|
Plagegeister aller Art und deren Bekämpfung: Auf zweite Festplatte kann nicht mehr zugegriffen werdenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
26.08.2013, 17:11 | #1 |
| Auf zweite Festplatte kann nicht mehr zugegriffen werden Ich bin mir ziemlich sicher das sich ein Virus in meinen laptop (win 7 64 bit) festgesetzt hat. Unter anderem braucht er 15 Minuten um hochzufahren und außerdem kann ich auf meine zweite festplatte (D gar nicht mehr zugreifen. Sie wird zwar noch angezeigt aber das wars dann auch d.h. keine anzeige wie viel speicher besetzt ist, wenn ich sie öffnen will gibt es keine rückmeldung und sie reagiert nichtmal auf einen rechtsklick. Avast hat außerdem nichts entdeckt. Es waren zwar noch ein paar familienfotos auf D: drauf aber ich hatte keinen Lust mehr das der neue laptop so langsam läuft also setzte ich windows kurzerhand mittels acers erecovery neu auf. Das Problem ist das jetzt nur c formatiert ist und d unberührt blieb und so spür ich die effekte des virus immer noch. Jetzt bräuchte ich eure Hilfe könntet ihr mir also sagen wie ich es wieder schaffe auf d zuzugreifen damit ich zumindest die daten sichern kann oder wenn das nicht geht wie ich es schaffe Windows neu aufzusetzen so das c und d formatiert werden. |
26.08.2013, 17:33 | #2 |
/// the machine /// TB-Ausbilder | Auf zweite Festplatte kann nicht mehr zugegriffen werden hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
27.08.2013, 02:17 | #3 |
| Auf zweite Festplatte kann nicht mehr zugegriffen werden FRST Logfile:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-08-2013 Ran by Yosip (administrator) on 26-08-2013 22:13:18 Running from C:\Users\Yosip\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe () C:\OEM\Preload\Command\AlaunchX\AlaunchX.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\system32\taskmgr.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (McAfee, Inc.) c:\PROGRA~1\mcafee.com\agent\mcagent.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Trigger New Acer AlaunchX] - c:\OEM\Preload\Command\AlaunchX\AppInRun.exe [304672 2009-09-21] () HKLM\...\RunOnce: [New Acer AlaunchX] - c:\OEM\Preload\Command\AlaunchX\LaunchAlaunchX.exe [300064 2009-09-21] (Acer Inc.) HKCU\...\Runonce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} [x] HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation) HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1465304 2010-02-04] (McAfee, Inc.) HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340336 2010-09-28] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-09-18] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-09-18] (Egis Technology Inc.) HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-03-09] (NTI Corporation) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-08] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [OOTag] - C:\Program Files (x86)\Acer\OOBEOffer\OOTag.exe [13856 2010-02-23] (Microsoft) HKU\Default\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} [x] HKU\Default User\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} [x] ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL () BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20110420011736.dll (McAfee, Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll () BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20110420011736.dll (McAfee, Inc.) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\progra~2\mcafee\sitead~1\mcieplg.dll (McAfee, Inc.) Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~2\mcafee\sitead~1\mcieplg.dll (McAfee, Inc.) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\sitead~1\mcieplg.dll (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\sitead~1\mcieplg.dll (McAfee, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 ==================== Services (Whitelisted) ================= R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.) R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.) R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [509416 2009-12-31] (McAfee, Inc.) S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.) R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199032 2010-01-06] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [244840 2010-01-06] (McAfee, Inc.) R2 mfevtp; C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe [148520 2010-01-06] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2011-03-09] (NTI Corporation) ==================== Drivers (Whitelisted) ==================== R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [62416 2010-01-06] (McAfee, Inc.) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [121504 2010-01-06] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [189880 2010-01-06] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [440688 2010-01-06] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [528232 2010-01-06] (McAfee, Inc.) R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75288 2010-01-06] (McAfee, Inc.) S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [93840 2010-01-06] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [279752 2010-01-06] (McAfee, Inc.) U3 mfeavfk01; No ImagePath ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-26 22:37 - 2013-08-26 22:37 - 00295922 _____ C:\Windows\system32\perfi007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00038104 _____ C:\Windows\system32\perfd007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\0407 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\0407 2013-08-26 22:37 - 2013-08-26 19:38 - 00643866 _____ C:\Windows\system32\perfh007.dat 2013-08-26 22:37 - 2013-08-26 19:38 - 00126394 _____ C:\Windows\system32\perfc007.dat 2013-08-26 22:34 - 2013-08-26 22:34 - 00000000 ____D C:\Windows\NAPP_Dism_Log 2013-08-26 22:12 - 2013-08-26 22:12 - 01577068 _____ (Farbar) C:\Users\Yosip\Desktop\FRST64.exe 2013-08-26 22:12 - 2013-08-26 22:12 - 00000000 ____D C:\FRST 2013-08-26 17:09 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2013-08-26 17:09 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2013-08-26 17:09 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2013-08-26 17:09 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2013-08-26 17:09 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2013-08-26 17:09 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2013-08-26 17:09 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2013-08-26 17:09 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2013-08-26 17:09 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2013-08-26 17:05 - 2013-08-26 18:38 - 00059968 _____ C:\Users\Yosip\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-26 17:05 - 2013-08-26 17:05 - 00001443 _____ C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-26 17:05 - 2013-08-26 17:05 - 00001409 _____ C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Vorlagen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Startmenü 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Netzwerkumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Lokale Einstellungen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Eigene Dateien 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Druckumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Musik 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Bilder 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Verlauf 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 __SHD C:\Recovery 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip\AppData\Local\VirtualStore 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip 2013-08-26 17:05 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Macromedia 2013-08-26 17:05 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Adobe 2013-08-26 17:05 - 2011-04-20 10:33 - 00000000 ____D C:\Users\Yosip\AppData\Local\Adobe 2013-08-26 17:05 - 2011-04-20 10:31 - 00000000 ____D C:\Users\Yosip\AppData\Local\Downloaded Installations 2013-08-26 17:05 - 2011-04-20 10:20 - 00000000 ____D C:\Users\Yosip\AppData\Local\Windows Live 2013-08-26 17:05 - 2011-04-20 10:03 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Intel Corporation 2013-08-26 17:05 - 2011-04-20 09:47 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\InstallShield 2013-08-26 17:05 - 2010-11-21 04:50 - 00000020 ___SH C:\Users\Yosip\ntuser.ini 2013-08-26 17:05 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-08-26 17:05 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Programme 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Favoriten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-08-26 16:01 - 2013-08-26 16:01 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-08-26 13:32 - 2011-01-27 13:34 - 00003126 _____ C:\Windows\SysWOW64\atipblup.dat 2013-08-26 13:32 - 2011-01-27 13:34 - 00003126 _____ C:\Windows\system32\atipblup.dat 2013-08-26 13:25 - 2013-08-26 13:25 - 00000000 ____D C:\Program Files\ATI 2013-08-26 13:19 - 2013-08-26 15:46 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-08-26 12:58 - 2013-08-26 15:51 - 00000364 _____ C:\Windows\Driver_install.log 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Adobe 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Adobe 2013-08-26 12:53 - 2011-04-20 10:33 - 00000000 ____D C:\Users\Default\AppData\Local\Adobe 2013-08-26 12:53 - 2011-04-20 10:33 - 00000000 ____D C:\Users\Default User\AppData\Local\Adobe 2013-08-26 12:53 - 2011-04-20 10:31 - 00000000 ____D C:\Users\Default\AppData\Local\Downloaded Installations 2013-08-26 12:53 - 2011-04-20 10:31 - 00000000 ____D C:\Users\Default User\AppData\Local\Downloaded Installations 2013-08-26 12:53 - 2011-04-20 10:20 - 00000000 ____D C:\Users\Default\AppData\Local\Windows Live 2013-08-26 12:53 - 2011-04-20 10:20 - 00000000 ____D C:\Users\Default User\AppData\Local\Windows Live 2013-08-26 12:53 - 2011-04-20 10:03 - 00057560 _____ C:\Users\Default\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-26 12:53 - 2011-04-20 10:03 - 00057560 _____ C:\Users\Default User\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-26 12:53 - 2011-04-20 10:03 - 00000000 ____D C:\Users\Default\AppData\Roaming\Intel Corporation 2013-08-26 12:53 - 2011-04-20 10:03 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Intel Corporation 2013-08-26 12:53 - 2011-04-20 09:47 - 00000000 ____D C:\Users\Default\AppData\Roaming\InstallShield 2013-08-26 12:53 - 2011-04-20 09:47 - 00000000 ____D C:\Users\Default User\AppData\Roaming\InstallShield 2013-08-26 12:53 - 2010-11-21 04:50 - 00000020 ___SH C:\Users\Default\ntuser.ini 2013-08-26 12:49 - 2013-08-26 19:37 - 00047182 _____ C:\Windows\WindowsUpdate.log ==================== One Month Modified Files and Folders ======= 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\WCN 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\sysprep 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\slmgr 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\winrm 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\WCN 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\slmgr 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\MUI 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\MUI 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing 2013-08-26 22:38 - 2009-03-12 11:30 - 00000000 ____D C:\Windows\LP 2013-08-26 22:37 - 2013-08-26 22:37 - 00295922 _____ C:\Windows\system32\perfi007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00038104 _____ C:\Windows\system32\perfd007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\0407 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\0407 2013-08-26 22:37 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal 2013-08-26 22:37 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts 2013-08-26 22:37 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts 2013-08-26 22:37 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\DigitalLocker 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Setup 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\com 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Setup 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\com 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\IME 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System 2013-08-26 22:34 - 2013-08-26 22:34 - 00000000 ____D C:\Windows\NAPP_Dism_Log 2013-08-26 22:31 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG 2013-08-26 22:31 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2013-08-26 22:12 - 2013-08-26 22:12 - 01577068 _____ (Farbar) C:\Users\Yosip\Desktop\FRST64.exe 2013-08-26 22:12 - 2013-08-26 22:12 - 00000000 ____D C:\FRST 2013-08-26 22:12 - 2013-08-26 12:49 - 00047182 _____ C:\Windows\WindowsUpdate.log 2013-08-26 19:38 - 2013-08-26 22:37 - 00643866 _____ C:\Windows\system32\perfh007.dat 2013-08-26 19:38 - 2013-08-26 22:37 - 00126394 _____ C:\Windows\system32\perfc007.dat 2013-08-26 19:38 - 2009-07-14 07:13 - 01472002 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-26 18:38 - 2013-08-26 17:05 - 00059968 _____ C:\Users\Yosip\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-26 18:35 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-26 18:35 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-26 18:34 - 2011-04-20 10:17 - 00000000 ____D C:\ProgramData\McAfee 2013-08-26 18:28 - 2011-04-20 10:18 - 00001832 _____ C:\Users\Public\Desktop\McAfee Internet Security Suite.lnk 2013-08-26 18:24 - 2011-04-20 10:17 - 00000000 ____D C:\Program Files (x86)\McAfee 2013-08-26 18:24 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-26 18:24 - 2009-07-14 06:51 - 00035975 _____ C:\Windows\setupact.log 2013-08-26 17:05 - 2013-08-26 17:05 - 00001443 _____ C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-26 17:05 - 2013-08-26 17:05 - 00001409 _____ C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Vorlagen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Startmenü 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Netzwerkumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Lokale Einstellungen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Eigene Dateien 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Druckumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Musik 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Bilder 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Verlauf 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 __SHD C:\Recovery 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip\AppData\Local\VirtualStore 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip 2013-08-26 17:05 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore 2013-08-26 17:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Programme 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Favoriten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-08-26 17:04 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries 2013-08-26 17:04 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-08-26 17:04 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT 2013-08-26 16:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-26 16:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep 2013-08-26 16:35 - 2007-07-12 03:49 - 00000000 ____D C:\Windows\Panther 2013-08-26 16:09 - 2009-07-14 06:46 - 00004059 _____ C:\Windows\DtcInstall.log 2013-08-26 16:01 - 2013-08-26 16:01 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-08-26 15:52 - 2011-04-20 10:25 - 00000000 ___HD C:\OEM 2013-08-26 15:52 - 2011-04-20 09:42 - 00004511 _____ C:\Windows\patch.log 2013-08-26 15:51 - 2013-08-26 12:58 - 00000364 _____ C:\Windows\Driver_install.log 2013-08-26 15:51 - 2011-04-20 10:18 - 00000000 ____D C:\Program Files (x86)\Acer 2013-08-26 15:46 - 2013-08-26 13:19 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-08-26 13:25 - 2013-08-26 13:25 - 00000000 ____D C:\Program Files\ATI 2013-08-26 13:10 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-08-26 12:55 - 2009-07-14 06:51 - 00000269 _____ C:\Windows\setuperr.log 2013-08-26 12:52 - 2011-04-20 09:37 - 00003652 _____ C:\Windows\TSSysprep.log 2013-08-26 12:45 - 2010-11-21 05:47 - 00005164 _____ C:\Windows\PFRO.log 2013-08-26 12:45 - 2009-07-14 06:45 - 00283104 _____ C:\Windows\system32\FNTCACHE.DAT ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2011-04-20 09:34 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-08-2013 Ran by Yosip at 2013-08-26 22:13:41 Running from C:\Users\Yosip\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 1912 Titanic Mystery (x32) Acer Backup Manager (x32 Version: 3.0.0.90) Acer eRecovery Management (x32 Version: 5.00.3004) Acer GameZone Console (x32 Version: 6.1.0.40497) Acer Registration (x32 Version: 1.03.3004) Acer ScreenSaver (x32 Version: 1.1.1206.2010) Acer Updater (x32 Version: 1.02.3005) Acrobat.com (x32 Version: 1.6.65) Adobe AIR (x32 Version: 1.5.0.7220) Adobe Flash Player 10 ActiveX (x32 Version: 10.2.153.1) Adobe Reader 9.1 MUI (x32 Version: 9.1.0) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.36) ATI Catalyst Install Manager (Version: 3.0.812.0) Backup Manager V3 (x32 Version: 3.0.0.90) Bejeweled 2 Deluxe (x32) Belles Beauty Boutique (x32) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center InstallProxy (x32 Version: 2011.0208.2202.39516) Catalyst Control Center Localization All (x32 Version: 2011.0208.2202.39516) CCC Help Chinese Standard (x32 Version: 2011.0208.2201.39516) CCC Help Chinese Traditional (x32 Version: 2011.0208.2201.39516) CCC Help Czech (x32 Version: 2011.0208.2201.39516) CCC Help Danish (x32 Version: 2011.0208.2201.39516) CCC Help Dutch (x32 Version: 2011.0208.2201.39516) CCC Help English (x32 Version: 2011.0208.2201.39516) CCC Help Finnish (x32 Version: 2011.0208.2201.39516) CCC Help French (x32 Version: 2011.0208.2201.39516) CCC Help German (x32 Version: 2011.0208.2201.39516) CCC Help Greek (x32 Version: 2011.0208.2201.39516) CCC Help Hungarian (x32 Version: 2011.0208.2201.39516) CCC Help Italian (x32 Version: 2011.0208.2201.39516) CCC Help Japanese (x32 Version: 2011.0208.2201.39516) CCC Help Korean (x32 Version: 2011.0208.2201.39516) CCC Help Norwegian (x32 Version: 2011.0208.2201.39516) CCC Help Polish (x32 Version: 2011.0208.2201.39516) CCC Help Portuguese (x32 Version: 2011.0208.2201.39516) CCC Help Russian (x32 Version: 2011.0208.2201.39516) CCC Help Spanish (x32 Version: 2011.0208.2201.39516) CCC Help Swedish (x32 Version: 2011.0208.2201.39516) CCC Help Thai (x32 Version: 2011.0208.2201.39516) CCC Help Turkish (x32 Version: 2011.0208.2201.39516) ccc-core-static (x32 Version: 2011.0208.2202.39516) ccc-utility64 (Version: 2011.0208.2202.39516) Chicken Invaders 3 (x32) D3DX10 (x32 Version: 15.4.2368.0902) dows Live Remote Service Resources (Version: 15.4.5722.2) Dream Day First Home (x32) Farm Frenzy 3 Ice Age (x32) Flip Words (x32) Fotogalerija Windows Live (x32 Version: 15.4.3502.0922) Galapago (x32) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922) Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922) Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922) Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922) Galerie de photos Windows Live (x32 Version: 15.4.3502.0922) Galerie foto Windows Live (x32 Version: 15.4.3502.0922) Identity Card (x32 Version: 1.00.3006) Intel(R) Management Engine Components (x32 Version: 7.0.0.1144) Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004) Junk Mail filter update (x32 Version: 15.4.3502.0922) McAfee Internet Security Suite (x32 Version: 10.0.570) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Silverlight (x32 Version: 4.0.50401.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MyWinLocker (Version: 4.0.14.11) MyWinLocker 4 (x32 Version: 4.0.14.11) MyWinLocker Suite (x32 Version: 4.0.14.11) newsXpresso (x32 Version: 1.0.0.40) Norton Online Backup (x32 Version: 2.1.17869) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922) Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922) Pošta Windows Live (x32 Version: 15.4.3502.0922) PX Profile Update (x32 Version: 1.00.1.) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922) Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30123) Shredder (Version: 2.0.8.7) Shredder (x32 Version: 2.0.8.7) Sprill and Ritchie (x32) Welcome Center (x32 Version: 1.02.3102) Windows Live Argazki Galeria (x32 Version: 15.4.3502.0922) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3508.1109) Windows Live Fotogaléria (x32 Version: 15.4.3502.0922) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live Fotogalleri (x32 Version: 15.4.3502.0922) Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922) Windows Live Fotótár (x32 Version: 15.4.3502.0922) Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922) Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3508.1109) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Live 影像中心 (x32 Version: 15.4.3502.0922) Windows Live 程式集 (x32 Version: 15.4.3502.0922) Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922) Windows Liven sähköposti (x32 Version: 15.4.3502.0922) Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922) World of Goo (x32) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922) Основные компоненты Windows Live (x32 Version: 15.4.3502.0922) Почта Windows Live (x32 Version: 15.4.3502.0922) Фотоальбом Windows Live (x32 Version: 15.4.3502.0922) Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922) גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922) بريد Windows Live (x32 Version: 15.4.3502.0922) معرض صور Windows Live (x32 Version: 15.4.3502.0922) ==================== Restore Points ========================= 26-08-2013 15:05:25 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {14EC97FD-AC9E-4209-AA6B-ABEE112311F5} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {34C14439-8CAF-4F8D-8B19-5B78D6FDF4F1} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2011-04-08] (Acer) Task: {EB7F6DAE-6F91-4ED3-B26E-5ADE426815D6} - System32\Tasks\LyricXeeker Update => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe [2013-08-26] () Task: C:\Windows\Tasks\LyricXeeker Update.job => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe ==================== Faulty Device Manager Devices ============= Name: USB (Universal Serial Bus)-Controller Description: USB (Universal Serial Bus)-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (08/26/2013 06:24:54 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:43:42 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:30:43 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:12:19 PM) (Source: Application Hang) (User: ) Description: Programm taskmgr.exe, Version 6.1.7601.17514 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1218 Startzeit: 01cea26e41d560be Endzeit: 4352 Anwendungspfad: C:\Windows\system32\taskmgr.exe Berichts-ID: e088482d-0e61-11e3-ab4b-b870f49197a1 Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (08/26/2013 05:06:24 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (08/26/2013 05:05:46 PM) (Source: ESENT) (User: ) Description: WinMail (3096) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde. System errors: ============= Error: (08/26/2013 10:19:42 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:19:41 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:19:39 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:19:20 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:18:21 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:18:20 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:18:18 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:17:32 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:17:31 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:17:29 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Microsoft Office Sessions: ========================= Error: (08/26/2013 06:24:54 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:43:42 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:30:43 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:12:19 PM) (Source: Application Hang)(User: ) Description: taskmgr.exe6.1.7601.17514121801cea26e41d560be4352C:\Windows\system32\taskmgr.exee088482d-0e61-11e3-ab4b-b870f49197a1 Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (08/26/2013 05:06:24 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (08/26/2013 05:05:46 PM) (Source: ESENT)(User: ) Description: WinMail3096WindowsMail0: ==================== Memory info =========================== Percentage of memory in use: 28% Total physical RAM: 4077.86 MB Available physical RAM: 2934.46 MB Total Pagefile: 8153.92 MB Available Pagefile: 6763.54 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:95.69 GB) (Free:65.28 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: 6E9FA0EB) Partition 1: (Not Active) - (Size=16 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=96 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 6E9FA0DD) Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
27.08.2013, 10:55 | #4 | |
/// the machine /// TB-Ausbilder | Auf zweite Festplatte kann nicht mehr zugegriffen werden Festplatte D wird auch in den Logs nicht angezeigt. Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
28.08.2013, 09:33 | #5 |
| Auf zweite Festplatte kann nicht mehr zugegriffen werden Schon mal vielen Dank für die Hilfe und hier ist der Log Code:
ATTFilter ComboFix 13-08-27.02 - Yosip 28.08.2013 9:08.1.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.4078.3005 [GMT 2:00] ausgeführt von:: c:\users\Yosip\Desktop\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\BrowserDefender c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bl c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.settings c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\dm c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\00 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\01 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\02 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\03 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\10 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\11 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\12 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\13 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\20 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\21 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\22 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\23 c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\uninstall.exe c:\users\Public\Documents\NTIMMV9Acer.dll c:\users\Public\Documents\NTIMMV9REGET.dll . . ((((((((((((((((((((((( Dateien erstellt von 2013-07-28 bis 2013-08-28 )))))))))))))))))))))))))))))) . . 2013-08-28 07:23 . 2013-08-28 07:23 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-08-28 01:45 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2013-08-28 01:45 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys 2013-08-28 01:45 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll 2013-08-28 01:35 . 2013-08-28 01:35 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-08-28 01:33 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe 2013-08-28 01:31 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll 2013-08-28 01:31 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll 2013-08-28 01:31 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll 2013-08-28 01:31 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll 2013-08-28 01:30 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys 2013-08-28 01:30 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys 2013-08-28 01:30 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll 2013-08-28 01:30 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll 2013-08-28 01:30 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll 2013-08-28 01:30 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe 2013-08-28 01:30 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll 2013-08-28 01:29 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys 2013-08-28 01:29 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll 2013-08-28 01:29 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll 2013-08-28 01:29 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll 2013-08-28 01:29 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll 2013-08-27 23:40 . 2013-08-27 23:40 378944 ----a-w- c:\windows\system32\drivers\aswSP.sys 2013-08-27 23:40 . 2013-05-09 08:59 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2013-08-27 23:40 . 2013-08-27 23:40 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys 2013-08-27 23:40 . 2013-08-27 23:40 1030952 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2013-08-27 23:40 . 2013-05-09 08:59 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys 2013-08-27 23:40 . 2013-05-09 08:59 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys 2013-08-27 23:40 . 2013-05-09 08:59 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2013-08-27 23:40 . 2013-05-09 08:59 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2013-08-27 23:40 . 2013-05-09 08:58 287840 ----a-w- c:\windows\system32\aswBoot.exe 2013-08-27 23:37 . 2013-05-09 08:58 41664 ----a-w- c:\windows\avastSS.scr 2013-08-27 23:37 . 2013-08-27 23:37 -------- d-----w- c:\program files\AVAST Software 2013-08-27 23:37 . 2013-08-27 23:37 -------- d-----w- c:\programdata\AVAST Software 2013-08-27 20:06 . 2013-08-27 20:06 -------- d-----w- c:\program files (x86)\VS Revo Group 2013-08-27 16:26 . 2013-08-27 16:26 -------- d-----w- c:\windows\SysWow64\wbem\en-US 2013-08-27 16:26 . 2013-08-27 16:26 -------- d-----w- c:\windows\system32\wbem\en-US 2013-08-27 16:16 . 2013-08-27 16:16 -------- d-----w- c:\programdata\CyberLink 2013-08-27 01:58 . 2013-08-27 01:58 -------- d-----w- c:\programdata\FLEXnet 2013-08-27 01:58 . 2013-08-27 01:58 -------- d-----w- c:\program files (x86)\Common Files\Macrovision Shared 2013-08-27 01:44 . 2013-07-09 05:52 224256 ----a-w- c:\windows\system32\wintrust.dll 2013-08-27 01:43 . 2012-01-04 10:44 509952 ----a-w- c:\windows\system32\ntshrui.dll 2013-08-27 01:42 . 2011-11-17 06:35 395776 ----a-w- c:\windows\system32\webio.dll 2013-08-27 01:42 . 2011-11-17 05:35 314880 ----a-w- c:\windows\SysWow64\webio.dll 2013-08-27 01:42 . 2013-03-19 05:53 48640 ----a-w- c:\windows\system32\wwanprotdim.dll 2013-08-27 01:42 . 2013-03-19 05:53 230400 ----a-w- c:\windows\system32\wwansvc.dll 2013-08-27 01:42 . 2013-04-12 14:45 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys 2013-08-27 01:42 . 2011-12-30 06:26 515584 ----a-w- c:\windows\system32\timedate.cpl 2013-08-27 01:42 . 2011-12-30 05:27 478720 ----a-w- c:\windows\SysWow64\timedate.cpl 2013-08-27 01:40 . 2013-02-12 04:12 19968 ----a-w- c:\windows\system32\drivers\usb8023.sys 2013-08-27 01:39 . 2011-04-22 22:15 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys 2013-08-27 01:35 . 2012-12-07 11:20 30720 ----a-w- c:\windows\system32\usk.rs 2013-08-27 01:34 . 2013-08-27 01:34 -------- d-----w- c:\programdata\InstallShield 2013-08-27 01:33 . 2013-06-15 04:32 39936 ----a-w- c:\windows\system32\drivers\tssecsrv.sys 2013-08-27 01:33 . 2012-03-17 07:58 75120 ----a-w- c:\windows\system32\drivers\partmgr.sys 2013-08-27 01:33 . 2011-08-17 05:26 613888 ----a-w- c:\windows\system32\psisdecd.dll 2013-08-27 01:33 . 2011-08-17 05:25 108032 ----a-w- c:\windows\system32\psisrndr.ax 2013-08-27 01:33 . 2011-08-17 04:24 465408 ----a-w- c:\windows\SysWow64\psisdecd.dll 2013-08-27 01:33 . 2011-08-17 04:19 75776 ----a-w- c:\windows\SysWow64\psisrndr.ax 2013-08-27 01:33 . 2012-04-07 12:31 3216384 ----a-w- c:\windows\system32\msi.dll 2013-08-27 01:33 . 2012-04-07 11:26 2342400 ----a-w- c:\windows\SysWow64\msi.dll 2013-08-27 01:32 . 2011-12-28 03:59 498688 ----a-w- c:\windows\system32\drivers\afd.sys 2013-08-27 01:30 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll 2013-08-27 01:30 . 2013-04-26 04:55 492544 ----a-w- c:\windows\SysWow64\win32spl.dll 2013-08-27 01:30 . 2012-11-23 03:13 68608 ----a-w- c:\windows\system32\taskhost.exe 2013-08-27 01:30 . 2013-04-10 05:48 1732608 ----a-w- c:\program files\Windows Journal\NBDoc.DLL 2013-08-27 01:30 . 2013-04-10 05:46 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll 2013-08-27 01:30 . 2013-04-10 05:46 1393152 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll 2013-08-27 01:30 . 2013-04-10 05:46 1367040 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll 2013-08-27 01:30 . 2013-04-10 05:03 936448 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll 2013-08-27 01:30 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll 2013-08-27 01:30 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll 2013-08-27 01:24 . 2012-05-14 05:26 956928 ----a-w- c:\windows\system32\localspl.dll 2013-08-27 01:24 . 2011-08-27 05:37 861696 ----a-w- c:\windows\system32\oleaut32.dll 2013-08-27 01:24 . 2011-08-27 05:37 331776 ----a-w- c:\windows\system32\oleacc.dll 2013-08-27 01:24 . 2011-08-27 04:26 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll 2013-08-27 01:24 . 2011-08-27 04:26 233472 ----a-w- c:\windows\SysWow64\oleacc.dll 2013-08-27 01:24 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll 2013-08-27 01:24 . 2011-10-15 05:38 534528 ----a-w- c:\windows\SysWow64\EncDec.dll 2013-08-27 01:22 . 2010-12-05 02:31 41272320 ----a-w- c:\programdata\Microsoft\OEMOffice14\Office14\Updates\word.msp 2013-08-27 01:19 . 2013-08-27 01:19 -------- d-----w- c:\program files (x86)\Microsoft 2013-08-27 01:11 . 2013-08-27 01:11 -------- d-----w- c:\programdata\Atheros 2013-08-27 00:55 . 2013-08-27 00:55 -------- d-----w- c:\program files (x86)\Common Files\Atheros 2013-08-27 00:55 . 2013-08-27 00:56 -------- d-----w- c:\program files (x86)\Bluetooth Suite 2013-08-27 00:23 . 2013-08-27 00:23 -------- d-----w- c:\windows\SysWow64\RTCOM 2013-08-26 23:55 . 2013-08-26 23:55 -------- d-----w- c:\program files (x86)\Renesas Electronics 2013-08-26 23:48 . 2013-08-26 23:48 -------- d-----w- c:\program files\Intel 2013-08-26 23:42 . 2013-08-26 23:42 -------- d-----w- c:\program files (x86)\Launch Manager 2013-08-26 23:41 . 2013-08-26 23:41 -------- d-----w- c:\program files (x86)\Google 2013-08-26 23:02 . 2011-02-23 04:55 90624 ----a-w- c:\windows\system32\drivers\bowser.sys 2013-08-26 22:56 . 2011-03-03 06:24 183296 ----a-w- c:\windows\system32\dnsrslvr.dll 2013-08-26 22:56 . 2011-03-03 06:24 357888 ----a-w- c:\windows\system32\dnsapi.dll 2013-08-26 22:56 . 2011-03-03 06:21 30208 ----a-w- c:\windows\system32\dnscacheugc.exe 2013-08-26 22:56 . 2011-03-03 05:36 28672 ----a-w- c:\windows\SysWow64\dnscacheugc.exe 2013-08-26 22:40 . 2011-03-11 06:34 1395712 ----a-w- c:\windows\system32\mfc42.dll 2013-08-26 22:40 . 2011-03-11 06:34 1359872 ----a-w- c:\windows\system32\mfc42u.dll 2013-08-26 22:40 . 2011-03-11 05:33 1164288 ----a-w- c:\windows\SysWow64\mfc42u.dll 2013-08-26 22:40 . 2011-03-11 05:33 1137664 ----a-w- c:\windows\SysWow64\mfc42.dll 2013-08-26 22:35 . 2011-02-05 17:10 642944 ----a-w- c:\windows\system32\winload.efi 2013-08-26 22:35 . 2011-02-05 17:10 20352 ----a-w- c:\windows\system32\kdusb.dll 2013-08-26 22:35 . 2011-02-05 17:10 19328 ----a-w- c:\windows\system32\kd1394.dll 2013-08-26 22:35 . 2011-02-05 17:10 17792 ----a-w- c:\windows\system32\kdcom.dll 2013-08-26 22:35 . 2011-02-05 17:06 605552 ----a-w- c:\windows\system32\winload.exe 2013-08-26 22:35 . 2011-02-05 17:06 566208 ----a-w- c:\windows\system32\winresume.efi 2013-08-26 22:35 . 2011-02-05 17:06 518672 ----a-w- c:\windows\system32\winresume.exe 2013-08-26 22:25 . 2011-02-12 11:34 267776 ----a-w- c:\windows\system32\FXSCOVER.exe 2013-08-26 20:49 . 2013-08-26 20:49 -------- d---a-w- C:\book 2013-08-26 20:37 . 2013-08-26 20:37 -------- d-----w- c:\windows\de-DE 2013-08-26 20:37 . 2013-08-28 02:14 -------- d-----w- c:\windows\SysWow64\wbem\de-DE 2013-08-26 20:37 . 2013-08-26 20:37 -------- d-----w- c:\windows\SysWow64\XPSViewer 2013-08-26 20:37 . 2013-08-26 20:37 -------- d-----w- c:\windows\SysWow64\drivers\UMDF\de-DE 2013-08-26 20:37 . 2013-08-26 20:37 -------- d-----w- c:\windows\SysWow64\drivers\de-DE 2013-08-26 20:37 . 2013-08-26 20:37 -------- d-----w- c:\windows\SysWow64\de 2013-08-26 20:37 . 2013-08-26 20:37 -------- d-----w- c:\windows\SysWow64\0407 2013-08-26 20:37 . 2013-08-28 02:14 -------- d-----w- c:\windows\system32\wbem\de-DE 2013-08-26 20:37 . 2013-08-28 02:14 -------- d-----w- c:\windows\system32\drivers\de-DE 2013-08-26 20:37 . 2013-08-26 20:37 -------- d-----w- c:\windows\system32\drivers\UMDF\de-DE 2013-08-26 20:37 . 2013-08-26 20:37 -------- d-----w- c:\windows\system32\de 2013-08-26 20:37 . 2013-08-26 20:37 -------- d-----w- c:\windows\system32\0407 2013-08-26 20:36 . 2013-08-26 20:36 3584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\de-DE\LXKPTPRC.DLL.mui 2013-08-26 20:34 . 2013-08-26 20:34 -------- d-----w- c:\windows\NAPP_Dism_Log 2013-08-26 20:27 . 2013-08-26 20:27 -------- d-----w- c:\programdata\EgisTec 2013-08-26 20:22 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll 2013-08-26 20:22 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll 2013-08-26 20:22 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-08-26 20:36 . 2013-08-26 20:36 2560 ----a-w- c:\windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui 2013-08-26 20:36 . 2013-08-26 20:36 5632 ----a-w- c:\windows\SysWow64\drivers\de-DE\ndiscap.sys.mui 2013-08-26 20:36 . 2013-08-26 20:36 2560 ----a-w- c:\windows\SysWow64\drivers\de-DE\scfilter.sys.mui 2013-08-26 20:36 . 2013-08-26 20:36 51712 ----a-w- c:\windows\SysWow64\drivers\de-DE\tcpip.sys.mui 2013-08-26 20:36 . 2013-08-26 20:36 29696 ----a-w- c:\windows\SysWow64\drivers\de-DE\bfe.dll.mui 2013-08-26 20:36 . 2013-08-26 20:36 16896 ----a-w- c:\windows\SysWow64\drivers\de-DE\pacer.sys.mui 2013-08-26 15:06 . 2010-06-24 18:33 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{8a4145d9-decb-4d9d-aba7-b79390bcbb17}] 2013-08-26 02:33 145408 ----a-w- c:\program files (x86)\LyriXeeker\130.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-01-13 283160] "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-09-23 1486392] "SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-09-28 340336] "EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-09-17 407920] "EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-09-17 201584] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696] "BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-03-09 297280] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-02-08 336384] "OOTag"="c:\program files (x86)\Acer\OOBEOffer\OOTag.exe" [2010-02-23 13856] "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-03-14 1081424] "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288] "Dolby Advanced Audio v2"="c:\dolby pcee4\pcee4.exe" [2011-02-03 506712] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x] R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x] R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x] R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x] R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x] R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x] R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x] R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x] R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys;c:\windows\SYSNATIVE\drivers\cfwids.sys [x] R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x] R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys;c:\windows\SYSNATIVE\drivers\mferkdet.sys [x] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x] R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [x] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x] S0 aswRvrt;aswRvrt; [x] S0 aswVmm;aswVmm; [x] S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys;c:\windows\SYSNATIVE\drivers\mfewfpk.sys [x] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys;c:\windows\SYSNATIVE\DRIVERS\mfenlfk.sys [x] S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x] S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x] S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x] S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x] S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x] S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x] S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x] S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x] S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [x] S2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\Common Files\McAfee\SystemCore\mfevtps.exe;c:\program files\Common Files\McAfee\SystemCore\mfevtps.exe [x] S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [x] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x] S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x] S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x] S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys;c:\windows\SYSNATIVE\drivers\mfefirek.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-08-26 23:41 1177552 ----a-w- c:\program files (x86)\Google\Chrome\Application\29.0.1547.57\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2013-08-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-08-26 23:41] . 2013-08-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-08-26 23:41] . 2013-08-28 c:\windows\Tasks\LyricXeeker Update.job - c:\program files (x86)\LyriXeeker\LyriXupdate.exe [2013-08-26 02:33] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Trigger New Acer AlaunchX"="c:\oem\Preload\Command\AlaunchX\AppInRun.exe" [2009-09-21 304672] "IntelTBRunOnce"="wscript.exe" [2009-07-14 168960] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-03-10 11785832] "RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-03-09 2189416] "AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-03-13 617120] "AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-03-13 379552] "Power Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2011-02-22 1796200] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "New Acer AlaunchX"="c:\oem\Preload\Command\AlaunchX\LaunchAlaunchX.exe" [2009-09-21 300064] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=0C5390004E261277&affID=119357&tsp=4986 mLocal Page = c:\windows\SysWOW64\blank.htm TCP: DhcpNameServer = 192.168.2.1 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Toolbar-Locked - (no file) HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start Toolbar-Locked - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} - c:\programdata\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\uninstall.exe . . . Zeit der Fertigstellung: 2013-08-28 09:46:48 ComboFix-quarantined-files.txt 2013-08-28 07:46 . Vor Suchlauf: 9 Verzeichnis(se), 60.831.911.936 Bytes frei Nach Suchlauf: 15 Verzeichnis(se), 60.620.886.016 Bytes frei . - - End Of File - - F7C044929B4615CE3F27C67FB4F88695 |
28.08.2013, 13:26 | #6 |
/// the machine /// TB-Ausbilder | Auf zweite Festplatte kann nicht mehr zugegriffen werden Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Auf zweite Festplatte kann nicht mehr zugegriffen werden |
28.08.2013, 22:27 | #7 |
| Auf zweite Festplatte kann nicht mehr zugegriffen werden wow Malwarebytes hat 36 infizierte Objekte entdeckt. Aber nachdem ich die Malware entfernt hab merkte ich performance-weise keinen besonderen Unterschied. Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.28.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16660 Yosip :: YOSIP-PC [Administrator] 28.08.2013 15:40:55 mbam-log-2013-08-28 (15-40-55).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 220477 Laufzeit: 1 Minute(n), 48 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 10 HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{8a4145d9-decb-4d9d-aba7-b79390bcbb17} (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4145D9-DECB-4D9D-ABA7-B79390BCBB17} (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{8A4145D9-DECB-4D9D-ABA7-B79390BCBB17} (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A4145D9-DECB-4D9D-ABA7-B79390BCBB17} (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\TypeLib\{72e2ef08-5cd1-41f1-b4ed-d8254e29555a} (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Interface\{3a689d97-1f9b-4405-ab80-f8b82d18d4a0} (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{182a752f-b1ba-420d-ad2a-f01864686c47} (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 3 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|bProtector Start Page (PUP.BProtector) -> Daten: hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=0C5390004E261277&affID=119357&tsp=4986 -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|bProtectorDefaultScope (PUP.BProtector) -> Daten: {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0L1N1H2O1S -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 1 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.StartPage) -> Bösartig: (hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=0C5390004E261277&affID=119357&tsp=4986) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 2 C:\Users\Yosip\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 20 C:\Users\Yosip\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\chrome.manifest (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\00.crx (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\00.xpi (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\01.crx (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\01.xpi (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\02.crx (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\02.xpi (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\130.crx (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\130.dat (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\130.dll (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\130.xpi (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\crx.dat (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\crx.db (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\sqlite3.dll (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\Uninstall.exe (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\xpi.dat (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\LyriXeeker\xpi.db (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\LyricXeeker Update.job (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.001 - Report created 28/08/2013 at 17:42:19 # Updated 24/08/2013 by Xplode # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits) # Username : Yosip - YOSIP-PC # Running from : C:\Users\Yosip\Downloads\adwcleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\Users\Yosip\AppData\LocalLow\delta Folder Deleted : C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender File Deleted : C:\Windows\System32\Tasks\BrowserDefendert ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap Key Deleted : HKCU\Software\5b55dbdab568ea46 Key Deleted : HKLM\SOFTWARE\5b55dbdab568ea46 Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Key Deleted : HKCU\Software\Delta Key Deleted : HKCU\Software\AppDataLow\Software\lyrixeeker Key Deleted : HKLM\Software\DataMngr Key Deleted : HKLM\Software\Delta Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693} ***** [ Browsers ] ***** -\\ Internet Explorer v10.0.9200.16660 Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [bProtectTabs] -\\ Google Chrome v29.0.1547.57 [ File : C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [1925 octets] - [28/08/2013 17:41:46] AdwCleaner[S0].txt - [1640 octets] - [28/08/2013 17:42:19] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1700 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.5.4 (08.22.2013:1) OS: Windows 7 Home Premium x64 Ran by Yosip on 28.08.2013 at 18:17:57,35 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully deleted [Registry Value] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\bProtectTabs ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\Yosip\appdata\local\{0E893C9A-7104-4A8B-883D-9B731E3E50AB} ~~~ Chrome Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\epojlgbehpaeekopencdagbdamnkppci ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 28.08.2013 at 18:28:39,83 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013 Ran by Yosip (administrator) on 28-08-2013 19:29:14 Running from C:\Users\Yosip\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (AMD) C:\Windows\system32\atieclxx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe () C:\OEM\Preload\Command\AlaunchX\AlaunchX.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (McAfee, Inc.) C:\Program Files\mcafee.com\agent\mcagent.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Dolby Laboratories Inc.) C:\DOLBY PCEE4\pcee4.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Trigger New Acer AlaunchX] - c:\OEM\Preload\Command\AlaunchX\AppInRun.exe [304672 2009-09-21] () HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] () HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-09] (Realtek Semiconductor) HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Communications) HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations) HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1796200 2011-02-22] (Acer Incorporated) HKLM\...\RunOnce: [New Acer AlaunchX] - c:\OEM\Preload\Command\AlaunchX\LaunchAlaunchX.exe [300064 2009-09-21] (Acer Inc.) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation) HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1486392 2011-09-23] (McAfee, Inc.) HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340336 2010-09-28] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-09-18] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-09-18] (Egis Technology Inc.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-03-09] (NTI Corporation) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-08] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [OOTag] - C:\Program Files (x86)\Acer\OOBEOffer\OOTag.exe [13856 2010-02-23] (Microsoft) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1081424 2011-03-14] (Dritek System Inc.) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation) HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Dolby PCEE4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software) HKU\Default\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} [x] HKU\Default User\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} [x] ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20130827224842.dll (McAfee, Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20130827224842.dll (McAfee, Inc.) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Chrome In-App Payments service) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0 CHR Extension: (Gmail) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software) S2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [355440 2010-03-10] (McAfee, Inc.) R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2010-03-10] (McAfee, Inc.) R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2010-03-10] (McAfee, Inc.) S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2010-03-10] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2010-03-10] (McAfee, Inc.) R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [200056 2011-04-14] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [245352 2011-04-14] (McAfee, Inc.) R2 mfevtp; C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe [149032 2011-04-14] (McAfee, Inc.) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2011-03-09] (NTI Corporation) ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-28] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-28] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-08-28] () S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [63056 2011-04-14] (McAfee, Inc.) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [121376 2011-04-14] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [190520 2011-04-14] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [441840 2011-04-14] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [530304 2011-04-14] (McAfee, Inc.) R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75160 2011-04-14] (McAfee, Inc.) S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [94992 2011-04-14] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [283744 2011-04-14] (McAfee, Inc.) S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-28 19:16 - 2013-08-28 19:16 - 00000000 ____D C:\Users\Yosip\AppData\Local\CrashDumps 2013-08-28 18:28 - 2013-08-28 18:28 - 00000998 _____ C:\Users\Yosip\Desktop\JRT.txt 2013-08-28 17:52 - 2013-08-28 17:52 - 01021434 _____ (Thisisu) C:\Users\Yosip\Desktop\JRT.exe 2013-08-28 17:42 - 2013-08-28 17:42 - 00001780 _____ C:\Users\Yosip\Desktop\AdwCleaner[S0].txt 2013-08-28 17:40 - 2013-08-28 19:13 - 00000000 ____D C:\AdwCleaner 2013-08-28 17:40 - 2013-08-28 17:40 - 00994642 _____ C:\Users\Yosip\Downloads\adwcleaner.exe 2013-08-28 14:45 - 2013-08-28 14:46 - 00000000 ____D C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.720p.HDTV.x264-KYR 2013-08-28 14:38 - 2013-08-28 14:44 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part01.rar 2013-08-28 14:36 - 2013-08-28 14:36 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Malwarebytes 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-28 14:36 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-08-28 14:35 - 2013-08-28 14:35 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Yosip\Downloads\mbam-setup-1.75.0.1300.exe 2013-08-28 14:30 - 2013-08-28 14:31 - 05999696 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part22.rar 2013-08-28 14:25 - 2013-08-28 14:34 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part21.rar 2013-08-28 14:21 - 2013-08-28 14:30 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part20.rar 2013-08-28 14:13 - 2013-08-28 14:25 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part19.rar 2013-08-28 14:12 - 2013-08-28 14:21 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part18.rar 2013-08-28 14:03 - 2013-08-28 14:13 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part17.rar 2013-08-28 14:02 - 2013-08-28 14:12 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part16.rar 2013-08-28 13:54 - 2013-08-28 14:03 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part15.rar 2013-08-28 13:52 - 2013-08-28 14:02 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part14.rar 2013-08-28 13:45 - 2013-08-28 13:54 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part13.rar 2013-08-28 13:42 - 2013-08-28 13:52 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part12.rar 2013-08-28 13:35 - 2013-08-28 13:45 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part11.rar 2013-08-28 13:33 - 2013-08-28 13:42 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part10.rar 2013-08-28 13:25 - 2013-08-28 13:35 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part09.rar 2013-08-28 13:24 - 2013-08-28 13:33 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part08.rar 2013-08-28 13:15 - 2013-08-28 13:24 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part07.rar 2013-08-28 13:14 - 2013-08-28 13:25 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part06.rar 2013-08-28 13:08 - 2013-08-28 13:15 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part05.rar 2013-08-28 13:02 - 2013-08-28 13:14 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part04.rar 2013-08-28 13:00 - 2013-08-28 13:08 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part03.rar 2013-08-28 12:51 - 2013-08-28 13:02 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part02.rar 2013-08-28 12:51 - 2013-08-28 12:51 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\WinRAR 2013-08-28 12:51 - 2013-08-26 18:31 - 00000000 ____D C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.HDTV.x264-IMMERSE 2013-08-28 12:47 - 2013-08-28 12:51 - 96953516 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part11.rar 2013-08-28 12:45 - 2013-08-28 12:50 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part10.rar 2013-08-28 12:42 - 2013-08-28 12:47 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part09.rar 2013-08-28 12:39 - 2013-08-28 12:45 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part08.rar 2013-08-28 12:39 - 2013-08-28 12:42 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part07.rar 2013-08-28 12:34 - 2013-08-28 12:39 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part06.rar 2013-08-28 12:33 - 2013-08-28 12:39 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part05.rar 2013-08-28 12:28 - 2013-08-28 12:34 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part04.rar 2013-08-28 12:28 - 2013-08-28 12:33 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part03.rar 2013-08-28 12:23 - 2013-08-28 12:28 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part02.rar 2013-08-28 12:23 - 2013-08-28 12:28 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part01.rar 2013-08-28 12:18 - 2013-08-28 12:19 - 00000000 ____D C:\Users\Yosip\AppData\Local\Windows Live Writer 2013-08-28 12:18 - 2013-08-28 12:18 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Windows Live Writer 2013-08-28 12:16 - 2013-08-28 12:16 - 00000000 ____D C:\Windows\System32\Tasks\Games 2013-08-28 09:45 - 2013-08-28 09:45 - 00000000 ____D C:\Windows\erdnt 2013-08-28 08:58 - 2013-08-28 09:46 - 00000000 ____D C:\Qoobox 2013-08-28 08:58 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-08-28 08:58 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-08-28 08:58 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-08-28 08:58 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-08-28 08:58 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-08-28 08:58 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-08-28 08:58 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-08-28 08:58 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-08-28 05:00 - 2013-08-28 05:00 - 05841248 _____ (Acer Incorporated) C:\Users\Yosip\Downloads\Updaterhotfix.exe 2013-08-28 04:43 - 2013-08-28 04:44 - 14620768 _____ (Acer Incorporated) C:\Users\Yosip\Downloads\Updaterpackage.exe 2013-08-28 03:45 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-08-28 03:45 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2013-08-28 03:45 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2013-08-28 03:45 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2013-08-28 03:38 - 2013-08-28 03:38 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-28 03:38 - 2013-08-28 03:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-28 03:38 - 2013-08-28 03:38 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-08-28 03:38 - 2013-08-28 03:38 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-08-28 03:38 - 2013-08-28 03:38 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-08-28 03:38 - 2013-08-28 03:38 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-08-28 03:38 - 2013-08-28 03:38 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-08-28 03:38 - 2013-08-28 03:38 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-08-28 03:38 - 2013-08-28 03:38 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-08-28 03:38 - 2013-08-28 03:38 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-08-28 03:38 - 2013-08-28 03:38 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-08-28 03:35 - 2013-08-28 03:35 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-08-28 03:34 - 2013-08-28 03:42 - 00014015 _____ C:\Windows\IE10_main.log 2013-08-28 03:33 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2013-08-28 03:31 - 2012-12-16 19:11 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-08-28 03:31 - 2012-12-16 16:45 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-08-28 03:31 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-08-28 03:31 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-08-28 03:30 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2013-08-28 03:30 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2013-08-28 03:30 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2013-08-28 03:30 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2013-08-28 03:30 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2013-08-28 03:30 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2013-08-28 03:30 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2013-08-28 03:30 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2013-08-28 03:29 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2013-08-28 03:29 - 2012-03-01 08:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-08-28 03:29 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2013-08-28 03:29 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-08-28 03:29 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2013-08-28 03:23 - 2013-08-28 03:23 - 05114158 ____R (Swearware) C:\Users\Yosip\Desktop\ComboFix.exe 2013-08-28 01:40 - 2013-08-28 01:40 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00189936 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-08-28 01:40 - 2013-08-28 01:40 - 00001926 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-08-28 01:40 - 2013-05-09 10:59 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-08-28 01:40 - 2013-05-09 10:59 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-08-28 01:40 - 2013-05-09 10:59 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-08-28 01:40 - 2013-05-09 10:59 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-08-28 01:40 - 2013-05-09 10:59 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-08-28 01:40 - 2013-05-09 10:58 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-08-28 01:37 - 2013-08-28 01:37 - 00000000 ____D C:\ProgramData\AVAST Software 2013-08-28 01:37 - 2013-08-28 01:37 - 00000000 ____D C:\Program Files\AVAST Software 2013-08-28 01:37 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-08-28 01:26 - 2013-08-28 01:30 - 117478104 _____ C:\Users\Yosip\Downloads\avast_free_antivirus_setup.exe 2013-08-27 22:06 - 2013-08-27 22:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Yosip\Downloads\revosetup95.exe 2013-08-27 22:06 - 2013-08-27 22:06 - 00001268 _____ C:\Users\Yosip\Desktop\Revo Uninstaller.lnk 2013-08-27 22:06 - 2013-08-27 22:06 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2013-08-27 18:21 - 2013-08-27 18:23 - 00003899 _____ C:\Windows\IE9_main.log 2013-08-27 18:16 - 2013-08-27 18:17 - 00001527 _____ C:\ProgramData\ArcadeDeluxe5.log 2013-08-27 18:16 - 2013-08-27 18:16 - 00000000 ____D C:\ProgramData\CyberLink 2013-08-27 18:12 - 2013-08-27 18:12 - 00000000 ____D C:\Users\Yosip\AppData\Local\Acer 2013-08-27 03:58 - 2013-08-27 03:58 - 00000000 ____D C:\ProgramData\FLEXnet 2013-08-27 03:45 - 2013-04-10 08:01 - 00983400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-08-27 03:45 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2013-08-27 03:45 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-08-27 03:45 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-08-27 03:45 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2013-08-27 03:45 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2013-08-27 03:45 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2013-08-27 03:45 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2013-08-27 03:45 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2013-08-27 03:45 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2013-08-27 03:45 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll 2013-08-27 03:45 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll 2013-08-27 03:45 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2013-08-27 03:45 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2013-08-27 03:45 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2013-08-27 03:45 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2013-08-27 03:45 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2013-08-27 03:45 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2013-08-27 03:45 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2013-08-27 03:45 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2013-08-27 03:45 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2013-08-27 03:45 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2013-08-27 03:45 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2013-08-27 03:45 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2013-08-27 03:45 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2013-08-27 03:45 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2013-08-27 03:44 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-27 03:44 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-27 03:44 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-27 03:44 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-27 03:44 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-27 03:44 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-27 03:44 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-27 03:44 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-27 03:44 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2013-08-27 03:44 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2013-08-27 03:44 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2013-08-27 03:44 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2013-08-27 03:44 - 2011-02-25 08:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2013-08-27 03:44 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2013-08-27 03:43 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2013-08-27 03:43 - 2013-02-27 07:52 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-08-27 03:43 - 2013-02-27 07:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2013-08-27 03:43 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-08-27 03:43 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2013-08-27 03:43 - 2013-02-27 06:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2013-08-27 03:43 - 2013-02-27 06:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2013-08-27 03:43 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-08-27 03:43 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2013-08-27 03:43 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2013-08-27 03:43 - 2011-07-09 04:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2013-08-27 03:43 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2013-08-27 03:43 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2013-08-27 03:43 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2013-08-27 03:43 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2013-08-27 03:43 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2013-08-27 03:43 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2013-08-27 03:43 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2013-08-27 03:43 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2013-08-27 03:43 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2013-08-27 03:43 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2013-08-27 03:43 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2013-08-27 03:43 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2013-08-27 03:43 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2013-08-27 03:43 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2013-08-27 03:43 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2013-08-27 03:43 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2013-08-27 03:43 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2013-08-27 03:43 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2013-08-27 03:43 - 2011-04-27 04:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2013-08-27 03:43 - 2011-04-27 04:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2013-08-27 03:42 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2013-08-27 03:42 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2013-08-27 03:42 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2013-08-27 03:42 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2013-08-27 03:42 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2013-08-27 03:42 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2013-08-27 03:42 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2013-08-27 03:41 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-27 03:41 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-27 03:41 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-27 03:41 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-27 03:41 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2013-08-27 03:41 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2013-08-27 03:40 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-27 03:40 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-27 03:40 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2013-08-27 03:40 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2013-08-27 03:40 - 2012-11-01 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2013-08-27 03:40 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2013-08-27 03:40 - 2012-11-01 06:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2013-08-27 03:40 - 2012-06-02 07:50 - 00458704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-08-27 03:40 - 2012-06-02 07:48 - 00151920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-08-27 03:40 - 2012-06-02 07:48 - 00095600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-08-27 03:40 - 2012-06-02 07:45 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-08-27 03:40 - 2012-06-02 06:40 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-08-27 03:40 - 2012-06-02 06:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-08-27 03:40 - 2012-06-02 06:34 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-08-27 03:40 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2013-08-27 03:40 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2013-08-27 03:40 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2013-08-27 03:40 - 2011-11-17 08:35 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-08-27 03:40 - 2011-11-17 08:35 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-08-27 03:40 - 2011-11-17 08:35 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-08-27 03:40 - 2011-11-17 08:35 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-08-27 03:40 - 2011-11-17 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-08-27 03:40 - 2010-06-26 05:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2013-08-27 03:40 - 2010-06-26 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2013-08-27 03:39 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-08-27 03:39 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-08-27 03:39 - 2013-01-04 07:46 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2013-08-27 03:39 - 2013-01-04 06:51 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-27 03:39 - 2013-01-04 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-27 03:39 - 2013-01-04 04:47 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-27 03:39 - 2013-01-04 04:47 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-27 03:39 - 2013-01-04 04:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-27 03:39 - 2012-11-22 07:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2013-08-27 03:39 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2013-08-27 03:39 - 2012-11-20 07:48 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-08-27 03:39 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-08-27 03:39 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2013-08-27 03:39 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2013-08-27 03:39 - 2012-10-03 19:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2013-08-27 03:39 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2013-08-27 03:39 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2013-08-27 03:39 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2013-08-27 03:39 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2013-08-27 03:39 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2013-08-27 03:39 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll 2013-08-27 03:39 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2013-08-27 03:39 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll 2013-08-27 03:39 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2013-08-27 03:39 - 2012-05-01 07:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2013-08-27 03:39 - 2012-01-13 09:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2013-08-27 03:39 - 2011-04-23 00:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2013-08-27 03:35 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2013-08-27 03:35 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2013-08-27 03:35 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2013-08-27 03:35 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2013-08-27 03:35 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2013-08-27 03:35 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2013-08-27 03:35 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2013-08-27 03:35 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2013-08-27 03:35 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2013-08-27 03:35 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2013-08-27 03:34 - 2013-08-27 03:34 - 00000000 ____D C:\ProgramData\InstallShield 2013-08-27 03:34 - 2013-08-27 03:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2013-08-27 03:33 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-27 03:33 - 2012-04-07 14:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2013-08-27 03:33 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2013-08-27 03:33 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2013-08-27 03:33 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2013-08-27 03:33 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2013-08-27 03:33 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2013-08-27 03:33 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2013-08-27 03:32 - 2011-12-28 05:59 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-08-27 03:31 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-08-27 03:31 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2013-08-27 03:31 - 2012-11-30 07:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2013-08-27 03:31 - 2012-11-30 07:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-27 03:31 - 2012-11-30 07:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2013-08-27 03:31 - 2012-11-30 07:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2013-08-27 03:31 - 2012-11-30 07:41 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2013-08-27 03:31 - 2012-11-30 07:41 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2013-08-27 03:31 - 2012-11-30 06:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 05:23 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2013-08-27 03:31 - 2012-11-30 04:38 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 04:38 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 04:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 04:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls 2013-08-27 03:31 - 2012-11-30 01:15 - 00420064 _____ C:\Windows\system32\locale.nls 2013-08-27 03:31 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2013-08-27 03:31 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2013-08-27 03:31 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2013-08-27 03:31 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2013-08-27 03:30 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-08-27 03:30 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-08-27 03:30 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2013-08-27 03:30 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-08-27 03:30 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2013-08-27 03:29 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-27 03:29 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2013-08-27 03:29 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2013-08-27 03:29 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-08-27 03:29 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2013-08-27 03:29 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2013-08-27 03:29 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2013-08-27 03:29 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2013-08-27 03:29 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2013-08-27 03:29 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2013-08-27 03:29 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2013-08-27 03:29 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2013-08-27 03:29 - 2012-05-05 10:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2013-08-27 03:29 - 2012-05-05 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2013-08-27 03:29 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2013-08-27 03:29 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2013-08-27 03:29 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2013-08-27 03:29 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2013-08-27 03:29 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2013-08-27 03:29 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2013-08-27 03:29 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2013-08-27 03:29 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2013-08-27 03:29 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2013-08-27 03:29 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2013-08-27 03:29 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2013-08-27 03:24 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2013-08-27 03:24 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2013-08-27 03:24 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2013-08-27 03:24 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2013-08-27 03:24 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2013-08-27 03:24 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2013-08-27 03:24 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2013-08-27 03:23 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-08-27 03:23 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-08-27 03:23 - 2013-03-19 08:04 - 05550424 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-27 03:23 - 2013-03-19 07:46 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2013-08-27 03:23 - 2013-03-19 07:04 - 03968856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-27 03:23 - 2013-03-19 07:04 - 03913560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-27 03:23 - 2013-03-19 06:47 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2013-08-27 03:23 - 2013-03-19 05:06 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2013-08-27 03:23 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2013-08-27 03:23 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll 2013-08-27 03:23 - 2012-02-11 08:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2013-08-27 03:23 - 2012-02-11 08:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe 2013-08-27 03:23 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2013-08-27 03:23 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2013-08-27 03:23 - 2011-11-17 08:41 - 01731920 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-27 03:23 - 2011-11-17 07:38 - 01292080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-27 03:11 - 2013-08-27 03:11 - 00000000 ____D C:\ProgramData\Atheros 2013-08-27 02:57 - 2013-08-27 02:57 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf 2013-08-27 02:56 - 2013-08-27 02:56 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2013-08-27 02:56 - 2013-08-27 02:56 - 00000000 ____D C:\Users\Yosip\Documents\Bluetooth Folder 2013-08-27 02:55 - 2013-08-27 02:56 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite 2013-08-27 02:23 - 2013-08-27 02:23 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-08-27 02:22 - 2013-08-27 02:22 - 00004844 _____ C:\Windows\DPINST.LOG 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____D C:\Program Files\Synaptics 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____D C:\Program Files\Realtek 2013-08-27 02:22 - 2011-03-18 10:19 - 00000176 _____ C:\Windows\system32\Drivers\RTHDAEQ0.dat 2013-08-27 02:22 - 2011-03-15 12:41 - 00084584 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll 2013-08-27 02:22 - 2011-03-15 12:30 - 02814952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2013-08-27 02:22 - 2011-03-15 09:32 - 00648808 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2013-08-27 02:22 - 2011-03-10 05:32 - 02931816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2013-08-27 02:22 - 2011-03-10 05:32 - 02369640 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2013-08-27 02:22 - 2011-03-09 11:10 - 00829440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2013-08-27 02:22 - 2011-03-07 07:25 - 03308376 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2013-08-27 02:22 - 2011-03-07 07:25 - 00426328 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2013-08-27 02:22 - 2011-03-07 07:25 - 00136024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2013-08-27 02:22 - 2011-03-07 07:25 - 00118104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2013-08-27 02:22 - 2011-03-07 07:25 - 00074072 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2013-08-27 02:22 - 2011-03-02 11:25 - 01242216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2013-08-27 02:22 - 2011-02-25 13:37 - 01284712 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2013-08-27 02:22 - 2011-02-22 09:52 - 02075712 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2013-08-27 02:22 - 2010-12-10 05:35 - 00003206 _____ C:\Windows\system32\Drivers\RtPCEE4.DAT 2013-08-27 02:22 - 2010-11-29 12:47 - 02578576 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll 2013-08-27 02:22 - 2010-11-29 12:47 - 01868944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll 2013-08-27 02:22 - 2010-11-29 02:17 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX0.dat 2013-08-27 02:22 - 2010-11-18 05:49 - 00121744 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2013-08-27 02:22 - 2010-11-03 12:31 - 01146984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2013-08-27 02:22 - 2010-11-03 12:31 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2013-08-27 02:22 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 01327208 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 01179752 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 01111656 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00504936 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00491112 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00475752 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00317032 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00269928 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00266856 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00126056 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00125544 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00125032 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2013-08-27 02:22 - 2010-10-03 07:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2013-08-27 02:22 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2013-08-27 02:22 - 2010-09-23 11:21 - 00039672 _____ C:\Windows\system32\Drivers\RtPCEE3.DAT 2013-08-27 02:22 - 2010-07-22 10:48 - 00220496 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFNHK64.dll 2013-08-27 02:22 - 2010-07-22 10:48 - 00081232 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFCOM64.dll 2013-08-27 02:22 - 2010-07-22 10:48 - 00078160 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFAPO64.dll 2013-08-27 02:22 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2013-08-27 02:22 - 2010-07-22 10:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2013-08-27 02:22 - 2010-05-06 11:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2013-08-27 02:22 - 2010-03-22 07:21 - 00247560 _____ C:\Windows\system32\Drivers\RTConvEQ.dat 2013-08-27 02:22 - 2010-03-22 07:21 - 00001448 _____ C:\Windows\system32\Drivers\RtHdatEx.dat 2013-08-27 02:22 - 2010-03-15 10:59 - 00000024 _____ C:\Windows\system32\Drivers\rtkhdaud.dat 2013-08-27 02:22 - 2010-02-11 09:45 - 00000176 _____ C:\Windows\system32\Drivers\RTHDAEQ1.dat 2013-08-27 02:22 - 2010-01-26 15:52 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX3.dat 2013-08-27 02:22 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2013-08-27 02:22 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2013-08-27 02:22 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2013-08-27 02:22 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2013-08-27 02:22 - 2009-11-18 12:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll 2013-08-27 02:22 - 2009-11-17 12:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2013-08-27 02:22 - 2008-08-21 07:43 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX2.dat 2013-08-27 02:22 - 2005-06-26 23:29 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX1.dat 2013-08-27 01:55 - 2013-08-27 01:55 - 00000000 ____D C:\Program Files (x86)\Renesas Electronics 2013-08-27 01:48 - 2013-08-27 01:48 - 00001049 _____ C:\Users\Public\Desktop\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk 2013-08-27 01:48 - 2013-08-27 01:48 - 00000000 ____D C:\Program Files\Intel 2013-08-27 01:42 - 2013-08-27 01:42 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-08-27 01:42 - 2013-08-27 01:42 - 00000184 _____ C:\Windows\LMv4.UNI 2013-08-27 01:42 - 2013-08-27 01:42 - 00000000 ____D C:\Program Files (x86)\Launch Manager 2013-08-27 01:41 - 2013-08-28 19:24 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-27 01:41 - 2013-08-28 18:46 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-27 01:41 - 2013-08-27 01:41 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-08-27 01:41 - 2013-08-27 01:41 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-08-27 01:41 - 2013-08-27 01:41 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-27 01:40 - 2013-08-27 01:42 - 00000000 ____D C:\Users\Yosip\AppData\Local\Google 2013-08-27 01:40 - 2013-08-27 01:40 - 00000000 ____D C:\Users\Yosip\AppData\Local\Deployment 2013-08-27 01:40 - 2013-08-27 01:40 - 00000000 ____D C:\Users\Yosip\AppData\Local\Apps\2.0 2013-08-27 01:02 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2013-08-27 00:56 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2013-08-27 00:56 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2013-08-27 00:56 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2013-08-27 00:56 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2013-08-27 00:56 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe 2013-08-27 00:40 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2013-08-27 00:40 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2013-08-27 00:40 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll 2013-08-27 00:40 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll 2013-08-27 00:35 - 2011-02-05 19:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2013-08-27 00:35 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2013-08-27 00:35 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2013-08-27 00:35 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2013-08-27 00:35 - 2011-02-05 19:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2013-08-27 00:35 - 2011-02-05 19:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2013-08-27 00:35 - 2011-02-05 19:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2013-08-27 00:25 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2013-08-26 22:49 - 2013-08-26 22:49 - 00000000 ____D C:\book 2013-08-26 22:37 - 2013-08-28 17:54 - 00643866 _____ C:\Windows\system32\perfh007.dat 2013-08-26 22:37 - 2013-08-28 17:54 - 00126394 _____ C:\Windows\system32\perfc007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00295922 _____ C:\Windows\system32\perfi007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00038104 _____ C:\Windows\system32\perfd007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\0407 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\0407 2013-08-26 22:34 - 2013-08-26 22:34 - 00000000 ____D C:\Windows\NAPP_Dism_Log 2013-08-26 22:27 - 2013-08-26 22:27 - 00000000 ____D C:\Users\Yosip\AppData\Local\EgisTec IPS 2013-08-26 22:27 - 2013-08-26 22:27 - 00000000 ____D C:\ProgramData\EgisTec 2013-08-26 22:22 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2013-08-26 22:22 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2013-08-26 22:22 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2013-08-26 22:19 - 2013-08-26 22:20 - 00030364 _____ C:\Users\Yosip\Desktop\FRST.txt 2013-08-26 22:18 - 2013-08-28 12:15 - 00000000 ____D C:\Program Files (x86)\JDownloader 2013-08-26 22:18 - 2013-08-26 22:18 - 00002041 _____ C:\Users\Yosip\Desktop\JDownloader.lnk 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-26 22:14 - 2013-08-26 22:14 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Yosip\Desktop\jDownloaderWebInstaller09581.exe 2013-08-26 22:13 - 2013-08-26 22:20 - 00017865 _____ C:\Users\Yosip\Desktop\Addition.txt 2013-08-26 22:12 - 2013-08-26 22:12 - 00000000 ____D C:\FRST 2013-08-26 17:09 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2013-08-26 17:09 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2013-08-26 17:09 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2013-08-26 17:09 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2013-08-26 17:09 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2013-08-26 17:09 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2013-08-26 17:09 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2013-08-26 17:09 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2013-08-26 17:09 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2013-08-26 17:05 - 2013-08-28 15:19 - 00000000 ____D C:\Users\Yosip\AppData\Local\Windows Live 2013-08-26 17:05 - 2013-08-28 04:41 - 00060424 _____ C:\Users\Yosip\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-26 17:05 - 2013-08-28 04:41 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-08-26 17:05 - 2013-08-28 04:41 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-08-26 17:05 - 2013-08-28 04:40 - 00001413 _____ C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Vorlagen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Startmenü 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Netzwerkumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Lokale Einstellungen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Eigene Dateien 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Druckumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Musik 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Bilder 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Verlauf 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip\AppData\Local\VirtualStore 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Recovery 2013-08-26 17:05 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Macromedia 2013-08-26 17:05 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Adobe 2013-08-26 17:05 - 2011-04-20 10:33 - 00000000 ____D C:\Users\Yosip\AppData\Local\Adobe 2013-08-26 17:05 - 2011-04-20 10:31 - 00000000 ____D C:\Users\Yosip\AppData\Local\Downloaded Installations 2013-08-26 17:05 - 2011-04-20 10:03 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Intel Corporation 2013-08-26 17:05 - 2011-04-20 09:47 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\InstallShield 2013-08-26 17:05 - 2010-11-21 04:50 - 00000020 ___SH C:\Users\Yosip\ntuser.ini 2013-08-26 17:05 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-08-26 17:05 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Programme 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Favoriten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-08-26 16:01 - 2013-08-26 16:01 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-08-26 13:32 - 2011-01-27 13:34 - 00003126 _____ C:\Windows\SysWOW64\atipblup.dat 2013-08-26 13:32 - 2011-01-27 13:34 - 00003126 _____ C:\Windows\system32\atipblup.dat 2013-08-26 13:25 - 2013-08-26 13:25 - 00000000 ____D C:\Program Files\ATI 2013-08-26 13:19 - 2013-08-26 15:46 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-08-26 12:58 - 2013-08-27 03:00 - 00000680 _____ C:\Windows\Driver_install.log 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Adobe 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Adobe 2013-08-26 12:53 - 2011-04-20 10:33 - 00000000 ____D C:\Users\Default\AppData\Local\Adobe 2013-08-26 12:53 - 2011-04-20 10:33 - 00000000 ____D C:\Users\Default User\AppData\Local\Adobe 2013-08-26 12:53 - 2011-04-20 10:31 - 00000000 ____D C:\Users\Default\AppData\Local\Downloaded Installations 2013-08-26 12:53 - 2011-04-20 10:31 - 00000000 ____D C:\Users\Default User\AppData\Local\Downloaded Installations 2013-08-26 12:53 - 2011-04-20 10:20 - 00000000 ____D C:\Users\Default\AppData\Local\Windows Live 2013-08-26 12:53 - 2011-04-20 10:20 - 00000000 ____D C:\Users\Default User\AppData\Local\Windows Live 2013-08-26 12:53 - 2011-04-20 10:03 - 00057560 _____ C:\Users\Default\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-26 12:53 - 2011-04-20 10:03 - 00057560 _____ C:\Users\Default User\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-26 12:53 - 2011-04-20 10:03 - 00000000 ____D C:\Users\Default\AppData\Roaming\Intel Corporation 2013-08-26 12:53 - 2011-04-20 10:03 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Intel Corporation 2013-08-26 12:53 - 2011-04-20 09:47 - 00000000 ____D C:\Users\Default\AppData\Roaming\InstallShield 2013-08-26 12:53 - 2011-04-20 09:47 - 00000000 ____D C:\Users\Default User\AppData\Roaming\InstallShield 2013-08-26 12:53 - 2010-11-21 04:50 - 00000020 ___SH C:\Users\Default\ntuser.ini 2013-08-26 12:49 - 2013-08-28 18:03 - 01889103 _____ C:\Windows\WindowsUpdate.log ==================== One Month Modified Files and Folders ======= 2013-08-28 19:27 - 2013-08-28 19:27 - 01579080 _____ (Farbar) C:\Users\Yosip\Downloads\FRST64.exe 2013-08-28 19:24 - 2013-08-27 01:41 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-28 19:22 - 2011-04-20 09:42 - 00011967 _____ C:\Windows\patch.log 2013-08-28 19:16 - 2013-08-28 19:16 - 00000000 ____D C:\Users\Yosip\AppData\Local\CrashDumps 2013-08-28 19:13 - 2013-08-28 17:40 - 00000000 ____D C:\AdwCleaner 2013-08-28 19:13 - 2013-08-26 12:49 - 01889103 _____ C:\Windows\WindowsUpdate.log 2013-08-28 18:46 - 2013-08-27 01:41 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-28 18:28 - 2013-08-28 18:28 - 00000998 _____ C:\Users\Yosip\Desktop\JRT.txt 2013-08-28 17:57 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-28 17:57 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-28 17:54 - 2013-08-26 22:37 - 00643866 _____ C:\Windows\system32\perfh007.dat 2013-08-28 17:54 - 2013-08-26 22:37 - 00126394 _____ C:\Windows\system32\perfc007.dat 2013-08-28 17:54 - 2009-07-14 07:13 - 01472002 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-28 17:52 - 2013-08-28 17:52 - 01021434 _____ (Thisisu) C:\Users\Yosip\Desktop\JRT.exe 2013-08-28 17:48 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-28 17:48 - 2009-07-14 06:51 - 00038140 _____ C:\Windows\setupact.log 2013-08-28 17:42 - 2013-08-28 17:42 - 00001780 _____ C:\Users\Yosip\Desktop\AdwCleaner[S0].txt 2013-08-28 17:40 - 2013-08-28 17:40 - 00994642 _____ C:\Users\Yosip\Downloads\adwcleaner.exe 2013-08-28 15:53 - 2010-11-21 05:47 - 00013614 _____ C:\Windows\PFRO.log 2013-08-28 15:19 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip\AppData\Local\Windows Live 2013-08-28 14:46 - 2013-08-28 14:45 - 00000000 ____D C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.720p.HDTV.x264-KYR 2013-08-28 14:44 - 2013-08-28 14:38 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part01.rar 2013-08-28 14:36 - 2013-08-28 14:36 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Malwarebytes 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-28 14:35 - 2013-08-28 14:35 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Yosip\Downloads\mbam-setup-1.75.0.1300.exe 2013-08-28 14:34 - 2013-08-28 14:25 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part21.rar 2013-08-28 14:31 - 2013-08-28 14:30 - 05999696 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part22.rar 2013-08-28 14:30 - 2013-08-28 14:21 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part20.rar 2013-08-28 14:25 - 2013-08-28 14:13 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part19.rar 2013-08-28 14:21 - 2013-08-28 14:12 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part18.rar 2013-08-28 14:13 - 2013-08-28 14:03 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part17.rar 2013-08-28 14:12 - 2013-08-28 14:02 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part16.rar 2013-08-28 14:03 - 2013-08-28 13:54 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part15.rar 2013-08-28 14:02 - 2013-08-28 13:52 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part14.rar 2013-08-28 13:54 - 2013-08-28 13:45 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part13.rar 2013-08-28 13:52 - 2013-08-28 13:42 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part12.rar 2013-08-28 13:45 - 2013-08-28 13:35 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part11.rar 2013-08-28 13:42 - 2013-08-28 13:33 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part10.rar 2013-08-28 13:35 - 2013-08-28 13:25 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part09.rar 2013-08-28 13:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-28 13:33 - 2013-08-28 13:24 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part08.rar 2013-08-28 13:25 - 2013-08-28 13:14 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part06.rar 2013-08-28 13:24 - 2013-08-28 13:15 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part07.rar 2013-08-28 13:15 - 2013-08-28 13:08 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part05.rar 2013-08-28 13:14 - 2013-08-28 13:02 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part04.rar 2013-08-28 13:08 - 2013-08-28 13:00 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part03.rar 2013-08-28 13:02 - 2013-08-28 12:51 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part02.rar 2013-08-28 12:51 - 2013-08-28 12:51 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\WinRAR 2013-08-28 12:51 - 2013-08-28 12:47 - 96953516 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part11.rar 2013-08-28 12:50 - 2013-08-28 12:45 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part10.rar 2013-08-28 12:47 - 2013-08-28 12:42 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part09.rar 2013-08-28 12:45 - 2013-08-28 12:39 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part08.rar 2013-08-28 12:42 - 2013-08-28 12:39 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part07.rar 2013-08-28 12:39 - 2013-08-28 12:34 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part06.rar 2013-08-28 12:39 - 2013-08-28 12:33 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part05.rar 2013-08-28 12:34 - 2013-08-28 12:28 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part04.rar 2013-08-28 12:33 - 2013-08-28 12:28 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part03.rar 2013-08-28 12:28 - 2013-08-28 12:23 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part02.rar 2013-08-28 12:28 - 2013-08-28 12:23 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part01.rar 2013-08-28 12:19 - 2013-08-28 12:18 - 00000000 ____D C:\Users\Yosip\AppData\Local\Windows Live Writer 2013-08-28 12:18 - 2013-08-28 12:18 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Windows Live Writer 2013-08-28 12:16 - 2013-08-28 12:16 - 00000000 ____D C:\Windows\System32\Tasks\Games 2013-08-28 12:15 - 2013-08-26 22:18 - 00000000 ____D C:\Program Files (x86)\JDownloader 2013-08-28 09:46 - 2013-08-28 08:58 - 00000000 ____D C:\Qoobox 2013-08-28 09:46 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-08-28 09:45 - 2013-08-28 09:45 - 00000000 ____D C:\Windows\erdnt 2013-08-28 09:44 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-08-28 05:00 - 2013-08-28 05:00 - 05841248 _____ (Acer Incorporated) C:\Users\Yosip\Downloads\Updaterhotfix.exe 2013-08-28 04:44 - 2013-08-28 04:43 - 14620768 _____ (Acer Incorporated) C:\Users\Yosip\Downloads\Updaterpackage.exe 2013-08-28 04:41 - 2013-08-26 17:05 - 00060424 _____ C:\Users\Yosip\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-28 04:41 - 2013-08-26 17:05 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-08-28 04:41 - 2013-08-26 17:05 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-08-28 04:40 - 2013-08-26 17:05 - 00001413 _____ C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-28 04:27 - 2009-07-14 06:45 - 00283104 _____ C:\Windows\system32\FNTCACHE.DAT 2013-08-28 04:14 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-08-28 04:14 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System |
28.08.2013, 22:28 | #8 |
| Auf zweite Festplatte kann nicht mehr zugegriffen werden Teil 2 und Addition Code:
ATTFilter 2013-08-28 04:13 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal 2013-08-28 03:42 - 2013-08-28 03:34 - 00014015 _____ C:\Windows\IE10_main.log 2013-08-28 03:38 - 2013-08-28 03:38 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-28 03:38 - 2013-08-28 03:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-28 03:38 - 2013-08-28 03:38 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-08-28 03:38 - 2013-08-28 03:38 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-08-28 03:38 - 2013-08-28 03:38 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-08-28 03:38 - 2013-08-28 03:38 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-08-28 03:38 - 2013-08-28 03:38 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-08-28 03:38 - 2013-08-28 03:38 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-08-28 03:38 - 2013-08-28 03:38 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-08-28 03:38 - 2013-08-28 03:38 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-08-28 03:38 - 2013-08-28 03:38 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-08-28 03:35 - 2013-08-28 03:35 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-08-28 03:23 - 2013-08-28 03:23 - 05114158 ____R (Swearware) C:\Users\Yosip\Desktop\ComboFix.exe 2013-08-28 03:17 - 2011-04-20 10:17 - 00000000 ____D C:\ProgramData\McAfee 2013-08-28 03:17 - 2011-04-20 10:17 - 00000000 ____D C:\Program Files\mcafee 2013-08-28 03:17 - 2011-04-20 10:17 - 00000000 ____D C:\Program Files (x86)\McAfee 2013-08-28 01:40 - 2013-08-28 01:40 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00189936 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-08-28 01:40 - 2013-08-28 01:40 - 00001926 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-08-28 01:37 - 2013-08-28 01:37 - 00000000 ____D C:\ProgramData\AVAST Software 2013-08-28 01:37 - 2013-08-28 01:37 - 00000000 ____D C:\Program Files\AVAST Software 2013-08-28 01:30 - 2013-08-28 01:26 - 117478104 _____ C:\Users\Yosip\Downloads\avast_free_antivirus_setup.exe 2013-08-28 01:30 - 2011-04-20 10:33 - 00000000 ____D C:\ProgramData\Symantec 2013-08-27 22:06 - 2013-08-27 22:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Yosip\Downloads\revosetup95.exe 2013-08-27 22:06 - 2013-08-27 22:06 - 00001268 _____ C:\Users\Yosip\Desktop\Revo Uninstaller.lnk 2013-08-27 22:06 - 2013-08-27 22:06 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2013-08-27 18:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2013-08-27 18:24 - 2011-04-20 10:20 - 00000579 _____ C:\Windows\DirectX.log 2013-08-27 18:23 - 2013-08-27 18:21 - 00003899 _____ C:\Windows\IE9_main.log 2013-08-27 18:23 - 2011-04-20 10:25 - 00000000 ____D C:\OEM 2013-08-27 18:20 - 2011-04-20 10:33 - 00000000 ____D C:\ProgramData\oem 2013-08-27 18:20 - 2011-04-20 10:19 - 00000000 ____D C:\Program Files\Acer 2013-08-27 18:20 - 2011-04-20 09:47 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-08-27 18:17 - 2013-08-27 18:16 - 00001527 _____ C:\ProgramData\ArcadeDeluxe5.log 2013-08-27 18:16 - 2013-08-27 18:16 - 00000000 ____D C:\ProgramData\CyberLink 2013-08-27 18:12 - 2013-08-27 18:12 - 00000000 ____D C:\Users\Yosip\AppData\Local\Acer 2013-08-27 18:12 - 2011-04-20 10:18 - 00000000 ____D C:\Program Files (x86)\Acer 2013-08-27 17:56 - 2011-04-20 10:03 - 00000000 ____D C:\Program Files (x86)\Acer GameZone 2013-08-27 03:58 - 2013-08-27 03:58 - 00000000 ____D C:\ProgramData\FLEXnet 2013-08-27 03:34 - 2013-08-27 03:34 - 00000000 ____D C:\ProgramData\InstallShield 2013-08-27 03:34 - 2013-08-27 03:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2013-08-27 03:11 - 2013-08-27 03:11 - 00000000 ____D C:\ProgramData\Atheros 2013-08-27 03:00 - 2013-08-26 12:58 - 00000680 _____ C:\Windows\Driver_install.log 2013-08-27 02:57 - 2013-08-27 02:57 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf 2013-08-27 02:56 - 2013-08-27 02:56 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2013-08-27 02:56 - 2013-08-27 02:56 - 00000000 ____D C:\Users\Yosip\Documents\Bluetooth Folder 2013-08-27 02:56 - 2013-08-27 02:55 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite 2013-08-27 02:56 - 2011-03-13 10:53 - 00246804 _____ C:\Windows\system32\Drivers\AtherosBt.bin 2013-08-27 02:37 - 2011-04-20 10:25 - 00000000 ____D C:\DOLBY PCEE4 2013-08-27 02:23 - 2013-08-27 02:23 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-08-27 02:22 - 2013-08-27 02:22 - 00004844 _____ C:\Windows\DPINST.LOG 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____D C:\Program Files\Synaptics 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____D C:\Program Files\Realtek 2013-08-27 02:22 - 2011-04-20 09:56 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-08-27 01:55 - 2013-08-27 01:55 - 00000000 ____D C:\Program Files (x86)\Renesas Electronics 2013-08-27 01:48 - 2013-08-27 01:48 - 00001049 _____ C:\Users\Public\Desktop\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk 2013-08-27 01:48 - 2013-08-27 01:48 - 00000000 ____D C:\Program Files\Intel 2013-08-27 01:42 - 2013-08-27 01:42 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-08-27 01:42 - 2013-08-27 01:42 - 00000184 _____ C:\Windows\LMv4.UNI 2013-08-27 01:42 - 2013-08-27 01:42 - 00000000 ____D C:\Program Files (x86)\Launch Manager 2013-08-27 01:42 - 2013-08-27 01:40 - 00000000 ____D C:\Users\Yosip\AppData\Local\Google 2013-08-27 01:41 - 2013-08-27 01:41 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-08-27 01:41 - 2013-08-27 01:41 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-08-27 01:41 - 2013-08-27 01:41 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-27 01:40 - 2013-08-27 01:40 - 00000000 ____D C:\Users\Yosip\AppData\Local\Deployment 2013-08-27 01:40 - 2013-08-27 01:40 - 00000000 ____D C:\Users\Yosip\AppData\Local\Apps\2.0 2013-08-26 22:49 - 2013-08-26 22:49 - 00000000 ____D C:\book 2013-08-26 22:49 - 2011-02-12 05:43 - 00000000 ____D C:\Windows\DeployWinRE2 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\winrm 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\WCN 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\sysprep 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\slmgr 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\winrm 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\WCN 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\slmgr 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\MUI 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\MUI 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing 2013-08-26 22:38 - 2009-03-12 11:30 - 00000000 ____D C:\Windows\LP 2013-08-26 22:37 - 2013-08-26 22:37 - 00295922 _____ C:\Windows\system32\perfi007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00038104 _____ C:\Windows\system32\perfd007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\0407 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\0407 2013-08-26 22:37 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts 2013-08-26 22:37 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts 2013-08-26 22:37 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\DigitalLocker 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Setup 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\com 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Setup 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\com 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\IME 2013-08-26 22:34 - 2013-08-26 22:34 - 00000000 ____D C:\Windows\NAPP_Dism_Log 2013-08-26 22:31 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG 2013-08-26 22:31 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2013-08-26 22:27 - 2013-08-26 22:27 - 00000000 ____D C:\Users\Yosip\AppData\Local\EgisTec IPS 2013-08-26 22:27 - 2013-08-26 22:27 - 00000000 ____D C:\ProgramData\EgisTec 2013-08-26 22:27 - 2011-04-20 10:31 - 00000000 ____D C:\ProgramData\EgisTec IPS 2013-08-26 22:20 - 2013-08-26 22:19 - 00030364 _____ C:\Users\Yosip\Desktop\FRST.txt 2013-08-26 22:20 - 2013-08-26 22:13 - 00017865 _____ C:\Users\Yosip\Desktop\Addition.txt 2013-08-26 22:18 - 2013-08-26 22:18 - 00002041 _____ C:\Users\Yosip\Desktop\JDownloader.lnk 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-26 22:14 - 2013-08-26 22:14 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Yosip\Desktop\jDownloaderWebInstaller09581.exe 2013-08-26 22:12 - 2013-08-26 22:12 - 00000000 ____D C:\FRST 2013-08-26 18:31 - 2013-08-28 12:51 - 00000000 ____D C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.HDTV.x264-IMMERSE 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Vorlagen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Startmenü 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Netzwerkumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Lokale Einstellungen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Eigene Dateien 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Druckumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Musik 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Bilder 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Verlauf 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip\AppData\Local\VirtualStore 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Recovery 2013-08-26 17:05 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore 2013-08-26 17:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Programme 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Favoriten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-08-26 17:04 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries 2013-08-26 17:04 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT 2013-08-26 16:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep 2013-08-26 16:35 - 2007-07-12 03:49 - 00000000 ____D C:\Windows\Panther 2013-08-26 16:09 - 2009-07-14 06:46 - 00004059 _____ C:\Windows\DtcInstall.log 2013-08-26 16:01 - 2013-08-26 16:01 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-08-26 15:46 - 2013-08-26 13:19 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-08-26 13:25 - 2013-08-26 13:25 - 00000000 ____D C:\Program Files\ATI 2013-08-26 13:10 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-08-26 12:55 - 2009-07-14 06:51 - 00000269 _____ C:\Windows\setuperr.log 2013-08-26 12:52 - 2011-04-20 09:37 - 00003652 _____ C:\Windows\TSSysprep.log 2013-08-07 04:22 - 2010-11-21 05:27 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe Files to move or delete: ==================== C:\Users\Yosip\AppData\Local\Temp\Quarantine.exe C:\Users\Yosip\AppData\Local\Temp\jrt\erunt\ERUNT.EXE ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-28 10:05 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-08-2013 Ran by Yosip at 2013-08-26 22:13:41 Running from C:\Users\Yosip\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 1912 Titanic Mystery (x32) Acer Backup Manager (x32 Version: 3.0.0.90) Acer eRecovery Management (x32 Version: 5.00.3004) Acer GameZone Console (x32 Version: 6.1.0.40497) Acer Registration (x32 Version: 1.03.3004) Acer ScreenSaver (x32 Version: 1.1.1206.2010) Acer Updater (x32 Version: 1.02.3005) Acrobat.com (x32 Version: 1.6.65) Adobe AIR (x32 Version: 1.5.0.7220) Adobe Flash Player 10 ActiveX (x32 Version: 10.2.153.1) Adobe Reader 9.1 MUI (x32 Version: 9.1.0) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.36) ATI Catalyst Install Manager (Version: 3.0.812.0) Backup Manager V3 (x32 Version: 3.0.0.90) Bejeweled 2 Deluxe (x32) Belles Beauty Boutique (x32) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center InstallProxy (x32 Version: 2011.0208.2202.39516) Catalyst Control Center Localization All (x32 Version: 2011.0208.2202.39516) CCC Help Chinese Standard (x32 Version: 2011.0208.2201.39516) CCC Help Chinese Traditional (x32 Version: 2011.0208.2201.39516) CCC Help Czech (x32 Version: 2011.0208.2201.39516) CCC Help Danish (x32 Version: 2011.0208.2201.39516) CCC Help Dutch (x32 Version: 2011.0208.2201.39516) CCC Help English (x32 Version: 2011.0208.2201.39516) CCC Help Finnish (x32 Version: 2011.0208.2201.39516) CCC Help French (x32 Version: 2011.0208.2201.39516) CCC Help German (x32 Version: 2011.0208.2201.39516) CCC Help Greek (x32 Version: 2011.0208.2201.39516) CCC Help Hungarian (x32 Version: 2011.0208.2201.39516) CCC Help Italian (x32 Version: 2011.0208.2201.39516) CCC Help Japanese (x32 Version: 2011.0208.2201.39516) CCC Help Korean (x32 Version: 2011.0208.2201.39516) CCC Help Norwegian (x32 Version: 2011.0208.2201.39516) CCC Help Polish (x32 Version: 2011.0208.2201.39516) CCC Help Portuguese (x32 Version: 2011.0208.2201.39516) CCC Help Russian (x32 Version: 2011.0208.2201.39516) CCC Help Spanish (x32 Version: 2011.0208.2201.39516) CCC Help Swedish (x32 Version: 2011.0208.2201.39516) CCC Help Thai (x32 Version: 2011.0208.2201.39516) CCC Help Turkish (x32 Version: 2011.0208.2201.39516) ccc-core-static (x32 Version: 2011.0208.2202.39516) ccc-utility64 (Version: 2011.0208.2202.39516) Chicken Invaders 3 (x32) D3DX10 (x32 Version: 15.4.2368.0902) dows Live Remote Service Resources (Version: 15.4.5722.2) Dream Day First Home (x32) Farm Frenzy 3 Ice Age (x32) Flip Words (x32) Fotogalerija Windows Live (x32 Version: 15.4.3502.0922) Galapago (x32) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922) Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922) Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922) Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922) Galerie de photos Windows Live (x32 Version: 15.4.3502.0922) Galerie foto Windows Live (x32 Version: 15.4.3502.0922) Identity Card (x32 Version: 1.00.3006) Intel(R) Management Engine Components (x32 Version: 7.0.0.1144) Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004) Junk Mail filter update (x32 Version: 15.4.3502.0922) McAfee Internet Security Suite (x32 Version: 10.0.570) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Silverlight (x32 Version: 4.0.50401.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MyWinLocker (Version: 4.0.14.11) MyWinLocker 4 (x32 Version: 4.0.14.11) MyWinLocker Suite (x32 Version: 4.0.14.11) newsXpresso (x32 Version: 1.0.0.40) Norton Online Backup (x32 Version: 2.1.17869) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922) Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922) Pošta Windows Live (x32 Version: 15.4.3502.0922) PX Profile Update (x32 Version: 1.00.1.) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922) Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30123) Shredder (Version: 2.0.8.7) Shredder (x32 Version: 2.0.8.7) Sprill and Ritchie (x32) Welcome Center (x32 Version: 1.02.3102) Windows Live Argazki Galeria (x32 Version: 15.4.3502.0922) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3508.1109) Windows Live Fotogaléria (x32 Version: 15.4.3502.0922) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live Fotogalleri (x32 Version: 15.4.3502.0922) Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922) Windows Live Fotótár (x32 Version: 15.4.3502.0922) Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922) Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3508.1109) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Live 影像中心 (x32 Version: 15.4.3502.0922) Windows Live 程式集 (x32 Version: 15.4.3502.0922) Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922) Windows Liven sähköposti (x32 Version: 15.4.3502.0922) Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922) World of Goo (x32) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922) Основные компоненты Windows Live (x32 Version: 15.4.3502.0922) Почта Windows Live (x32 Version: 15.4.3502.0922) Фотоальбом Windows Live (x32 Version: 15.4.3502.0922) Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922) גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922) بريد Windows Live (x32 Version: 15.4.3502.0922) معرض صور Windows Live (x32 Version: 15.4.3502.0922) ==================== Restore Points ========================= 26-08-2013 15:05:25 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {14EC97FD-AC9E-4209-AA6B-ABEE112311F5} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {34C14439-8CAF-4F8D-8B19-5B78D6FDF4F1} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2011-04-08] (Acer) Task: {EB7F6DAE-6F91-4ED3-B26E-5ADE426815D6} - System32\Tasks\LyricXeeker Update => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe [2013-08-26] () Task: C:\Windows\Tasks\LyricXeeker Update.job => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe ==================== Faulty Device Manager Devices ============= Name: USB (Universal Serial Bus)-Controller Description: USB (Universal Serial Bus)-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (08/26/2013 06:24:54 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:43:42 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:30:43 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:12:19 PM) (Source: Application Hang) (User: ) Description: Programm taskmgr.exe, Version 6.1.7601.17514 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1218 Startzeit: 01cea26e41d560be Endzeit: 4352 Anwendungspfad: C:\Windows\system32\taskmgr.exe Berichts-ID: e088482d-0e61-11e3-ab4b-b870f49197a1 Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (08/26/2013 05:06:24 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error: (08/26/2013 05:05:46 PM) (Source: ESENT) (User: ) Description: WinMail (3096) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde. System errors: ============= Error: (08/26/2013 10:19:42 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:19:41 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:19:39 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:19:20 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:18:21 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:18:20 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:18:18 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:17:32 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:17:31 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (08/26/2013 10:17:29 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Microsoft Office Sessions: ========================= Error: (08/26/2013 06:24:54 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:43:42 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:30:43 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/26/2013 05:12:19 PM) (Source: Application Hang)(User: ) Description: taskmgr.exe6.1.7601.17514121801cea26e41d560be4352C:\Windows\system32\taskmgr.exee088482d-0e61-11e3-ab4b-b870f49197a1 Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (08/26/2013 05:06:39 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (08/26/2013 05:06:24 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. Error: (08/26/2013 05:05:46 PM) (Source: ESENT)(User: ) Description: WinMail3096WindowsMail0: |
29.08.2013, 08:14 | #9 |
/// the machine /// TB-Ausbilder | Auf zweite Festplatte kann nicht mehr zugegriffen werdenESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
30.08.2013, 01:34 | #10 |
| Auf zweite Festplatte kann nicht mehr zugegriffen werden Also ESET hat nichts gefunden. D reagiert immer noch nicht aber ich glaub das der Computer zumindest ein bisschen schneller wurde und sonst merk ich keinen Unterschied. Könnte es sein das sich die Festplatte irgendwie im inneren selber ausgesteckt hat und sie deshalb nicht mehr erreichbar ist? Code:
ATTFilter ESETSmartInstaller@High as downloader log: Can not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=48fffe891ab07d47ba3ce8f861955c3d # engine=14947 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-08-29 11:18:40 # local_time=2013-08-30 01:18:40 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=774 16777213 85 91 171484 154528192 0 0 # compatibility_mode=5893 16776573 100 94 95615 129448170 0 0 # scanned=161395 # found=0 # cleaned=0 # scan_time=6835 Code:
ATTFilter Results of screen317's Security Check version 0.99.72 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Flash Player 10 Flash Player out of Date! Adobe Reader 9 Adobe Reader out of Date! Google Chrome 29.0.1547.57 ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013 Ran by Yosip (administrator) on 30-08-2013 02:07:45 Running from C:\Users\Yosip\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (AMD) C:\Windows\system32\atieclxx.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Dolby Laboratories Inc.) C:\DOLBY PCEE4\pcee4.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (McAfee, Inc.) C:\PROGRA~1\McAfee\MSC\mcsvrcnt.exe (McAfee, Inc.) c:\PROGRA~1\mcafee.com\agent\mcagent.exe (McAfee, Inc.) C:\PROGRA~1\McAfee\MSM\McSmtFwk.exe (McAfee, Inc.) C:\PROGRA~1\COMMON~1\McAfee\MSC\McUICnt.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Trigger New Acer AlaunchX] - c:\OEM\Preload\Command\AlaunchX\AppInRun.exe [304672 2009-09-21] () HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] () HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-09] (Realtek Semiconductor) HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Communications) HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations) HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1796200 2011-02-22] (Acer Incorporated) HKLM\...\RunOnce: [New Acer AlaunchX] - c:\OEM\Preload\Command\AlaunchX\LaunchAlaunchX.exe [300064 2009-09-21] (Acer Inc.) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation) HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1486392 2011-09-23] (McAfee, Inc.) HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340336 2010-09-28] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-09-18] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-09-18] (Egis Technology Inc.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-03-09] (NTI Corporation) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-08] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [OOTag] - C:\Program Files (x86)\Acer\OOBEOffer\OOTag.exe [13856 2010-02-23] (Microsoft) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1081424 2011-03-14] (Dritek System Inc.) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation) HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Dolby PCEE4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software) HKU\Default\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} [x] HKU\Default User\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} [x] ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20130829233201.dll (McAfee, Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20130829233201.dll (McAfee, Inc.) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Chrome: ======= CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File CHR Extension: (Google Docs) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Chrome In-App Payments service) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0 CHR Extension: (Gmail) - C:\Users\Yosip\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software) S2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [355440 2010-03-10] (McAfee, Inc.) R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2010-03-10] (McAfee, Inc.) R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2010-03-10] (McAfee, Inc.) S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2010-03-10] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2010-03-10] (McAfee, Inc.) R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [200056 2011-04-14] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [245352 2011-04-14] (McAfee, Inc.) R2 mfevtp; C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe [149032 2011-04-14] (McAfee, Inc.) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2011-03-09] (NTI Corporation) ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-28] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-28] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-08-28] () S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [63056 2011-04-14] (McAfee, Inc.) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [121376 2011-04-14] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [190520 2011-04-14] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [441840 2011-04-14] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [530304 2011-04-14] (McAfee, Inc.) R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75160 2011-04-14] (McAfee, Inc.) S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [94992 2011-04-14] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [283744 2011-04-14] (McAfee, Inc.) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-30 01:39 - 2013-08-30 01:39 - 00891115 _____ C:\Users\Yosip\Desktop\SecurityCheck.exe 2013-08-29 23:24 - 2013-08-29 23:24 - 02347384 _____ (ESET) C:\Users\Yosip\Downloads\esetsmartinstaller_enu (1).exe 2013-08-29 22:44 - 2013-08-29 22:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2013-08-29 22:41 - 2013-08-30 01:12 - 00000143 _____ C:\Users\Yosip\Desktop\g.txt 2013-08-29 22:24 - 2013-08-29 22:24 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-08-29 22:24 - 2013-08-29 22:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-08-29 21:42 - 2013-08-29 21:43 - 02347384 _____ (ESET) C:\Users\Yosip\Downloads\esetsmartinstaller_enu.exe 2013-08-29 00:04 - 2013-08-29 00:04 - 00000000 ____D C:\1ab9fcee31bdf318133536 2013-08-28 22:50 - 2013-08-28 22:50 - 00113734 _____ C:\Users\Yosip\Downloads\aeNYVX5.htm 2013-08-28 19:29 - 2013-08-28 19:29 - 00141284 _____ C:\Users\Yosip\Desktop\FRST_28-08-2013_19-29-47.txt 2013-08-28 19:27 - 2013-08-28 19:27 - 01579080 _____ (Farbar) C:\Users\Yosip\Downloads\FRST64.exe 2013-08-28 19:16 - 2013-08-28 19:16 - 00000000 ____D C:\Users\Yosip\AppData\Local\CrashDumps 2013-08-28 18:28 - 2013-08-28 18:28 - 00000998 _____ C:\Users\Yosip\Desktop\JRT.txt 2013-08-28 17:52 - 2013-08-28 17:52 - 01021434 _____ (Thisisu) C:\Users\Yosip\Desktop\JRT.exe 2013-08-28 17:42 - 2013-08-28 17:42 - 00001780 _____ C:\Users\Yosip\Desktop\AdwCleaner[S0].txt 2013-08-28 17:40 - 2013-08-28 19:13 - 00000000 ____D C:\AdwCleaner 2013-08-28 17:40 - 2013-08-28 17:40 - 00994642 _____ C:\Users\Yosip\Downloads\adwcleaner.exe 2013-08-28 14:45 - 2013-08-28 14:46 - 00000000 ____D C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.720p.HDTV.x264-KYR 2013-08-28 14:45 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-08-28 14:45 - 2013-04-17 08:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-08-28 14:45 - 2012-07-06 22:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2013-08-28 14:45 - 2011-04-28 05:54 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS 2013-08-28 14:45 - 2011-03-25 05:29 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-08-28 14:45 - 2011-03-25 05:29 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-08-28 14:45 - 2011-03-25 05:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-08-28 14:45 - 2011-03-25 05:29 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-08-28 14:45 - 2011-03-25 05:29 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-08-28 14:45 - 2011-03-25 05:29 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-08-28 14:45 - 2011-03-25 05:28 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-08-28 14:45 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2013-08-28 14:45 - 2011-03-11 08:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2013-08-28 14:45 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2013-08-28 14:45 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2013-08-28 14:45 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2013-08-28 14:45 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2013-08-28 14:45 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2013-08-28 14:45 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2013-08-28 14:45 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2013-08-28 14:45 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe 2013-08-28 14:45 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2013-08-28 14:38 - 2013-08-28 14:44 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part01.rar 2013-08-28 14:36 - 2013-08-28 14:36 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Malwarebytes 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-28 14:36 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-08-28 14:35 - 2013-08-28 14:35 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Yosip\Downloads\mbam-setup-1.75.0.1300.exe 2013-08-28 14:30 - 2013-08-28 14:31 - 05999696 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part22.rar 2013-08-28 14:25 - 2013-08-28 14:34 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part21.rar 2013-08-28 14:21 - 2013-08-28 14:30 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part20.rar 2013-08-28 14:13 - 2013-08-28 14:25 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part19.rar 2013-08-28 14:12 - 2013-08-28 14:21 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part18.rar 2013-08-28 14:03 - 2013-08-28 14:13 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part17.rar 2013-08-28 14:02 - 2013-08-28 14:12 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part16.rar 2013-08-28 13:54 - 2013-08-28 14:03 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part15.rar 2013-08-28 13:52 - 2013-08-28 14:02 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part14.rar 2013-08-28 13:45 - 2013-08-28 13:54 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part13.rar 2013-08-28 13:42 - 2013-08-28 13:52 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part12.rar 2013-08-28 13:35 - 2013-08-28 13:45 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part11.rar 2013-08-28 13:33 - 2013-08-28 13:42 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part10.rar 2013-08-28 13:25 - 2013-08-28 13:35 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part09.rar 2013-08-28 13:24 - 2013-08-28 13:33 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part08.rar 2013-08-28 13:15 - 2013-08-28 13:24 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part07.rar 2013-08-28 13:14 - 2013-08-28 13:25 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part06.rar 2013-08-28 13:08 - 2013-08-28 13:15 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part05.rar 2013-08-28 13:02 - 2013-08-28 13:14 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part04.rar 2013-08-28 13:00 - 2013-08-28 13:08 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part03.rar 2013-08-28 12:51 - 2013-08-28 13:02 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part02.rar 2013-08-28 12:51 - 2013-08-28 12:51 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\WinRAR 2013-08-28 12:51 - 2013-08-26 18:31 - 00000000 ____D C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.HDTV.x264-IMMERSE 2013-08-28 12:47 - 2013-08-28 12:51 - 96953516 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part11.rar 2013-08-28 12:45 - 2013-08-28 12:50 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part10.rar 2013-08-28 12:42 - 2013-08-28 12:47 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part09.rar 2013-08-28 12:39 - 2013-08-28 12:45 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part08.rar 2013-08-28 12:39 - 2013-08-28 12:42 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part07.rar 2013-08-28 12:34 - 2013-08-28 12:39 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part06.rar 2013-08-28 12:33 - 2013-08-28 12:39 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part05.rar 2013-08-28 12:28 - 2013-08-28 12:34 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part04.rar 2013-08-28 12:28 - 2013-08-28 12:33 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part03.rar 2013-08-28 12:23 - 2013-08-28 12:28 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part02.rar 2013-08-28 12:23 - 2013-08-28 12:28 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part01.rar 2013-08-28 12:18 - 2013-08-28 12:19 - 00000000 ____D C:\Users\Yosip\AppData\Local\Windows Live Writer 2013-08-28 12:18 - 2013-08-28 12:18 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Windows Live Writer 2013-08-28 12:16 - 2013-08-28 12:16 - 00000000 ____D C:\Windows\System32\Tasks\Games 2013-08-28 09:45 - 2013-08-28 09:45 - 00000000 ____D C:\Windows\erdnt 2013-08-28 08:58 - 2013-08-28 09:46 - 00000000 ____D C:\Qoobox 2013-08-28 08:58 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-08-28 08:58 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-08-28 08:58 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-08-28 08:58 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-08-28 08:58 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-08-28 08:58 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-08-28 08:58 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-08-28 08:58 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-08-28 05:00 - 2013-08-28 05:00 - 05841248 _____ (Acer Incorporated) C:\Users\Yosip\Downloads\Updaterhotfix.exe 2013-08-28 04:43 - 2013-08-28 04:44 - 14620768 _____ (Acer Incorporated) C:\Users\Yosip\Downloads\Updaterpackage.exe 2013-08-28 04:38 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-08-28 04:38 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-08-28 03:45 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-08-28 03:45 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2013-08-28 03:45 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2013-08-28 03:45 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2013-08-28 03:38 - 2013-08-28 03:38 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-28 03:38 - 2013-08-28 03:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-28 03:38 - 2013-08-28 03:38 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-08-28 03:38 - 2013-08-28 03:38 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-08-28 03:38 - 2013-08-28 03:38 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-08-28 03:38 - 2013-08-28 03:38 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-08-28 03:38 - 2013-08-28 03:38 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-08-28 03:38 - 2013-08-28 03:38 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-08-28 03:38 - 2013-08-28 03:38 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-08-28 03:38 - 2013-08-28 03:38 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-08-28 03:38 - 2013-08-28 03:38 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-08-28 03:35 - 2013-08-28 03:35 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-08-28 03:34 - 2013-08-28 03:42 - 00014015 _____ C:\Windows\IE10_main.log 2013-08-28 03:33 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2013-08-28 03:31 - 2012-12-16 19:11 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-08-28 03:31 - 2012-12-16 16:45 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-08-28 03:31 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-08-28 03:31 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-08-28 03:30 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2013-08-28 03:30 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2013-08-28 03:30 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2013-08-28 03:30 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2013-08-28 03:30 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2013-08-28 03:30 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2013-08-28 03:30 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2013-08-28 03:30 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2013-08-28 03:29 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2013-08-28 03:29 - 2012-03-01 08:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-08-28 03:29 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2013-08-28 03:29 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-08-28 03:29 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2013-08-28 03:23 - 2013-08-28 03:23 - 05114158 ____R (Swearware) C:\Users\Yosip\Desktop\ComboFix.exe 2013-08-28 01:40 - 2013-08-28 01:40 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00189936 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-08-28 01:40 - 2013-08-28 01:40 - 00001926 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-08-28 01:40 - 2013-05-09 10:59 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-08-28 01:40 - 2013-05-09 10:59 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-08-28 01:40 - 2013-05-09 10:59 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-08-28 01:40 - 2013-05-09 10:59 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-08-28 01:40 - 2013-05-09 10:59 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-08-28 01:40 - 2013-05-09 10:58 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-08-28 01:37 - 2013-08-28 01:37 - 00000000 ____D C:\ProgramData\AVAST Software 2013-08-28 01:37 - 2013-08-28 01:37 - 00000000 ____D C:\Program Files\AVAST Software 2013-08-28 01:37 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-08-28 01:26 - 2013-08-28 01:30 - 117478104 _____ C:\Users\Yosip\Downloads\avast_free_antivirus_setup.exe 2013-08-27 22:06 - 2013-08-27 22:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Yosip\Downloads\revosetup95.exe 2013-08-27 22:06 - 2013-08-27 22:06 - 00001268 _____ C:\Users\Yosip\Desktop\Revo Uninstaller.lnk 2013-08-27 22:06 - 2013-08-27 22:06 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2013-08-27 18:21 - 2013-08-27 18:23 - 00003899 _____ C:\Windows\IE9_main.log 2013-08-27 18:16 - 2013-08-27 18:17 - 00001527 _____ C:\ProgramData\ArcadeDeluxe5.log 2013-08-27 18:16 - 2013-08-27 18:16 - 00000000 ____D C:\ProgramData\CyberLink 2013-08-27 18:12 - 2013-08-27 18:12 - 00000000 ____D C:\Users\Yosip\AppData\Local\Acer 2013-08-27 03:58 - 2013-08-27 03:58 - 00000000 ____D C:\ProgramData\FLEXnet 2013-08-27 03:45 - 2013-04-10 08:01 - 00983400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-08-27 03:45 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2013-08-27 03:45 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-08-27 03:45 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-08-27 03:45 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2013-08-27 03:45 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2013-08-27 03:45 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2013-08-27 03:45 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2013-08-27 03:45 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2013-08-27 03:45 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2013-08-27 03:45 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll 2013-08-27 03:45 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll 2013-08-27 03:45 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2013-08-27 03:45 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2013-08-27 03:45 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2013-08-27 03:45 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2013-08-27 03:45 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2013-08-27 03:45 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2013-08-27 03:45 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2013-08-27 03:45 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2013-08-27 03:45 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2013-08-27 03:45 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2013-08-27 03:45 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2013-08-27 03:45 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2013-08-27 03:45 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2013-08-27 03:45 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2013-08-27 03:44 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-27 03:44 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-27 03:44 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-27 03:44 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-27 03:44 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-27 03:44 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-27 03:44 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-27 03:44 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-27 03:44 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2013-08-27 03:44 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2013-08-27 03:44 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2013-08-27 03:44 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2013-08-27 03:44 - 2011-02-25 08:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2013-08-27 03:44 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2013-08-27 03:43 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2013-08-27 03:43 - 2013-02-27 07:52 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-08-27 03:43 - 2013-02-27 07:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2013-08-27 03:43 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-08-27 03:43 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2013-08-27 03:43 - 2013-02-27 06:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2013-08-27 03:43 - 2013-02-27 06:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2013-08-27 03:43 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-08-27 03:43 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2013-08-27 03:43 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2013-08-27 03:43 - 2011-07-09 04:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2013-08-27 03:43 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2013-08-27 03:43 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2013-08-27 03:43 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2013-08-27 03:43 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2013-08-27 03:43 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2013-08-27 03:43 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2013-08-27 03:43 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2013-08-27 03:43 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2013-08-27 03:43 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2013-08-27 03:43 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2013-08-27 03:43 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2013-08-27 03:43 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2013-08-27 03:43 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2013-08-27 03:43 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2013-08-27 03:43 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2013-08-27 03:43 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2013-08-27 03:43 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2013-08-27 03:43 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2013-08-27 03:43 - 2011-04-27 04:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2013-08-27 03:43 - 2011-04-27 04:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2013-08-27 03:42 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2013-08-27 03:42 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2013-08-27 03:42 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2013-08-27 03:42 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2013-08-27 03:42 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2013-08-27 03:42 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2013-08-27 03:42 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2013-08-27 03:41 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-27 03:41 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-27 03:41 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-27 03:41 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-27 03:41 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2013-08-27 03:41 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2013-08-27 03:40 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-27 03:40 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-27 03:40 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2013-08-27 03:40 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2013-08-27 03:40 - 2012-11-01 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2013-08-27 03:40 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2013-08-27 03:40 - 2012-11-01 06:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2013-08-27 03:40 - 2012-06-02 07:50 - 00458704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-08-27 03:40 - 2012-06-02 07:48 - 00151920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-08-27 03:40 - 2012-06-02 07:48 - 00095600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-08-27 03:40 - 2012-06-02 07:45 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-08-27 03:40 - 2012-06-02 06:40 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-08-27 03:40 - 2012-06-02 06:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-08-27 03:40 - 2012-06-02 06:34 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-08-27 03:40 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2013-08-27 03:40 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2013-08-27 03:40 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2013-08-27 03:40 - 2011-11-17 08:35 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-08-27 03:40 - 2011-11-17 08:35 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-08-27 03:40 - 2011-11-17 08:35 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-08-27 03:40 - 2011-11-17 08:35 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-08-27 03:40 - 2011-11-17 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-08-27 03:40 - 2010-06-26 05:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2013-08-27 03:40 - 2010-06-26 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2013-08-27 03:39 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-08-27 03:39 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-08-27 03:39 - 2013-01-04 07:46 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2013-08-27 03:39 - 2013-01-04 06:51 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-27 03:39 - 2013-01-04 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-27 03:39 - 2013-01-04 04:47 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-27 03:39 - 2013-01-04 04:47 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-27 03:39 - 2013-01-04 04:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-27 03:39 - 2012-11-22 07:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2013-08-27 03:39 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2013-08-27 03:39 - 2012-11-20 07:48 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-08-27 03:39 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-08-27 03:39 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2013-08-27 03:39 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2013-08-27 03:39 - 2012-10-03 19:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2013-08-27 03:39 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2013-08-27 03:39 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2013-08-27 03:39 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2013-08-27 03:39 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2013-08-27 03:39 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2013-08-27 03:39 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll 2013-08-27 03:39 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2013-08-27 03:39 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll 2013-08-27 03:39 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2013-08-27 03:39 - 2012-05-01 07:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2013-08-27 03:39 - 2012-01-13 09:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2013-08-27 03:39 - 2011-04-23 00:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2013-08-27 03:35 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2013-08-27 03:35 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2013-08-27 03:35 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2013-08-27 03:35 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2013-08-27 03:35 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2013-08-27 03:35 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2013-08-27 03:35 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2013-08-27 03:35 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2013-08-27 03:35 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2013-08-27 03:35 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2013-08-27 03:35 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2013-08-27 03:35 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2013-08-27 03:35 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2013-08-27 03:34 - 2013-08-27 03:34 - 00000000 ____D C:\ProgramData\InstallShield 2013-08-27 03:34 - 2013-08-27 03:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2013-08-27 03:33 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-27 03:33 - 2012-04-07 14:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2013-08-27 03:33 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2013-08-27 03:33 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2013-08-27 03:33 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2013-08-27 03:33 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2013-08-27 03:33 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2013-08-27 03:33 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2013-08-27 03:32 - 2011-12-28 05:59 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-08-27 03:31 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-08-27 03:31 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2013-08-27 03:31 - 2012-11-30 07:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2013-08-27 03:31 - 2012-11-30 07:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-27 03:31 - 2012-11-30 07:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2013-08-27 03:31 - 2012-11-30 07:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2013-08-27 03:31 - 2012-11-30 07:41 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2013-08-27 03:31 - 2012-11-30 07:41 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2013-08-27 03:31 - 2012-11-30 06:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 05:23 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2013-08-27 03:31 - 2012-11-30 04:38 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 04:38 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 04:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 04:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2013-08-27 03:31 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls 2013-08-27 03:31 - 2012-11-30 01:15 - 00420064 _____ C:\Windows\system32\locale.nls 2013-08-27 03:31 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2013-08-27 03:31 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2013-08-27 03:31 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2013-08-27 03:31 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2013-08-27 03:30 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-08-27 03:30 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-08-27 03:30 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2013-08-27 03:30 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-08-27 03:30 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2013-08-27 03:29 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-27 03:29 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2013-08-27 03:29 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2013-08-27 03:29 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-08-27 03:29 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2013-08-27 03:29 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2013-08-27 03:29 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2013-08-27 03:29 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2013-08-27 03:29 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2013-08-27 03:29 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2013-08-27 03:29 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2013-08-27 03:29 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2013-08-27 03:29 - 2012-05-05 10:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2013-08-27 03:29 - 2012-05-05 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2013-08-27 03:29 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2013-08-27 03:29 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2013-08-27 03:29 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2013-08-27 03:29 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2013-08-27 03:29 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2013-08-27 03:29 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2013-08-27 03:29 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2013-08-27 03:29 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2013-08-27 03:29 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2013-08-27 03:29 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2013-08-27 03:29 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2013-08-27 03:24 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2013-08-27 03:24 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2013-08-27 03:24 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2013-08-27 03:24 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2013-08-27 03:24 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2013-08-27 03:24 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2013-08-27 03:24 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2013-08-27 03:23 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-08-27 03:23 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-08-27 03:23 - 2013-03-19 08:04 - 05550424 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-27 03:23 - 2013-03-19 07:46 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2013-08-27 03:23 - 2013-03-19 07:04 - 03968856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-27 03:23 - 2013-03-19 07:04 - 03913560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-27 03:23 - 2013-03-19 06:47 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2013-08-27 03:23 - 2013-03-19 05:06 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2013-08-27 03:23 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2013-08-27 03:23 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll 2013-08-27 03:23 - 2012-02-11 08:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2013-08-27 03:23 - 2012-02-11 08:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe 2013-08-27 03:23 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2013-08-27 03:23 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2013-08-27 03:23 - 2011-11-17 08:41 - 01731920 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-27 03:23 - 2011-11-17 07:38 - 01292080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-27 03:11 - 2013-08-27 03:11 - 00000000 ____D C:\ProgramData\Atheros 2013-08-27 02:57 - 2013-08-27 02:57 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf 2013-08-27 02:56 - 2013-08-27 02:56 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2013-08-27 02:56 - 2013-08-27 02:56 - 00000000 ____D C:\Users\Yosip\Documents\Bluetooth Folder 2013-08-27 02:55 - 2013-08-27 02:56 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite 2013-08-27 02:23 - 2013-08-27 02:23 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-08-27 02:22 - 2013-08-27 02:22 - 00004844 _____ C:\Windows\DPINST.LOG 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____D C:\Program Files\Synaptics 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____D C:\Program Files\Realtek 2013-08-27 02:22 - 2011-03-18 10:19 - 00000176 _____ C:\Windows\system32\Drivers\RTHDAEQ0.dat 2013-08-27 02:22 - 2011-03-15 12:41 - 00084584 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll 2013-08-27 02:22 - 2011-03-15 12:30 - 02814952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2013-08-27 02:22 - 2011-03-15 09:32 - 00648808 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2013-08-27 02:22 - 2011-03-10 05:32 - 02931816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2013-08-27 02:22 - 2011-03-10 05:32 - 02369640 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2013-08-27 02:22 - 2011-03-09 11:10 - 00829440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2013-08-27 02:22 - 2011-03-07 07:25 - 03308376 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2013-08-27 02:22 - 2011-03-07 07:25 - 00426328 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2013-08-27 02:22 - 2011-03-07 07:25 - 00136024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2013-08-27 02:22 - 2011-03-07 07:25 - 00118104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2013-08-27 02:22 - 2011-03-07 07:25 - 00074072 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2013-08-27 02:22 - 2011-03-02 11:25 - 01242216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2013-08-27 02:22 - 2011-02-25 13:37 - 01284712 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2013-08-27 02:22 - 2011-02-22 09:52 - 02075712 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2013-08-27 02:22 - 2010-12-10 05:35 - 00003206 _____ C:\Windows\system32\Drivers\RtPCEE4.DAT 2013-08-27 02:22 - 2010-11-29 12:47 - 02578576 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll 2013-08-27 02:22 - 2010-11-29 12:47 - 01868944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll 2013-08-27 02:22 - 2010-11-29 02:17 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX0.dat 2013-08-27 02:22 - 2010-11-18 05:49 - 00121744 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2013-08-27 02:22 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2013-08-27 02:22 - 2010-11-03 12:31 - 01146984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2013-08-27 02:22 - 2010-11-03 12:31 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2013-08-27 02:22 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 01327208 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 01179752 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 01111656 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00504936 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00491112 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00475752 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00317032 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00269928 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00266856 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00126056 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00125544 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2013-08-27 02:22 - 2010-11-03 12:29 - 00125032 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2013-08-27 02:22 - 2010-10-03 07:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2013-08-27 02:22 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2013-08-27 02:22 - 2010-09-23 11:21 - 00039672 _____ C:\Windows\system32\Drivers\RtPCEE3.DAT 2013-08-27 02:22 - 2010-07-22 10:48 - 00220496 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFNHK64.dll 2013-08-27 02:22 - 2010-07-22 10:48 - 00081232 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFCOM64.dll 2013-08-27 02:22 - 2010-07-22 10:48 - 00078160 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFAPO64.dll 2013-08-27 02:22 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2013-08-27 02:22 - 2010-07-22 10:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2013-08-27 02:22 - 2010-05-06 11:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2013-08-27 02:22 - 2010-03-22 07:21 - 00247560 _____ C:\Windows\system32\Drivers\RTConvEQ.dat 2013-08-27 02:22 - 2010-03-22 07:21 - 00001448 _____ C:\Windows\system32\Drivers\RtHdatEx.dat 2013-08-27 02:22 - 2010-03-15 10:59 - 00000024 _____ C:\Windows\system32\Drivers\rtkhdaud.dat 2013-08-27 02:22 - 2010-02-11 09:45 - 00000176 _____ C:\Windows\system32\Drivers\RTHDAEQ1.dat 2013-08-27 02:22 - 2010-01-26 15:52 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX3.dat 2013-08-27 02:22 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2013-08-27 02:22 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2013-08-27 02:22 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2013-08-27 02:22 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2013-08-27 02:22 - 2009-11-18 12:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll 2013-08-27 02:22 - 2009-11-17 12:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2013-08-27 02:22 - 2008-08-21 07:43 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX2.dat 2013-08-27 02:22 - 2005-06-26 23:29 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX1.dat 2013-08-27 01:55 - 2013-08-27 01:55 - 00000000 ____D C:\Program Files (x86)\Renesas Electronics 2013-08-27 01:48 - 2013-08-27 01:48 - 00001049 _____ C:\Users\Public\Desktop\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk 2013-08-27 01:48 - 2013-08-27 01:48 - 00000000 ____D C:\Program Files\Intel 2013-08-27 01:42 - 2013-08-27 01:42 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-08-27 01:42 - 2013-08-27 01:42 - 00000184 _____ C:\Windows\LMv4.UNI 2013-08-27 01:42 - 2013-08-27 01:42 - 00000000 ____D C:\Program Files (x86)\Launch Manager 2013-08-27 01:41 - 2013-08-30 01:46 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-27 01:41 - 2013-08-30 01:46 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-27 01:41 - 2013-08-27 01:41 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-08-27 01:41 - 2013-08-27 01:41 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-08-27 01:41 - 2013-08-27 01:41 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-27 01:40 - 2013-08-27 01:42 - 00000000 ____D C:\Users\Yosip\AppData\Local\Google 2013-08-27 01:40 - 2013-08-27 01:40 - 00000000 ____D C:\Users\Yosip\AppData\Local\Deployment 2013-08-27 01:40 - 2013-08-27 01:40 - 00000000 ____D C:\Users\Yosip\AppData\Local\Apps\2.0 2013-08-27 01:02 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2013-08-27 00:56 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2013-08-27 00:56 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2013-08-27 00:56 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2013-08-27 00:56 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2013-08-27 00:56 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe 2013-08-27 00:40 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2013-08-27 00:40 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2013-08-27 00:40 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll 2013-08-27 00:40 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll 2013-08-27 00:35 - 2011-02-05 19:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2013-08-27 00:35 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2013-08-27 00:35 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2013-08-27 00:35 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2013-08-27 00:35 - 2011-02-05 19:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2013-08-27 00:35 - 2011-02-05 19:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2013-08-27 00:35 - 2011-02-05 19:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2013-08-27 00:25 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2013-08-26 22:49 - 2013-08-26 22:49 - 00000000 ____D C:\book 2013-08-26 22:37 - 2013-08-29 23:06 - 00643866 _____ C:\Windows\system32\perfh007.dat 2013-08-26 22:37 - 2013-08-29 23:06 - 00126394 _____ C:\Windows\system32\perfc007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00295922 _____ C:\Windows\system32\perfi007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00038104 _____ C:\Windows\system32\perfd007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\0407 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\0407 2013-08-26 22:34 - 2013-08-26 22:34 - 00000000 ____D C:\Windows\NAPP_Dism_Log 2013-08-26 22:27 - 2013-08-26 22:27 - 00000000 ____D C:\Users\Yosip\AppData\Local\EgisTec IPS 2013-08-26 22:27 - 2013-08-26 22:27 - 00000000 ____D C:\ProgramData\EgisTec 2013-08-26 22:22 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2013-08-26 22:22 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2013-08-26 22:22 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2013-08-26 22:19 - 2013-08-26 22:20 - 00030364 _____ C:\Users\Yosip\Desktop\FRST.txt 2013-08-26 22:19 - 2013-08-26 22:19 - 00016834 _____ C:\Users\Yosip\Desktop\Addition (2).txt 2013-08-26 22:18 - 2013-08-28 12:15 - 00000000 ____D C:\Program Files (x86)\JDownloader 2013-08-26 22:18 - 2013-08-26 22:18 - 00002041 _____ C:\Users\Yosip\Desktop\JDownloader.lnk 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-26 22:14 - 2013-08-26 22:14 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Yosip\Desktop\jDownloaderWebInstaller09581.exe 2013-08-26 22:13 - 2013-08-26 22:20 - 00017865 _____ C:\Users\Yosip\Desktop\Addition.txt 2013-08-26 22:12 - 2013-08-26 22:12 - 00000000 ____D C:\FRST 2013-08-26 17:09 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2013-08-26 17:09 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2013-08-26 17:09 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2013-08-26 17:09 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2013-08-26 17:09 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2013-08-26 17:09 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2013-08-26 17:09 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2013-08-26 17:09 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2013-08-26 17:09 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2013-08-26 17:05 - 2013-08-28 15:19 - 00000000 ____D C:\Users\Yosip\AppData\Local\Windows Live 2013-08-26 17:05 - 2013-08-28 04:41 - 00060424 _____ C:\Users\Yosip\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-26 17:05 - 2013-08-28 04:41 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-08-26 17:05 - 2013-08-28 04:41 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-08-26 17:05 - 2013-08-28 04:40 - 00001413 _____ C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Vorlagen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Startmenü 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Netzwerkumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Lokale Einstellungen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Eigene Dateien 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Druckumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Musik 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Bilder 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Verlauf 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip\AppData\Local\VirtualStore 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Recovery 2013-08-26 17:05 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Macromedia 2013-08-26 17:05 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Adobe 2013-08-26 17:05 - 2011-04-20 10:33 - 00000000 ____D C:\Users\Yosip\AppData\Local\Adobe 2013-08-26 17:05 - 2011-04-20 10:31 - 00000000 ____D C:\Users\Yosip\AppData\Local\Downloaded Installations 2013-08-26 17:05 - 2011-04-20 10:03 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Intel Corporation 2013-08-26 17:05 - 2011-04-20 09:47 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\InstallShield 2013-08-26 17:05 - 2010-11-21 04:50 - 00000020 ___SH C:\Users\Yosip\ntuser.ini 2013-08-26 17:05 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-08-26 17:05 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Programme 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Favoriten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-08-26 16:01 - 2013-08-26 16:01 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-08-26 13:32 - 2011-01-27 13:34 - 00003126 _____ C:\Windows\SysWOW64\atipblup.dat 2013-08-26 13:32 - 2011-01-27 13:34 - 00003126 _____ C:\Windows\system32\atipblup.dat 2013-08-26 13:25 - 2013-08-26 13:25 - 00000000 ____D C:\Program Files\ATI 2013-08-26 13:19 - 2013-08-26 15:46 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-08-26 12:58 - 2013-08-27 03:00 - 00000680 _____ C:\Windows\Driver_install.log 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Adobe 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2013-08-26 12:53 - 2011-04-20 10:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Adobe 2013-08-26 12:53 - 2011-04-20 10:33 - 00000000 ____D C:\Users\Default\AppData\Local\Adobe 2013-08-26 12:53 - 2011-04-20 10:33 - 00000000 ____D C:\Users\Default User\AppData\Local\Adobe 2013-08-26 12:53 - 2011-04-20 10:31 - 00000000 ____D C:\Users\Default\AppData\Local\Downloaded Installations 2013-08-26 12:53 - 2011-04-20 10:31 - 00000000 ____D C:\Users\Default User\AppData\Local\Downloaded Installations 2013-08-26 12:53 - 2011-04-20 10:20 - 00000000 ____D C:\Users\Default\AppData\Local\Windows Live 2013-08-26 12:53 - 2011-04-20 10:20 - 00000000 ____D C:\Users\Default User\AppData\Local\Windows Live 2013-08-26 12:53 - 2011-04-20 10:03 - 00057560 _____ C:\Users\Default\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-26 12:53 - 2011-04-20 10:03 - 00057560 _____ C:\Users\Default User\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-26 12:53 - 2011-04-20 10:03 - 00000000 ____D C:\Users\Default\AppData\Roaming\Intel Corporation 2013-08-26 12:53 - 2011-04-20 10:03 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Intel Corporation 2013-08-26 12:53 - 2011-04-20 09:47 - 00000000 ____D C:\Users\Default\AppData\Roaming\InstallShield 2013-08-26 12:53 - 2011-04-20 09:47 - 00000000 ____D C:\Users\Default User\AppData\Roaming\InstallShield 2013-08-26 12:53 - 2010-11-21 04:50 - 00000020 ___SH C:\Users\Default\ntuser.ini 2013-08-26 12:49 - 2013-08-29 22:53 - 02024630 _____ C:\Windows\WindowsUpdate.log |
30.08.2013, 01:36 | #11 |
| Auf zweite Festplatte kann nicht mehr zugegriffen werden Teil2 + addition Code:
ATTFilter ==================== One Month Modified Files and Folders ======= 2013-08-30 02:05 - 2013-08-30 01:54 - 00001788 _____ C:\Users\Yosip\Downloads\Addition.txt 2013-08-30 01:46 - 2013-08-27 01:41 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-30 01:46 - 2013-08-27 01:41 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-30 01:39 - 2013-08-30 01:39 - 00891115 _____ C:\Users\Yosip\Desktop\SecurityCheck.exe 2013-08-30 01:12 - 2013-08-29 22:41 - 00000143 _____ C:\Users\Yosip\Desktop\g.txt 2013-08-29 23:24 - 2013-08-29 23:24 - 02347384 _____ (ESET) C:\Users\Yosip\Downloads\esetsmartinstaller_enu (1).exe 2013-08-29 23:17 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-29 23:17 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-29 23:06 - 2013-08-26 22:37 - 00643866 _____ C:\Windows\system32\perfh007.dat 2013-08-29 23:06 - 2013-08-26 22:37 - 00126394 _____ C:\Windows\system32\perfc007.dat 2013-08-29 23:06 - 2009-07-14 07:13 - 01472002 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-29 23:02 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-29 23:02 - 2009-07-14 06:51 - 00040563 _____ C:\Windows\setupact.log 2013-08-29 22:53 - 2013-08-26 12:49 - 02024630 _____ C:\Windows\WindowsUpdate.log 2013-08-29 22:44 - 2013-08-29 22:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2013-08-29 22:24 - 2013-08-29 22:24 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-08-29 22:24 - 2013-08-29 22:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-08-29 21:43 - 2013-08-29 21:42 - 02347384 _____ (ESET) C:\Users\Yosip\Downloads\esetsmartinstaller_enu.exe 2013-08-29 00:04 - 2013-08-29 00:04 - 00000000 ____D C:\1ab9fcee31bdf318133536 2013-08-28 22:50 - 2013-08-28 22:50 - 00113734 _____ C:\Users\Yosip\Downloads\aeNYVX5.htm 2013-08-28 22:50 - 2011-04-20 09:42 - 00013328 _____ C:\Windows\patch.log 2013-08-28 19:29 - 2013-08-28 19:29 - 00141284 _____ C:\Users\Yosip\Desktop\FRST_28-08-2013_19-29-47.txt 2013-08-28 19:27 - 2013-08-28 19:27 - 01579080 _____ (Farbar) C:\Users\Yosip\Downloads\FRST64.exe 2013-08-28 19:16 - 2013-08-28 19:16 - 00000000 ____D C:\Users\Yosip\AppData\Local\CrashDumps 2013-08-28 19:13 - 2013-08-28 17:40 - 00000000 ____D C:\AdwCleaner 2013-08-28 18:28 - 2013-08-28 18:28 - 00000998 _____ C:\Users\Yosip\Desktop\JRT.txt 2013-08-28 17:52 - 2013-08-28 17:52 - 01021434 _____ (Thisisu) C:\Users\Yosip\Desktop\JRT.exe 2013-08-28 17:42 - 2013-08-28 17:42 - 00001780 _____ C:\Users\Yosip\Desktop\AdwCleaner[S0].txt 2013-08-28 17:40 - 2013-08-28 17:40 - 00994642 _____ C:\Users\Yosip\Downloads\adwcleaner.exe 2013-08-28 15:53 - 2010-11-21 05:47 - 00013614 _____ C:\Windows\PFRO.log 2013-08-28 15:19 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip\AppData\Local\Windows Live 2013-08-28 14:46 - 2013-08-28 14:45 - 00000000 ____D C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.720p.HDTV.x264-KYR 2013-08-28 14:44 - 2013-08-28 14:38 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part01.rar 2013-08-28 14:36 - 2013-08-28 14:36 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Malwarebytes 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-08-28 14:36 - 2013-08-28 14:36 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-28 14:35 - 2013-08-28 14:35 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Yosip\Downloads\mbam-setup-1.75.0.1300.exe 2013-08-28 14:34 - 2013-08-28 14:25 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part21.rar 2013-08-28 14:31 - 2013-08-28 14:30 - 05999696 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part22.rar 2013-08-28 14:30 - 2013-08-28 14:21 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part20.rar 2013-08-28 14:25 - 2013-08-28 14:13 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part19.rar 2013-08-28 14:21 - 2013-08-28 14:12 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part18.rar 2013-08-28 14:13 - 2013-08-28 14:03 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part17.rar 2013-08-28 14:12 - 2013-08-28 14:02 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part16.rar 2013-08-28 14:03 - 2013-08-28 13:54 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part15.rar 2013-08-28 14:02 - 2013-08-28 13:52 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part14.rar 2013-08-28 13:54 - 2013-08-28 13:45 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part13.rar 2013-08-28 13:52 - 2013-08-28 13:42 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part12.rar 2013-08-28 13:45 - 2013-08-28 13:35 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part11.rar 2013-08-28 13:42 - 2013-08-28 13:33 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part10.rar 2013-08-28 13:35 - 2013-08-28 13:25 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part09.rar 2013-08-28 13:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-28 13:33 - 2013-08-28 13:24 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part08.rar 2013-08-28 13:25 - 2013-08-28 13:14 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part06.rar 2013-08-28 13:24 - 2013-08-28 13:15 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part07.rar 2013-08-28 13:15 - 2013-08-28 13:08 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part05.rar 2013-08-28 13:14 - 2013-08-28 13:02 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part04.rar 2013-08-28 13:08 - 2013-08-28 13:00 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part03.rar 2013-08-28 13:02 - 2013-08-28 12:51 - 210763776 _____ C:\Users\Yosip\Downloads\WWE.Monday.Night.RAW.2013.08.26.7-KYR.part02.rar 2013-08-28 12:51 - 2013-08-28 12:51 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\WinRAR 2013-08-28 12:51 - 2013-08-28 12:47 - 96953516 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part11.rar 2013-08-28 12:50 - 2013-08-28 12:45 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part10.rar 2013-08-28 12:47 - 2013-08-28 12:42 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part09.rar 2013-08-28 12:45 - 2013-08-28 12:39 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part08.rar 2013-08-28 12:42 - 2013-08-28 12:39 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part07.rar 2013-08-28 12:39 - 2013-08-28 12:34 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part06.rar 2013-08-28 12:39 - 2013-08-28 12:33 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part05.rar 2013-08-28 12:34 - 2013-08-28 12:28 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part04.rar 2013-08-28 12:33 - 2013-08-28 12:28 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part03.rar 2013-08-28 12:28 - 2013-08-28 12:23 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part02.rar 2013-08-28 12:28 - 2013-08-28 12:23 - 100431872 _____ C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.Ger.Sub.AAC..part01.rar 2013-08-28 12:19 - 2013-08-28 12:18 - 00000000 ____D C:\Users\Yosip\AppData\Local\Windows Live Writer 2013-08-28 12:18 - 2013-08-28 12:18 - 00000000 ____D C:\Users\Yosip\AppData\Roaming\Windows Live Writer 2013-08-28 12:16 - 2013-08-28 12:16 - 00000000 ____D C:\Windows\System32\Tasks\Games 2013-08-28 12:15 - 2013-08-26 22:18 - 00000000 ____D C:\Program Files (x86)\JDownloader 2013-08-28 09:46 - 2013-08-28 08:58 - 00000000 ____D C:\Qoobox 2013-08-28 09:46 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-08-28 09:45 - 2013-08-28 09:45 - 00000000 ____D C:\Windows\erdnt 2013-08-28 09:44 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-08-28 05:00 - 2013-08-28 05:00 - 05841248 _____ (Acer Incorporated) C:\Users\Yosip\Downloads\Updaterhotfix.exe 2013-08-28 04:44 - 2013-08-28 04:43 - 14620768 _____ (Acer Incorporated) C:\Users\Yosip\Downloads\Updaterpackage.exe 2013-08-28 04:41 - 2013-08-26 17:05 - 00060424 _____ C:\Users\Yosip\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-28 04:41 - 2013-08-26 17:05 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-08-28 04:41 - 2013-08-26 17:05 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-08-28 04:40 - 2013-08-26 17:05 - 00001413 _____ C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-28 04:27 - 2009-07-14 06:45 - 00283104 _____ C:\Windows\system32\FNTCACHE.DAT 2013-08-28 04:14 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-08-28 04:14 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-08-28 04:14 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System 2013-08-28 04:13 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal 2013-08-28 03:42 - 2013-08-28 03:34 - 00014015 _____ C:\Windows\IE10_main.log 2013-08-28 03:38 - 2013-08-28 03:38 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-28 03:38 - 2013-08-28 03:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-28 03:38 - 2013-08-28 03:38 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-08-28 03:38 - 2013-08-28 03:38 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-08-28 03:38 - 2013-08-28 03:38 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-08-28 03:38 - 2013-08-28 03:38 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-08-28 03:38 - 2013-08-28 03:38 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-08-28 03:38 - 2013-08-28 03:38 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-08-28 03:38 - 2013-08-28 03:38 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-08-28 03:38 - 2013-08-28 03:38 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-08-28 03:38 - 2013-08-28 03:38 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-08-28 03:38 - 2013-08-28 03:38 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-08-28 03:38 - 2013-08-28 03:38 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-08-28 03:35 - 2013-08-28 03:35 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-08-28 03:35 - 2013-08-28 03:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-08-28 03:23 - 2013-08-28 03:23 - 05114158 ____R (Swearware) C:\Users\Yosip\Desktop\ComboFix.exe 2013-08-28 03:17 - 2011-04-20 10:17 - 00000000 ____D C:\ProgramData\McAfee 2013-08-28 03:17 - 2011-04-20 10:17 - 00000000 ____D C:\Program Files\mcafee 2013-08-28 03:17 - 2011-04-20 10:17 - 00000000 ____D C:\Program Files (x86)\McAfee 2013-08-28 01:40 - 2013-08-28 01:40 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00189936 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-08-28 01:40 - 2013-08-28 01:40 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-08-28 01:40 - 2013-08-28 01:40 - 00001926 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum 2013-08-28 01:40 - 2013-08-28 01:40 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-08-28 01:37 - 2013-08-28 01:37 - 00000000 ____D C:\ProgramData\AVAST Software 2013-08-28 01:37 - 2013-08-28 01:37 - 00000000 ____D C:\Program Files\AVAST Software 2013-08-28 01:30 - 2013-08-28 01:26 - 117478104 _____ C:\Users\Yosip\Downloads\avast_free_antivirus_setup.exe 2013-08-28 01:30 - 2011-04-20 10:33 - 00000000 ____D C:\ProgramData\Symantec 2013-08-27 22:06 - 2013-08-27 22:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Yosip\Downloads\revosetup95.exe 2013-08-27 22:06 - 2013-08-27 22:06 - 00001268 _____ C:\Users\Yosip\Desktop\Revo Uninstaller.lnk 2013-08-27 22:06 - 2013-08-27 22:06 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2013-08-27 18:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2013-08-27 18:24 - 2011-04-20 10:20 - 00000579 _____ C:\Windows\DirectX.log 2013-08-27 18:23 - 2013-08-27 18:21 - 00003899 _____ C:\Windows\IE9_main.log 2013-08-27 18:23 - 2011-04-20 10:25 - 00000000 ____D C:\OEM 2013-08-27 18:20 - 2011-04-20 10:33 - 00000000 ____D C:\ProgramData\oem 2013-08-27 18:20 - 2011-04-20 10:19 - 00000000 ____D C:\Program Files\Acer 2013-08-27 18:20 - 2011-04-20 09:47 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-08-27 18:17 - 2013-08-27 18:16 - 00001527 _____ C:\ProgramData\ArcadeDeluxe5.log 2013-08-27 18:16 - 2013-08-27 18:16 - 00000000 ____D C:\ProgramData\CyberLink 2013-08-27 18:12 - 2013-08-27 18:12 - 00000000 ____D C:\Users\Yosip\AppData\Local\Acer 2013-08-27 18:12 - 2011-04-20 10:18 - 00000000 ____D C:\Program Files (x86)\Acer 2013-08-27 17:56 - 2011-04-20 10:03 - 00000000 ____D C:\Program Files (x86)\Acer GameZone 2013-08-27 03:58 - 2013-08-27 03:58 - 00000000 ____D C:\ProgramData\FLEXnet 2013-08-27 03:34 - 2013-08-27 03:34 - 00000000 ____D C:\ProgramData\InstallShield 2013-08-27 03:34 - 2013-08-27 03:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2013-08-27 03:11 - 2013-08-27 03:11 - 00000000 ____D C:\ProgramData\Atheros 2013-08-27 03:00 - 2013-08-26 12:58 - 00000680 _____ C:\Windows\Driver_install.log 2013-08-27 02:57 - 2013-08-27 02:57 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf 2013-08-27 02:56 - 2013-08-27 02:56 - 00000000 ___RD C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2013-08-27 02:56 - 2013-08-27 02:56 - 00000000 ____D C:\Users\Yosip\Documents\Bluetooth Folder 2013-08-27 02:56 - 2013-08-27 02:55 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite 2013-08-27 02:56 - 2011-03-13 10:53 - 00246804 _____ C:\Windows\system32\Drivers\AtherosBt.bin 2013-08-27 02:37 - 2011-04-20 10:25 - 00000000 ____D C:\DOLBY PCEE4 2013-08-27 02:23 - 2013-08-27 02:23 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-08-27 02:22 - 2013-08-27 02:22 - 00004844 _____ C:\Windows\DPINST.LOG 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____D C:\Program Files\Synaptics 2013-08-27 02:22 - 2013-08-27 02:22 - 00000000 ____D C:\Program Files\Realtek 2013-08-27 02:22 - 2011-04-20 09:56 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-08-27 01:55 - 2013-08-27 01:55 - 00000000 ____D C:\Program Files (x86)\Renesas Electronics 2013-08-27 01:48 - 2013-08-27 01:48 - 00001049 _____ C:\Users\Public\Desktop\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk 2013-08-27 01:48 - 2013-08-27 01:48 - 00000000 ____D C:\Program Files\Intel 2013-08-27 01:42 - 2013-08-27 01:42 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-08-27 01:42 - 2013-08-27 01:42 - 00000184 _____ C:\Windows\LMv4.UNI 2013-08-27 01:42 - 2013-08-27 01:42 - 00000000 ____D C:\Program Files (x86)\Launch Manager 2013-08-27 01:42 - 2013-08-27 01:40 - 00000000 ____D C:\Users\Yosip\AppData\Local\Google 2013-08-27 01:41 - 2013-08-27 01:41 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-08-27 01:41 - 2013-08-27 01:41 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-08-27 01:41 - 2013-08-27 01:41 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-27 01:40 - 2013-08-27 01:40 - 00000000 ____D C:\Users\Yosip\AppData\Local\Deployment 2013-08-27 01:40 - 2013-08-27 01:40 - 00000000 ____D C:\Users\Yosip\AppData\Local\Apps\2.0 2013-08-26 22:49 - 2013-08-26 22:49 - 00000000 ____D C:\book 2013-08-26 22:49 - 2011-02-12 05:43 - 00000000 ____D C:\Windows\DeployWinRE2 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\winrm 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\WCN 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\sysprep 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\slmgr 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\winrm 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\WCN 2013-08-26 22:38 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\slmgr 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\MUI 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\MUI 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism 2013-08-26 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing 2013-08-26 22:38 - 2009-03-12 11:30 - 00000000 ____D C:\Windows\LP 2013-08-26 22:37 - 2013-08-26 22:37 - 00295922 _____ C:\Windows\system32\perfi007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00038104 _____ C:\Windows\system32\perfd007.dat 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\SysWOW64\0407 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\de 2013-08-26 22:37 - 2013-08-26 22:37 - 00000000 ____D C:\Windows\system32\0407 2013-08-26 22:37 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts 2013-08-26 22:37 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts 2013-08-26 22:37 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\DigitalLocker 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar 2013-08-26 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Setup 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\com 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Setup 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\com 2013-08-26 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\IME 2013-08-26 22:34 - 2013-08-26 22:34 - 00000000 ____D C:\Windows\NAPP_Dism_Log 2013-08-26 22:31 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG 2013-08-26 22:31 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2013-08-26 22:27 - 2013-08-26 22:27 - 00000000 ____D C:\Users\Yosip\AppData\Local\EgisTec IPS 2013-08-26 22:27 - 2013-08-26 22:27 - 00000000 ____D C:\ProgramData\EgisTec 2013-08-26 22:27 - 2011-04-20 10:31 - 00000000 ____D C:\ProgramData\EgisTec IPS 2013-08-26 22:20 - 2013-08-26 22:19 - 00030364 _____ C:\Users\Yosip\Desktop\FRST.txt 2013-08-26 22:20 - 2013-08-26 22:13 - 00017865 _____ C:\Users\Yosip\Desktop\Addition.txt 2013-08-26 22:19 - 2013-08-26 22:19 - 00016834 _____ C:\Users\Yosip\Desktop\Addition (2).txt 2013-08-26 22:18 - 2013-08-26 22:18 - 00002041 _____ C:\Users\Yosip\Desktop\JDownloader.lnk 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-26 22:15 - 2013-08-26 22:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-26 22:14 - 2013-08-26 22:14 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Yosip\Desktop\jDownloaderWebInstaller09581.exe 2013-08-26 22:12 - 2013-08-26 22:12 - 00000000 ____D C:\FRST 2013-08-26 18:31 - 2013-08-28 12:51 - 00000000 ____D C:\Users\Yosip\Downloads\Breaking.Bad.S05E11.720p.HDTV.x264-IMMERSE 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Vorlagen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Startmenü 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Netzwerkumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Lokale Einstellungen 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Eigene Dateien 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Druckumgebung 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Musik 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Documents\Eigene Bilder 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Verlauf 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\AppData\Local\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 _SHDL C:\Users\Yosip\Anwendungsdaten 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip\AppData\Local\VirtualStore 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Users\Yosip 2013-08-26 17:05 - 2013-08-26 17:05 - 00000000 ____D C:\Recovery 2013-08-26 17:05 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore 2013-08-26 17:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Programme 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Favoriten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-08-26 17:04 - 2013-08-26 17:04 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-08-26 17:04 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries 2013-08-26 17:04 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT 2013-08-26 16:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep 2013-08-26 16:35 - 2007-07-12 03:49 - 00000000 ____D C:\Windows\Panther 2013-08-26 16:09 - 2009-07-14 06:46 - 00004059 _____ C:\Windows\DtcInstall.log 2013-08-26 16:01 - 2013-08-26 16:01 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-08-26 15:46 - 2013-08-26 13:19 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-08-26 13:25 - 2013-08-26 13:25 - 00000000 ____D C:\Program Files\ATI 2013-08-26 13:10 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-08-26 12:55 - 2009-07-14 06:51 - 00000269 _____ C:\Windows\setuperr.log 2013-08-26 12:52 - 2011-04-20 09:37 - 00003652 _____ C:\Windows\TSSysprep.log 2013-08-07 04:22 - 2010-11-21 05:27 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe Files to move or delete: ==================== C:\Users\Yosip\AppData\Local\Temp\Quarantine.exe C:\Users\Yosip\AppData\Local\Temp\jrt\erunt\ERUNT.EXE ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-28 10:05 ==================== End Of Log ============================ Code:
ATTFilter ==================== Memory info =========================== Percentage of memory in use: 40% Total physical RAM: 4077.86 MB Available physical RAM: 2428.5 MB Total Pagefile: 8153.9 MB Available Pagefile: 6382.6 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:95.69 GB) (Free:40.53 GB) NTFS CodeIntegrity Errors: =================================== Date: 2013-08-28 09:23:02.474 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-08-28 09:23:02.427 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 40% Total physical RAM: 4077.86 MB Available physical RAM: 2411.04 MB Total Pagefile: 8153.9 MB Available Pagefile: 6380.45 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:95.69 GB) (Free:40.53 GB) NTFS |
30.08.2013, 15:27 | #12 |
/// the machine /// TB-Ausbilder | Auf zweite Festplatte kann nicht mehr zugegriffen werden Flash und Adobe updaten. Schau mal in der Systemsteuerung > Verwaltung > Datenträgerverwaltung nach, ob Sie da zu sehen ist. Ansonsten mal aufschrauben.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
30.08.2013, 16:38 | #13 |
| Auf zweite Festplatte kann nicht mehr zugegriffen werden Bei der Datenträgerverwaltung wurde sie erkannt und auch die exate Größe angegeben. Nur steht da dass das Dateisystem RAW ist und ich bin mir sicher das es am Anfang ntfs war. Ich glaub das ist ein guter Anhaltspunkt. woahhh ich habs geschaft mit einem datenrettungprogramm alle daten auf eine andere festplatte zu übertragen und jetzt kann ich sie formatieren also danke für alles und vor allem für den datenträgerverwaltungs hinweis. |
30.08.2013, 20:40 | #14 |
/// the machine /// TB-Ausbilder | Auf zweite Festplatte kann nicht mehr zugegriffen werden Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
30.08.2013, 21:13 | #15 |
| Auf zweite Festplatte kann nicht mehr zugegriffen werden Jep alles fertig und in Ordnung |
Themen zu Auf zweite Festplatte kann nicht mehr zugegriffen werden |
angezeigt, brauch, entdeck, keine rückmeldung, langsam, neue, neue laptop, nichts, pup.bprotector, pup.optional.babylon.a, pup.optional.datamngr, pup.optional.delta.a, pup.optional.installcore.a, pup.optional.lyrixeeker, pup.optional.startpage, reagiert, speicher, windows |