windows\SysWOW64\bufferpool.txt
2013-08-28 14:47 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-08-26 00:51 - 2013-08-26 00:51 - 00000000 ____D C:\FRST
2013-08-25 15:05 - 2013-08-25 15:05 - 00050477 _____ C:\Users\Sandra\Desktop\Defogger.exe
2013-08-24 23:40 - 2013-08-03 10:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-20 14:17 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache
2013-08-19 11:24 - 2013-08-19 11:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-19 10:24 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-19 10:24 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-19 10:22 - 2013-08-08 21:40 - 00000000 ____D C:\Windows\system32\MRT
2013-08-19 10:20 - 2013-07-30 11:39 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-19 10:16 - 2013-08-19 10:15 - 00014848 ___SH C:\Users\Sandra\Desktop\Thumbs.db
2013-08-19 08:35 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\NDF
2013-08-17 00:01 - 2013-08-16 23:43 - 00000000 ____D C:\Users\Sandra\Documents\Hochzeit Susanne u. Johannes
2013-08-16 23:43 - 2013-08-16 23:43 - 00000000 ____D C:\Users\Sandra\AppData\Local\clear.fi
2013-08-16 23:42 - 2013-08-10 19:06 - 00000000 ____D C:\Users\Sandra\AppData\Local\Deployment
2013-08-13 12:36 - 2013-08-13 12:36 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-08-13 12:36 - 2012-07-26 09:21 - 00026188 _____ C:\Windows\setupact.log
2013-08-13 09:20 - 2013-08-13 09:20 - 00001402 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-08-13 09:20 - 2013-08-13 09:19 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-13 09:12 - 2013-08-13 09:12 - 01211376 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Sandra\Downloads\FreeYouTubeToMP3Converter-3.12.9.725.exe
2013-08-10 19:06 - 2013-08-10 19:06 - 00000000 ____D C:\Users\Sandra\AppData\Local\Apps\2.0
2013-08-10 18:54 - 2013-08-10 18:54 - 00427328 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-10 18:45 - 2013-08-08 21:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-10 18:43 - 2013-08-10 18:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-08-10 18:43 - 2013-02-04 16:13 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-08-10 18:43 - 2012-12-24 19:57 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-08-10 18:42 - 2013-08-10 18:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-08-10 18:41 - 2013-08-10 18:41 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-10 18:40 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-08-10 18:39 - 2013-08-10 18:39 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-10 18:39 - 2013-08-10 18:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-08-10 18:39 - 2012-07-26 09:52 - 00000000 ____D C:\Windows\ShellNew
2013-08-10 18:39 - 2012-07-26 07:26 - 00000199 _____ C:\Windows\win.ini
2013-08-10 18:38 - 2013-08-10 18:38 - 00000000 __RHD C:\MSOCache
2013-08-10 18:36 - 2013-08-10 18:35 - 00000000 ____D C:\Office
2013-08-10 17:43 - 2013-08-10 14:55 - 264821640 _____ C:\Users\Sandra\Downloads\EnterWW.cab
2013-08-10 11:57 - 2013-08-10 11:57 - 00000000 ____D C:\ProgramData\Wincert
2013-08-10 11:57 - 2013-08-10 11:57 - 00000000 ____D C:\Program Files (x86)\Movies Toolbar
2013-08-08 21:07 - 2013-08-08 21:07 - 00000000 ____D C:\Users\Sandra\AppData\Local\Microsoft Help
2013-08-08 19:50 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ToastData
2013-08-08 11:41 - 2013-08-08 11:41 - 00000000 ____D C:\Users\Sandra\AppData\Local\Macromedia
2013-08-08 11:41 - 2013-08-08 11:39 - 00000000 ____D C:\Users\Sandra\AppData\Local\Adobe
2013-08-07 22:39 - 2013-08-07 22:39 - 00000783 _____ C:\Windows\ie8_main.log
2013-08-06 20:56 - 2012-07-26 07:37 - 00000000 ____D C:\Windows\servicing
2013-08-06 20:54 - 2013-02-04 16:16 - 00000000 ____D C:\ProgramData\Norton
2013-08-05 18:59 - 2013-08-05 18:59 - 00015360 ___SH C:\Users\Sandra\Downloads\Thumbs.db
2013-08-03 11:03 - 2013-07-29 21:53 - 00000000 ____D C:\Users\Sandra\AppData\Roaming\Mozilla
2013-08-03 11:01 - 2013-08-03 11:01 - 00000000 ____D C:\Users\Sandra\AppData\Local\Mozilla
2013-08-03 10:59 - 2013-08-03 10:59 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-03 10:59 - 2013-08-03 10:59 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-03 10:56 - 2013-08-03 10:55 - 00003542 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-08-03 10:56 - 2013-07-27 19:51 - 00000000 ___RD C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-08-03 10:55 - 2013-07-30 12:20 - 00000000 ___RD C:\Windows\BrowserChoice
2013-08-03 10:55 - 2013-07-27 19:50 - 00000000 ____D C:\Users\Sandra\AppData\Local\Packages
2013-08-03 10:55 - 2012-12-24 19:59 - 00000000 ____D C:\ProgramData\PRICache
2013-07-30 13:13 - 2012-12-24 21:08 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-07-30 12:20 - 2012-07-26 09:52 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-30 12:18 - 2012-07-26 07:38 - 00000000 ____D C:\Windows\system32\oobe
2013-07-30 12:16 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\WinStore
2013-07-30 12:16 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-07-30 12:16 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-07-30 12:16 - 2012-07-26 07:38 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-07-30 12:16 - 2012-07-26 07:38 - 00000000 ____D C:\Windows\system32\Dism

Files to move or delete:
====================
C:\Users\Sandra\AppData\Local\Temp\Quarantine.exe
C:\Users\Sandra\AppData\Local\Temp\~convert3591457963108336489.exe
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\setup.exe
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\DW20.EXE
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\dwdcw20.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\dwtrig20.exe
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\msvcr80.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\osetupui.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Office.de-de\1031\dwintl20.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Enterprise.WW\ose.exe
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Enterprise.WW\osetup.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\oct.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\octca.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\zh-tw\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\zh-cn\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\ko-kr\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\ja-jp\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\it-it\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\fr-fr\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\es-es\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\en-us\octres.dll
C:\Users\Sandra\AppData\Local\Temp\Temp1_Ofice_Insatllation.zip\Ofice_Insatllation\Admin\de-de\octres.dll
C:\Users\Sandra\AppData\Local\Temp\SDIAG_9d4861e4-81ee-428e-9f84-035313ee5006\DiagPackage.dll
C:\Users\Sandra\AppData\Local\Temp\SDIAG_9d4861e4-81ee-428e-9f84-035313ee5006\NetworkDiagnosticSnapIn.dll
C:\Users\Sandra\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\Sandra\AppData\Local\Temp\is-3OIUC.tmp\dvssyshelper.dll
C:\Users\Sandra\AppData\Local\Temp\is-3OIUC.tmp\InnoCallback.dll
C:\Users\Sandra\AppData\Local\Temp\is-3OIUC.tmp\psvince.dll
C:\Users\Sandra\AppData\Local\Temp\is-3OIUC.tmp\_isetup\_shfoldr.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-20 13:47

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-08-2013
Ran by Sandra at 2013-08-29 14:56:05
Running from C:\Users\Sandra\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
 clear.fi SDK - Video 2 (x32 Version: 2.1.2128)
 clear.fi SDK- Movie 2 (x32 Version: 2.1.2112)
Acer Backup Manager (x32 Version: 4.0.0.0071)
Acer Instant Update Service (Version: 1.00.3013)
Acer Power Management (Version: 7.00.3011)
Acer Recovery Management (Version: 6.00.3012)
AcerCloud (x32 Version: 2.01.3125)
AcerCloud Docs (x32 Version: 1.00.3204)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)
Aloha TriPeaks (x32 Version: 2.2.0.98)
Applet (HKCU)
Avira Free Antivirus (x32 Version: 13.0.0.3885)
Avira SearchFree Toolbar plus Web Protection (x32 Version: 12.2.2.663)
Backup Manager v4 (x32 Version: 4.0.0.0071)
Bejeweled 3 (x32 Version: 2.2.0.98)
clear.fi Media (x32 Version: 2.01.3112)
clear.fi Photo (x32 Version: 2.01.3109)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3318_45364)
Delicious: Emily's True Love Premium Edition (x32 Version: 2.2.0.98)
Dolby Advanced Audio v2 (x32 Version: 7.2.8000.16)
Dritek Radio Controller (x32 Version: 2.02.2001.0803)
Free YouTube to MP3 Converter version 3.12.9.725 (x32 Version: 3.12.9.725)
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110)
Identity Card (x32 Version: 2.00.3004)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2867)
Intel(R) Rapid Storage Technology (x32 Version: 11.5.4.1001)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Island Tribe (x32 Version: 2.2.0.98)
Java Auto Updater (x32 Version: 2.0.2.1)
Java(TM) 6 Update 20 (x32 Version: 6.0.200)
Jewel Match 3 (x32 Version: 2.2.0.98)
John Deere Drive Green (x32 Version: 2.2.0.95)
Launch Manager (x32 Version: 7.0.10)
Live Updater (x32 Version: 2.00.3006)
Magic Academy (x32 Version: 2.2.0.98)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
McAfee Internet Security Suite (x32 Version: 11.6.511)
Microsoft Office (x32 Version: 15.0.4420.1017)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MyWinLocker (Version: 4.0.14.35)
MyWinLocker 4 (x32 Version: 4.0.14.35)
MyWinLocker Suite (x32 Version: 4.0.14.24)
Norton Online Backup (x32 Version: 2.2.3.51r)
Norton Online Backup ARA (x32 Version: 4.1.0.14)
NTI Media Maker 9 (x32 Version: 9.0.2.9014)
Office Addin (x32 Version: 2.01.3202)
Penguins! (x32 Version: 2.2.0.98)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
Polar Bowler (x32 Version: 2.2.0.97)
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.216)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 11.31)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6716)
Realtek PCIE Card Reader (x32 Version: 6.2.8400.27028)
Shared C Run-time for x64 (Version: 10.0.0)
Shredder (Version: 2.0.8.9)
Shredder (x32 Version: 2.0.8.9)
Spotify (x32 Version: 0.8.4.99.ga249b5f1)
Tales of Lagoona (x32 Version: 2.2.0.110)
Update Installer for WildTangent Games App (x32)
Visual Studio 2005 Tools for Office Second Edition Runtime (x32)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729)
Visual Studio Tools for the Office system 3.0 Runtime (x32)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (x32 Version: 1)
Ware PS/2-X64 11.6.16.203_WHQL (Version: 11.6.16.203)
WildTangent Games (x32 Version: 1.0.3.0)
WildTangent Games App (x32 Version: 4.0.9.3)
Zuma's Revenge (x32 Version: 2.2.0.98)

==================== Restore Points  =========================

05-08-2013 15:51:05 Windows Update
08-08-2013 17:47:45 Windows Update
10-08-2013 16:37:42 Installed Microsoft Office Enterprise 2007
17-08-2013 14:40:03 Windows Update

==================== Hosts content: ==========================

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation)
Task: {115A30F5-9629-4E2E-993E-F2EF77734558} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => C:\Windows\System32\bfe.dll [2012-11-27] (Microsoft Corporation)
Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\System32\sysmain.dll [2013-05-04] (Microsoft Corporation)
Task: {1CF5FBA5-141F-4E2B-B4FC-71FCAED98B95} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect
Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance
Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\WSClient.dll [2012-09-20] (Microsoft Corporation)
Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh
Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks
Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update
Task: {307D8C75-FDA3-49D3-AA9F-DB79F405FB59} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => C:\Windows\System32\acproxy.dll [2012-07-26] (Microsoft Corporation)
Task: {343E40F2-250C-4A52-A8B8-B55A35032492} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2012-10-08] (Acer Incorporated)
Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator
Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask
Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
Task: {3D011488-04FF-4EF8-A772-0A4A0803CC8B} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [2012-08-23] ()
Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance
Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage
Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2013-06-01] (Microsoft Corporation)
Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
Task: {536A3462-6032-4DF6-91B8-BC3E29191B8D} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-09-20] (CyberLink)
Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance
Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required
Task: {5F461DB1-266D-41DD-930C-F2B48B58FDAC} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-10-23] (Acer Incorporated)
Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation)
Task: {67229DF8-B971-4F31-933D-0FD466D45DE1} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\System32\aepdu.dll [2012-07-26] (Microsoft Corporation)
Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation)
Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update
Task: {77A6D07E-0548-43BF-9341-44568B406959} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-670448937-171419631-3567303464-1001
Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance
Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance
Task: {84DE5EB5-DE94-465B-ADDF-103C8E5131E8} - System32\Tasks\WPD\SqmUpload_S-1-5-21-670448937-171419631-3567303464-1001 => C:\Windows\System32\portabledeviceapi.dll [2012-07-26] (Microsoft Corporation)
Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode)
Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses
Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
Task: {95ADF8CE-D9E4-47EF-9D02-91C741A48533} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-21] ()
Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\WSClient.dll [2012-09-20] (Microsoft Corporation)
Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask
Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh
Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask
Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask
Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan
Task: {B5B481B4-B4A5-4A76-B37A-826794D7784F} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation)
Task: {BA1DB0D5-84AC-40C0-A5A1-E9B78AA84F8E} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific
Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender
Task: {C536413C-A943-4DD2-8D3A-66C7D2F9AE1C} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [2012-08-23] ()
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\System32\Windows.Storage.ApplicationData.dll [2012-07-26] (Microsoft Corporation)
Task: {C7AE9012-BCC7-4321-845A-2CF60FBC08E8} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall
Task: {C7EC631F-FD90-4F26-BC1A-0CD3B9FFD9C8} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\Windows\system32\sc.exe [2012-07-26] (Microsoft Corporation)
Task: {C9A9BF47-4E2C-464D-8524-8D6DD936537B} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup
Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork
Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
Task: {DBF96A75-B294-477D-9830-2C5A1458BAF4} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall
Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\System32\Startupscan.dll [2012-07-26] (Microsoft Corporation)
Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM
Task: {F64ED41B-18B4-4F36-959D-0F00EC7E1136} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => C:\Windows\System32\dfdts.dll [2012-07-26] (Microsoft Corporation)
Task: {F711BCE7-6A06-4BAF-8158-C5207E4EEDA5} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-670448937-171419631-3567303464-500
Task: {FBE635E0-09EB-484B-841D-87E2880B9059} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {FE4FEB64-44A0-4EFE-A705-ECB7DDC75D40} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-11-06] ()

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\Users\Sandra\Desktop\Thumbs.db:encryptable
AlternateDataStreams: C:\Users\Sandra\Downloads\Thumbs.db:encryptable


==================== Faulty Device Manager Devices =============

Name: Bluetooth USB Module
Description: Bluetooth USB Module
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Qualcomm Atheros Communications
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/29/2013 01:07:05 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: AUSNAHMEFEHLER beim Aufruf der Funktion IThread(ProtocolSrvConThread)::run() für die Datei
unknown.
 [ACCESS_VIOLATION Exception!! EIP = 0x74024753]
 Bitte Avira informieren und die obige Datei übersenden!

Error: (08/25/2013 01:48:01 PM) (Source: Winlogon) (User: )
Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.

Error: (08/25/2013 00:05:49 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: regsvr32.exe, Version: 6.2.9200.16384, Zeitstempel: 0x5010a64a
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000420
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x2d24
Startzeit der fehlerhaften Anwendung: 0xregsvr32.exe0
Pfad der fehlerhaften Anwendung: regsvr32.exe1
Pfad des fehlerhaften Moduls: regsvr32.exe2
Berichtskennung: regsvr32.exe3
Vollständiger Name des fehlerhaften Pakets: regsvr32.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: regsvr32.exe5

Error: (08/24/2013 11:39:38 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005

Error: (08/22/2013 10:28:27 PM) (Source: Application Hang) (User: )
Description: Programm firefox.exe, Version 23.0.1.4974 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 12bc

Startzeit: 01ce9f75ea390f5c

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID: 59581556-0b69-11e3-be76-206a8af508d4

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (08/19/2013 09:57:49 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005

Error: (08/19/2013 08:46:14 AM) (Source: Application Hang) (User: )
Description: Programm firefox.exe, Version 22.0.0.4917 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1830

Startzeit: 01ce9ca730725079

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID: ba3b9ba0-089a-11e3-be75-206a8af508d4

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (08/18/2013 11:21:01 AM) (Source: Application Hang) (User: )
Description: Programm firefox.exe, Version 22.0.0.4917 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1838

Startzeit: 01ce9bf3e354f256

Endzeit: 31

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID: 73144195-07e7-11e3-be75-206a8af508d4

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (08/17/2013 00:42:35 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005

Error: (08/13/2013 00:22:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Ben)
Description: Bei der Aktivierung der App „Microsoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusic“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


System errors:
=============
Error: (08/29/2013 01:27:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1070

Error: (08/29/2013 01:27:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde nicht richtig gestartet.

Error: (08/29/2013 01:16:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avnetflt" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%5

Error: (08/29/2013 01:16:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avgntflt" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%5

Error: (08/29/2013 01:02:02 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: {3A185DDE-E020-4985-A8F2-E27CDC4A0F3A}

Error: (08/29/2013 01:02:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1070

Error: (08/29/2013 01:02:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde nicht richtig gestartet.

Error: (08/29/2013 00:51:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avnetflt" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%5

Error: (08/29/2013 00:50:54 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avgntflt" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%5

Error: (08/29/2013 00:50:06 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: 1069netprofmNicht verfügbar{A47979D2-C419-11D9-A5B4-001185AD2B89}


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 38%
Total physical RAM: 3891.59 MB
Available physical RAM: 2402.86 MB
Total Pagefile: 6835.59 MB
Available Pagefile: 4909.53 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:449.37 GB) (Free:396.21 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: A98576D3)

Partition: GPT Partition Type
==================== End Of Log ============================
         

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?