|
Log-Analyse und Auswertung: C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 StartWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
20.09.2013, 10:08 | #1 |
| C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start Hallo Trojaner-Bord Team, Ich habe genau dasselbe Problem, welches Ihr hier schon im Forum mit "DarkMark" am 23.08.2013 und "mcosg" am 16.08.2013 bearbeitet habt. Nach einem Malwaresuchlauf mit "Malwarebytes“ und 45 Funden, welche schon teilweise von Malwarebytes gelöscht und der Rest in Quarantäne verschoben wurde, erschein beim Hochfahren des Rechners zum Schluss auf dem Windows 7 Desktop das "RunDLL Fenster" mit der Meldung: Problem beim Starten von C:\Programm Files\HomeTab\TBUpdater.dll Das angegebene Modul wurde nicht gefungen Leider kann ich im System keine Datei "TBUpdater.dll finden. Als Betriebssystem habe ich Windows 7 Ultimate SP 1 seit dem 07.09.2013 laufen. Viren- und Malwareprogramm: "Avira Internet Security" "Malwarebytes" welches ich 1 mal in der Woche laufen lasse, sonst Bordwerkzeuge aus Win7. Auch bin ich nur ein Anwender mit wenigen Kenntnissen in dem System und habe keine Englischkenntnisse. Ich hoffe Ihr habt dafür Verständnis und könnt mir dennoch helfen dieses sich öffnende Fenster von RunDLL zu beseitigen. Systemausfälle habe ich noch nicht. Über eine Antwort und Hilfe bei der Beseitigung des Problehm würde ich mich freuen. Logfiles Defogger Ich weis jetzt nicht was ich falsch mache, aber ich kann das #-Symbol nich aktivieren Vielleicht kann mir jemand helfen. Für Eure Bemühungen im Voraus vielen Dank Gruß Lasko |
20.09.2013, 10:32 | #2 |
/// the machine /// TB-Ausbilder | C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
20.09.2013, 11:21 | #3 |
| C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start FRST.txt Teil 1
__________________Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-09-2013 01 Ran by Lasko (administrator) on Lasko-PC on 20-09-2013 10:21:37 Running from C:\Users\Lasko\Desktop Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Macrovision) C:\Windows\system32\drivers\CDAC11BA.EXE (SafeNet Inc.) C:\Windows\system32\hasplms.exe (Microsoft Corporation) C:\MSSQL$SIBBAUWERKE\Binn\sqlservr.exe (Nitro PDF Software) C:\Program Files\Nitro\Pro 8\NitroPDFDriverService8.exe (Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Dr. J. Rathlev, D-24222 Schwentinental) C:\Users\Lasko\Programme\Personal Backup 5\Persbackup.exe (Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\usrreq.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [KeePass 2 PreLoad] - C:\Program Files\KeePass Password Safe 2\KeePass.exe [2010624 2013-07-20] (Dominik Reichl) HKLM\...\Run: [ZoneAlarm] - "C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe" HKLM\...\Run: [BrMfcWnd] - C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.) HKLM\...\Run: [ControlCenter3] - C:\Program Files\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM\...\Run: [NWEReboot] - [x] HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-14] (Avira Operations GmbH & Co. KG) HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun Startup: C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Persbackup.lnk ShortcutTarget: Persbackup.lnk -> C:\Users\Lasko\Programme\Personal Backup 5\Persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=6CFD00133B0DB875&affID=122471&tt=160913_m2&tsp=5009 BHO: No Name - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - No File BHO: HomeTab - {a25e7121-3dd8-41b3-855b-756c5bc45449} - C:\Users\Lasko\AppData\Roaming\HomeTab\HomeTab.dll (Simply Tech Ltd.) Toolbar: HKLM - HomeTab - {a25e7121-3dd8-41b3-855b-756c5bc45449} - C:\Users\Lasko\AppData\Roaming\HomeTab\HomeTab.dll (Simply Tech Ltd.) Toolbar: HKLM - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default FF user.js: detected! => C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\user.js FF NewTab: hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=6CFD00133B0DB875&affID=122471&tt=160913_m2&tsp=5009 FF Homepage: www.t-online.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin: @checkpoint.com/FFApi - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll No File FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @nitropdf.com/NitroPDF - C:\Program Files\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF) FF SearchPlugin: C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\searchplugins\BrowserProtect.xml FF SearchPlugin: C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\searchplugins\delta.xml FF SearchPlugin: C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\searchplugins\{0488D87D-B84F-4C94-A4CF-A719B5EFF6E3}.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Click&Clean - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\clickclean@hotcleaner.com FF Extension: Fasterfox Lite - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\FasterFox_Lite@BigRedBrent FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\nostmp FF Extension: Flagfox - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} FF Extension: WOT - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} FF Extension: Memory Fox - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{E173B749-DB5B-4fd2-BA0E-94ECEA0CA55B} FF Extension: ZoneAlarm-Sicherheit Toolbar - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b}(2) FF Extension: finder - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\finder@meingutscheincode.de.xpi FF Extension: firefox - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\firefox@ghostery.com.xpi FF Extension: trackmenot - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\trackmenot@mrl.nyu.edu.xpi FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\TrustChecker ========================== Services (Whitelisted) ================= R2 AntiVirFirewallService; C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe [655928 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [622648 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-14] (Avira Operations GmbH & Co. KG) R2 C-DillaCdaC11BA; C:\Windows\system32\drivers\CDAC11BA.EXE [54784 2013-09-09] (Macrovision) R2 hasplms; C:\Windows\system32\hasplms.exe [4609928 2013-08-09] (SafeNet Inc.) R2 MSSQL$SIBBAUWERKE; C:\MSSQL$SIBBAUWERKE\Binn\sqlservr.exe [9150464 2005-05-04] (Microsoft Corporation) S3 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [73728 2005-05-03] (Microsoft Corporation) R2 NitroDriverReadSpool8; C:\Program Files\Nitro\Pro 8\NitroPDFDriverService8.exe [196616 2013-04-30] (Nitro PDF Software) S3 SQLAgent$SIBBAUWERKE; C:\MSSQL$SIBBAUWERKE\Binn\sqlagent.EXE [323584 2005-05-03] (Microsoft Corporation) R2 StarMoney 8.0 OnlineUpdate; C:\Program Files\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH) R2 StarMoney 9.0 OnlineUpdate; C:\Program Files\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [663184 2013-06-13] (Star Finanz-Software Entwicklung und Vertriebs GmbH) S2 vsmon; C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe -service [x] ==================== Drivers (Whitelisted) ==================== R2 aksfridge; C:\Windows\System32\DRIVERS\aksfridge.sys [376200 2013-08-09] (SafeNet Inc.) R3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [244040 2013-08-09] (SafeNet Inc.) R3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [53192 2013-08-09] (SafeNet Inc.) R3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [296200 2013-08-09] (SafeNet Inc.) R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [92448 2013-09-14] (Avira GmbH) R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [113024 2013-09-14] (Avira GmbH) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-14] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-14] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-09-14] (Avira Operations GmbH & Co. KG) R2 CdaC15BA; C:\Windows\system32\drivers\CDAC15BA.SYS [12464 2013-09-09] (Macrovision Europe Ltd) R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation) R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [608648 2013-08-09] (SafeNet Inc.) R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [133208 2012-01-09] (Kaspersky Lab ZAO) R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11352 2012-01-09] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [468272 2012-01-09] (Kaspersky Lab) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] () R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-14] (Avira GmbH) R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation) R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation) R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation) R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation) R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [455256 2011-05-07] (Check Point Software Technologies LTD) S2 ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [x] U5 UnlockerDriver5; C:\Users\Lasko\Programme\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-20 10:21 - 2013-09-20 10:21 - 00000000 ____D C:\FRST 2013-09-20 10:18 - 2013-09-20 10:19 - 01083549 _____ (Farbar) C:\Users\Lasko\Desktop\FRST.exe 2013-09-20 10:14 - 2013-09-20 10:14 - 00001338 _____ C:\Users\Lasko\Desktop\Defogger - Verknüpfung.lnk 2013-09-20 10:10 - 2013-09-20 10:10 - 00000000 _____ C:\Users\Lasko\defogger_reenable 2013-09-20 08:40 - 2013-09-20 08:40 - 98443620 _____ C:\Windows\system32\〰᭔` 2013-09-19 14:02 - 2013-09-19 14:04 - 00000000 ____D C:\Users\Lasko\Downloads\Trojaner-Board 2013-09-19 12:39 - 2013-09-19 12:39 - 00020684 _____ C:\CMDTEMP.dxf 2013-09-18 15:06 - 2013-09-18 15:08 - 00000000 ____D C:\SIB-Bilder 2013-09-18 15:05 - 2013-09-18 15:05 - 00000000 ____D C:\Users\Lasko\Documents\SIBBW 2013-09-18 15:04 - 2013-09-19 12:34 - 00000000 ____D C:\Users\Lasko\SIBBW 2013-09-18 15:01 - 2013-09-18 15:02 - 00009917 _____ C:\Windows\aksdrvsetup.log 2013-09-18 15:01 - 2013-09-18 15:01 - 00001885 _____ C:\Users\Public\Desktop\Bauwerke 1.8 (MSDE).lnk 2013-09-18 15:01 - 2013-09-18 15:01 - 00000167 _____ C:\Windows\ODBCINST.INI 2013-09-18 15:01 - 2013-09-18 15:01 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard 2013-09-18 15:01 - 2001-09-06 07:47 - 00045056 _____ (WPM-Ingenieure GmbH) C:\Windows\system32\SIBDriveBox2.ocx 2013-09-18 15:01 - 2000-08-16 08:12 - 00155920 _____ (Microsoft Corporation) C:\Windows\system32\temp.01B 2013-09-18 15:01 - 2000-08-16 08:12 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\temp.013 2013-09-18 15:01 - 2000-08-16 08:12 - 00041232 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.cpl 2013-09-18 15:01 - 2000-08-16 08:12 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\temp.01C 2013-09-18 15:01 - 2000-07-26 14:37 - 00221456 _____ (Microsoft Corporation) C:\Windows\system32\temp.018 2013-09-18 15:01 - 2000-07-26 14:37 - 00200976 _____ (Microsoft Corporation) C:\Windows\system32\temp.00D 2013-09-18 15:01 - 2000-07-26 14:37 - 00196880 _____ (Microsoft Corporation) C:\Windows\system32\temp.00E 2013-09-18 15:01 - 2000-07-26 14:37 - 00151824 _____ (Microsoft Corporation) C:\Windows\system32\temp.00C 2013-09-18 15:01 - 2000-07-26 14:37 - 00102672 _____ (Microsoft Corporation) C:\Windows\system32\temp.00F 2013-09-18 15:01 - 2000-07-26 14:37 - 00037136 _____ (Microsoft Corporation) C:\Windows\system32\temp.016 2013-09-18 15:01 - 2000-07-26 14:37 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.017 2013-09-18 15:01 - 2000-07-26 14:36 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.01D 2013-09-18 15:01 - 2000-06-27 12:05 - 00026224 _____ (Microsoft Corporation) C:\Windows\system32\temp.019 2013-09-18 15:01 - 2000-06-27 12:05 - 00004656 _____ (Microsoft Corporation) C:\Windows\system32\temp.01F 2013-09-18 15:01 - 2000-06-26 07:15 - 00002233 _____ C:\Windows\system32\~GLH0411.TMP 2013-09-18 15:01 - 2000-06-26 07:15 - 00002151 _____ C:\Windows\system32\~GLH0412.TMP 2013-09-18 15:01 - 2000-05-25 11:58 - 00040960 _____ ( WPM-Ingenieure GMBH) C:\Windows\system32\DriveBox.ocx 2013-09-18 15:01 - 1999-03-15 13:02 - 00045107 _____ (Microsoft Corporation) C:\Windows\system32\temp.014 2013-09-18 15:01 - 1999-03-08 10:50 - 00147728 _____ (Microsoft Corporation) C:\Windows\system32\temp.009 2013-09-18 15:01 - 1999-03-08 10:15 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\temp.010 2013-09-18 15:01 - 1999-02-02 15:56 - 00000421 _____ C:\Windows\system32\odbcinst.cnt 2013-09-18 15:01 - 1999-01-27 12:40 - 00015716 _____ C:\Windows\system32\Sqlsrdme.txt 2013-09-18 15:01 - 1999-01-25 14:00 - 00512272 _____ (Microsoft Corporation) C:\Windows\system32\temp.00A 2013-09-18 15:01 - 1999-01-25 14:00 - 00061712 _____ (Microsoft Corporation) C:\Windows\system32\temp.008 2013-09-18 15:01 - 1998-12-14 13:49 - 00002287 _____ C:\Windows\system32\12520433.cpx 2013-09-18 15:01 - 1998-12-14 08:35 - 00002287 _____ C:\Windows\system32\12520435.cpx 2013-09-18 15:01 - 1998-11-30 08:21 - 00041316 _____ C:\Windows\system32\odbcinst.hlp 2013-09-18 15:01 - 1998-11-25 11:41 - 00049984 _____ C:\Windows\system32\msorcl32.hlp 2013-09-18 15:01 - 1998-11-13 03:25 - 00119056 _____ (Microsoft Corporation) C:\Windows\system32\sqlstr.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00049424 _____ (Microsoft Corporation) C:\Windows\system32\temp.011 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\temp.01E 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\dbmsspxn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\dbmsshrn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\dbmsadsn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00028944 _____ (Microsoft Corporation) C:\Windows\system32\dbmsvinn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00028944 _____ (Microsoft Corporation) C:\Windows\system32\dbmssocn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00028944 _____ (Microsoft Corporation) C:\Windows\system32\dbmsrpcn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.015 2013-09-18 15:01 - 1998-11-13 03:25 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.012 2013-09-18 15:01 - 1998-11-13 03:23 - 00037136 _____ (Microsoft Corporation) C:\Windows\system32\temp.007 2013-09-18 15:01 - 1998-11-12 23:25 - 00030376 _____ C:\Windows\system32\cliconf.hlp 2013-09-18 15:01 - 1998-11-06 12:40 - 00001926 _____ C:\Windows\system32\msorcl32.cnt 2013-09-18 15:01 - 1998-10-28 16:06 - 00017725 _____ C:\Windows\system32\sqlsodbc.hlp 2013-09-18 15:01 - 1998-10-23 13:10 - 00001938 _____ C:\Windows\system32\msorcrdm.txt 2013-09-18 15:01 - 1998-06-17 00:00 - 00077878 _____ (Microsoft Corporation) C:\Windows\system32\temp.00B 2013-09-18 15:01 - 1998-04-24 00:00 - 00002320 _____ C:\Windows\system32\12500852.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002318 _____ C:\Windows\system32\12510866.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002173 _____ C:\Windows\system32\12520863.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002167 _____ C:\Windows\system32\12520860.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002162 _____ C:\Windows\system32\12520861.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002147 _____ C:\Windows\system32\12520865.cpx 2013-09-18 15:01 - 1997-11-14 04:43 - 00029456 _____ (Microsoft Corporation) C:\Windows\system32\temp.01A 2013-09-18 15:00 - 2013-09-18 15:03 - 00000000 ____D C:\Program Files\BAUWERKE 2013-09-18 15:00 - 2013-09-18 15:00 - 00000000 ____D C:\Windows\system32\Help 2013-09-18 15:00 - 2008-04-15 19:46 - 01724416 _____ (Microsoft Corporation) C:\Windows\system32\gdiplus.dll 2013-09-18 15:00 - 2007-03-21 19:33 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\msvcp71.dll 2013-09-18 15:00 - 2007-03-21 19:33 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\msvcr71.dll 2013-09-18 15:00 - 2007-02-17 17:28 - 02511360 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\haspds_windows.dll 2013-09-18 15:00 - 2004-11-10 11:10 - 00778240 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\hasp_com_windows.dll 2013-09-18 15:00 - 2004-05-13 16:26 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\msvci70.dll 2013-09-18 15:00 - 2004-03-09 19:45 - 00224016 _____ (Microsoft Corporation) C:\Windows\system32\tabctl32.ocx 2013-09-18 15:00 - 2004-03-09 17:45 - 00084512 _____ (Microsoft Corporation) C:\Windows\system32\picclp32.ocx 2013-09-18 15:00 - 2004-03-09 02:00 - 00212240 _____ (Microsoft Corporation) C:\Windows\system32\richtx32.ocx 2013-09-18 15:00 - 2004-02-23 02:00 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\tlbinf32.dll 2013-09-18 15:00 - 2001-02-05 23:59 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\foxhhelp.exe 2013-09-18 15:00 - 2000-07-15 03:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\foxhhelpps.dll 2013-09-18 15:00 - 2000-04-03 20:52 - 00067376 _____ (Microsoft Corporation) C:\Windows\system32\sysinfo.ocx 2013-09-18 15:00 - 2000-03-06 23:00 - 00278581 _____ (Microsoft Corporation) C:\Windows\system32\temp.000 2013-09-18 15:00 - 1999-03-07 23:00 - 00598288 _____ (Microsoft Corporation) C:\Windows\system32\temp.004 2013-09-18 15:00 - 1999-03-07 23:00 - 00164112 _____ (Microsoft Corporation) C:\Windows\system32\temp.005 2013-09-18 15:00 - 1999-03-07 23:00 - 00147728 _____ (Microsoft Corporation) C:\Windows\system32\temp.006 2013-09-18 15:00 - 1999-02-07 23:00 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\temp.002 2013-09-18 15:00 - 1998-09-29 06:44 - 00013919 _____ C:\Windows\system32\vfpodbc.txt 2013-09-18 15:00 - 1998-06-22 23:00 - 00084000 _____ (Microsoft Corporation) C:\Windows\system32\MSOUTL32.OCX 2013-09-18 15:00 - 1998-04-30 00:00 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\temp.003 2013-09-18 15:00 - 1998-04-24 00:00 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\temp.001 2013-09-18 15:00 - 1997-04-24 16:32 - 00220372 _____ C:\Windows\system32\drvvfp.hlp 2013-09-18 15:00 - 1996-09-19 10:27 - 00005902 _____ C:\Windows\system32\drvvfp.cnt 2013-09-18 14:59 - 2013-09-18 14:59 - 15651522 _____ C:\Users\Lasko\Downloads\sib_bauwerke_18_sp23_msde_update.exe 2013-09-18 14:58 - 2013-09-18 14:58 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autostart 2013-09-18 14:56 - 2013-09-18 14:56 - 00212992 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\MSSQL$SIBBAUWERKE 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\SafeNet Sentinel 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\Aladdin Shared 2013-09-18 14:49 - 2013-08-09 09:52 - 04609928 _____ (SafeNet Inc.) C:\Windows\system32\hasplms.exe 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Adobe 2013-09-18 10:42 - 2013-09-18 10:42 - 00000000 ____D C:\Users\Lasko\Downloads\Unlocker 2013-09-18 09:05 - 2013-09-19 16:44 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro PDF 2013-09-17 18:39 - 2013-09-17 18:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00001925 _____ C:\Users\Public\Desktop\Nitro Pro 8.lnk 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\ProgramData\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Common Files\Nitro 2013-09-17 18:38 - 2013-04-30 09:10 - 00027144 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon2.dll 2013-09-17 18:38 - 2013-04-30 09:10 - 00018440 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui2.dll 2013-09-17 18:37 - 2013-09-17 18:37 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Downloaded Installations 2013-09-17 18:29 - 2013-09-17 18:37 - 00000000 ____D C:\Users\Lasko\Downloads\Nitro.Pro.Enterprise.v 8.5.3.14.x86 2013-09-17 13:21 - 2012-07-26 05:39 - 00526952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-09-17 13:21 - 2012-07-26 05:39 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2013-09-17 13:21 - 2012-07-26 04:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2013-09-17 13:21 - 2012-06-02 16:34 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2013-09-17 13:20 - 2012-07-26 05:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2013-09-17 13:20 - 2012-07-26 05:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2013-09-17 13:20 - 2012-07-26 05:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2013-09-17 13:20 - 2012-07-26 05:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2013-09-17 13:20 - 2012-07-26 05:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2013-09-17 13:20 - 2012-07-26 04:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2013-09-17 13:20 - 2012-07-26 04:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2013-09-17 13:20 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2013-09-17 12:59 - 2013-01-24 06:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2013-09-17 12:59 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2013-09-17 12:59 - 2012-08-22 19:16 - 00712048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2013-09-17 12:59 - 2012-07-04 21:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2013-09-17 12:59 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2013-09-17 12:59 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2013-09-17 12:59 - 2011-03-25 04:58 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-09-17 12:59 - 2011-03-25 04:58 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-09-17 12:59 - 2011-03-25 04:58 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00005888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-09-17 12:59 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2013-09-17 12:58 - 2012-08-21 22:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2013-09-17 12:58 - 2011-03-11 07:39 - 00148864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2013-09-17 12:58 - 2011-03-11 07:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2013-09-17 12:58 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2013-09-17 12:58 - 2011-03-11 07:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2013-09-17 12:58 - 2011-03-11 07:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2013-09-17 12:58 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2013-09-17 12:58 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2013-09-17 12:58 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2013-09-17 12:58 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2013-09-17 12:57 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-09-17 12:57 - 2013-03-19 06:53 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2013-09-17 12:57 - 2013-03-19 05:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2013-09-17 12:57 - 2012-10-03 18:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2013-09-17 12:57 - 2012-10-03 17:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2013-09-17 12:57 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2013-09-17 12:56 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\system32\locale.nls 2013-09-17 12:56 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2013-09-17 12:56 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2013-09-17 12:56 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2013-09-17 12:56 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2013-09-17 12:55 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-09-17 12:55 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2013-09-17 12:55 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2013-09-17 12:55 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2013-09-17 12:55 - 2012-05-05 09:46 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2013-09-17 12:55 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2013-09-17 12:55 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2013-09-17 12:54 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-09-17 12:54 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2013-09-17 12:54 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2013-09-17 12:54 - 2012-05-01 06:44 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2013-09-17 12:54 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2013-09-17 12:54 - 2011-04-22 21:14 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2013-09-17 12:44 - 2013-09-17 12:44 - 00000000 ____D C:\Users\Lasko\Documents\ForceField Shared Files 2013-09-17 09:12 - 2013-09-17 09:12 - 00000000 ____D C:\Users\Lasko\Downloads\ASUS-Treiber 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\Program Files\AskPartnerNetwork 2013-09-17 09:01 - 2013-09-17 09:01 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Avira 2013-09-15 13:45 - 2013-09-17 13:45 - 00000000 ____D C:\Users\Lasko\Documents\PersBackup 2013-09-15 13:01 - 2013-09-15 13:01 - 00000000 ____D C:\Windows\system32\config\RCCBakup 2013-09-15 12:54 - 2013-09-15 13:09 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Systweak 2013-09-14 16:16 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\Downloads\Update-Checker(Filehippo) 2013-09-14 13:59 - 2013-09-14 13:59 - 00000000 ____D C:\Users\Lasko\Word 2013-09-14 11:46 - 2013-09-14 11:46 - 00000000 ____D C:\SoloApp 2013-09-14 11:12 - 2013-09-14 11:12 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-09-13 15:26 - 2013-09-14 11:09 - 00002017 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-09-13 15:26 - 2013-09-14 11:07 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00113024 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00092448 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys 2013-09-13 15:25 - 2013-09-17 12:41 - 00000000 ____D C:\Program Files\Avira 2013-09-13 15:15 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\Avira 2013-09-12 17:36 - 2013-09-13 12:41 - 00000000 ____D C:\Users\Lasko\Downloads\AdobeFlashPlayer 2013-09-12 17:10 - 2013-09-12 17:10 - 00002703 _____ C:\Users\Lasko\Desktop\Microsoft Office Project 2007.lnk 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Windows\PCHEALTH 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Program Files\Microsoft Works 2013-09-12 17:07 - 2013-09-12 17:07 - 00000000 __RHD C:\MSOCache 2013-09-12 11:23 - 2013-09-12 11:23 - 00001074 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Malwarebytes 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-12 11:23 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-09-12 11:18 - 2013-09-13 17:11 - 00000000 ____D C:\Users\Lasko\Downloads\Malwarebytes 2013-09-12 10:22 - 2013-09-12 10:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Virtual PC 2013-09-11 17:08 - 2013-09-11 17:08 - 00002675 _____ C:\Users\Lasko\Desktop\Nero CoverDesigner.lnk 2013-09-11 17:08 - 2013-09-11 17:08 - 00000000 ____D C:\Users\Lasko\Documents\Nero 2013-09-11 16:50 - 2013-09-13 17:11 - 00000000 ____D C:\Users\Lasko\Downloads\CD-DVD-Brenner 2013-09-11 16:27 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\PersBackup5 2013-09-11 16:27 - 2013-09-11 16:27 - 00001045 _____ C:\Users\Public\Desktop\Personal Backup 5.lnk 2013-09-11 14:55 - 2013-09-11 14:55 - 00000000 ____D C:\Users\Lasko\Documents\default 2013-09-11 14:50 - 2013-09-11 14:50 - 00000000 ____D C:\Users\Lasko\AppData\Local\ashampoo 2013-09-11 14:19 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-11 14:19 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-11 14:19 - 2013-08-10 05:59 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-09-11 14:19 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-09-11 14:19 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-11 14:19 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-09-11 14:18 - 2013-09-11 14:18 - 00278934 _____ C:\Windows\msxml4-KB954430-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00289664 _____ C:\Windows\msxml4-KB973688-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00000000 ____D C:\Program Files\MSXML 4.0 2013-09-11 14:15 - 2013-08-08 03:03 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-09-11 14:15 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2013-09-11 14:15 - 2013-08-02 03:49 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2013-09-11 14:15 - 2013-08-02 03:49 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2013-09-11 14:15 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-09-11 14:15 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-09-11 14:15 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2013-09-10 19:23 - 2013-09-10 19:23 - 00002175 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Google 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Program Files\Google 2013-09-10 17:25 - 2013-09-10 17:25 - 00001921 _____ C:\Users\Lasko\Desktop\SpeedCommander - Verknüpfung.lnk 2013-09-10 14:49 - 2013-09-10 14:49 - 00000000 ____D C:\Users\Lasko\Documents\Updater 2013-09-10 14:22 - 2013-09-10 14:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nero 2013-09-10 14:16 - 2013-09-11 17:04 - 00000000 ____D C:\ProgramData\Nero 2013-09-10 14:16 - 2013-09-11 17:04 - 00000000 ____D C:\Program Files\Common Files\Nero 2013-09-10 14:16 - 2013-09-10 14:16 - 00002696 _____ C:\Users\Public\Desktop\Nero StartSmart.lnk 2013-09-10 11:27 - 2013-09-10 11:27 - 00002077 _____ C:\Users\Public\Desktop\StarMoney 9.0 S-Edition.lnk 2013-09-10 11:27 - 2013-09-10 11:27 - 00000000 ____D C:\ProgramData\StarMoney 9.0 2013-09-10 11:24 - 2013-09-19 15:42 - 00000000 ____D C:\Program Files\StarMoney 9.0 S-Edition 2013-09-10 10:43 - 2013-09-10 10:44 - 00000000 ____D C:\Users\Lasko\Scan 2013-09-10 10:12 - 2013-09-10 10:12 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Brother 2013-09-10 10:05 - 2013-09-10 10:05 - 00000425 _____ C:\Windows\BRWMARK.INI 2013-09-10 10:05 - 2013-09-10 10:05 - 00000027 _____ C:\Windows\BRPP2KA.INI 2013-09-10 10:04 - 2013-09-10 10:04 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\InstallShield 2013-09-10 10:04 - 2008-06-17 15:33 - 00167936 ____N (brother) C:\Windows\system32\NSSearch.dll 2013-09-10 10:04 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2.dll 2013-09-10 10:04 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2L.dll 2013-09-10 10:04 - 2007-12-13 22:16 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2S.dll 2013-09-10 10:04 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\system32\BroSNMP.dll 2013-09-10 09:50 - 2005-12-09 04:52 - 00000060 ____R C:\Program Files\BRINST.INI 2013-09-10 08:53 - 1998-11-23 12:53 - 00304128 _____ (InstallShield Corporation, Inc.) C:\Windows\unin0407.exe 2013-09-09 20:23 - 2013-09-09 20:23 - 00054784 _____ (Macrovision) C:\Windows\system32\Drivers\CDAC11BA.EXE 2013-09-09 20:23 - 2013-09-09 20:23 - 00012464 _____ (Macrovision Europe Ltd) C:\Windows\system32\Drivers\CDAC15BA.SYS 2013-09-09 20:23 - 2013-09-09 20:23 - 00000000 ____D C:\Program Files\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00002071 _____ C:\Users\Public\Desktop\AutoCAD 2004 Deu.lnk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Windows\system32\1031 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Users\Lasko\AppData\Local\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Microsoft Office 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\AnswerWorks 4.0 2013-09-09 20:21 - 2013-09-09 20:26 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Autodesk 2013-09-09 20:21 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2013-09-09 20:21 - 2013-09-09 20:21 - 00000000 ____D C:\ProgramData\Autodesk 2013-09-09 18:36 - 2013-09-09 18:36 - 00002675 _____ C:\Users\Lasko\Desktop\Microsoft Word.lnk 2013-09-09 18:34 - 2013-09-18 15:01 - 00000494 _____ C:\Windows\ODBC.INI 2013-09-09 18:33 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Common Files\Designer 2013-09-09 18:33 - 2013-09-09 18:33 - 00002715 _____ C:\Users\Lasko\Desktop\Microsoft Excel.lnk 2013-09-09 18:21 - 2013-09-18 14:05 - 00000000 ___RD C:\Users\Lasko\Virtual Machines 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-TW 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-CN 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\th-TH 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\sv-SE 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ru-RU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-PT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-BR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pl-PL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nl-NL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nb-NO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ko-KR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ja-JP 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\it-IT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\hu-HU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\he-IL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fr-FR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fi-FI 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\el-GR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Program Files\Windows Virtual PC 2013-09-09 18:07 - 2010-11-20 14:30 - 00296064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcvmm.sys 2013-09-09 18:07 - 2010-11-20 14:30 - 00172416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpchbus.sys 2013-09-09 18:07 - 2010-11-20 14:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\vpchbuspipe.dll 2013-09-09 18:07 - 2010-11-20 14:17 - 02171392 _____ (Microsoft Corporation) C:\Windows\system32\VPCWizard.exe 2013-09-09 18:07 - 2010-11-20 14:17 - 01260032 _____ (Microsoft Corporation) C:\Windows\system32\VPCSettings.exe 2013-09-09 18:07 - 2010-11-20 12:50 - 00559616 _____ (Microsoft Corporation) C:\Windows\system32\VMCPropertyHandler.dll 2013-09-09 18:07 - 2010-11-20 12:50 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcusb.sys 2013-09-09 18:07 - 2010-11-20 12:50 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcnfltr.sys 2013-09-09 18:06 - 2010-11-20 14:17 - 03330560 _____ (Microsoft Corporation) C:\Windows\system32\vpc.exe 2013-09-09 18:06 - 2010-11-20 12:52 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\VMWindow.exe 2013-09-09 18:06 - 2010-11-20 12:52 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\vmsal.exe 2013-09-09 16:49 - 2013-09-10 10:05 - 00000050 _____ C:\Windows\system32\bridf08a.dat 2013-09-09 16:48 - 2013-09-10 10:05 - 00000000 ____D C:\Program Files\Brother 2013-09-09 16:48 - 2009-07-21 15:31 - 01534464 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWia09b.dll 2013-09-09 16:48 - 2009-02-24 10:37 - 00053760 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrUsi09a.dll 2013-09-09 16:46 - 2013-09-09 16:46 - 00000000 ____D C:\ProgramData\Brother 2013-09-09 16:39 - 2013-09-17 12:41 - 00000000 ____D C:\Users\Lasko\Downloads\Brother-DCP-6690CW 2013-09-09 16:17 - 2013-09-17 18:28 - 00001053 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk 2013-09-09 16:17 - 2013-09-09 16:17 - 00000000 ____D C:\Program Files\TeamViewer 2013-09-09 11:01 - 2013-09-13 17:20 - 00000000 ____D C:\Users\Lasko\ZIP 2013-09-09 10:57 - 2013-09-09 10:57 - 00000821 _____ C:\Users\Lasko\Desktop\7-Zip File Manager.lnk 2013-09-09 10:56 - 2013-09-09 10:57 - 00000000 ____D C:\Users\Lasko\7-Zip 2013-09-09 08:58 - 2013-09-13 17:11 - 00000000 ____D C:\Users\Lasko\Downloads\WindowsXP-Mode 2013-09-08 17:04 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\IrfanView 2013-09-08 17:04 - 2013-09-08 17:04 - 00000967 _____ C:\Users\Public\Desktop\IrfanView.lnk 2013-09-08 16:56 - 2013-09-08 16:57 - 00000000 ____D C:\Users\Lasko\Downloads\Bildbetrachter 2013-09-08 16:49 - 2013-09-08 16:49 - 00000972 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-09-08 16:08 - 2012-01-09 18:59 - 00468272 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys 2013-09-08 16:08 - 2012-01-09 18:59 - 00133208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys 2013-09-08 16:08 - 2012-01-09 18:59 - 00011352 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl2.sys 2013-09-08 15:57 - 2013-09-17 13:05 - 00415928 _____ C:\Windows\system32\Drivers\vsconfig.xml 2013-09-08 15:56 - 2013-09-18 13:19 - 00000000 ____D C:\Program Files\CheckPoint 2013-09-08 15:35 - 2013-09-08 15:35 - 96566691 _____ C:\Windows\system32\ŝ듮ᩌd 2013-09-08 15:13 - 2013-09-17 12:43 - 00000000 ____D C:\ProgramData\FLEXnet 2013-09-08 15:13 - 2013-09-13 14:35 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2013-09-08 15:13 - 2013-09-08 15:13 - 00000000 ____D C:\Users\Lasko\Documents\Updater5 2013-09-08 15:11 - 2013-09-17 13:06 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-09-08 15:11 - 2013-09-17 13:04 - 00000000 ____D C:\Program Files\Adobe 2013-09-08 15:11 - 2013-09-17 12:20 - 00000000 ____D C:\ProgramData\Adobe 2013-09-08 14:43 - 2013-09-08 14:43 - 00000000 ____D C:\Users\Lasko\Documents\Steuer-Sparbuch 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Buhl Data Service 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl Data Service 2013-09-08 14:38 - 2013-09-08 14:43 - 00000670 _____ C:\Windows\wiso.ini 2013-09-08 14:38 - 2013-09-08 14:38 - 00001812 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2013.lnk 2013-09-08 14:38 - 2013-09-08 14:38 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl 2013-09-08 14:34 - 2013-09-08 14:39 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH 2013-09-08 13:01 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-09-08 13:01 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-09-08 13:01 - 2010-09-30 08:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-09-08 12:59 - 2013-09-11 14:17 - 00000000 ____D C:\Windows\system32\MRT 2013-09-08 12:59 - 2013-09-11 14:16 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-09-08 12:56 - 2012-03-01 07:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2013-09-08 12:56 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-09-08 12:56 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2013-09-08 12:56 - 2010-02-11 09:10 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2013-09-08 12:17 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-09-08 11:46 - 2013-09-08 11:46 - 00001914 _____ C:\Users\Public\Desktop\Secure Eraser.lnk 2013-09-08 11:46 - 2013-09-08 11:46 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\ASCOMP Software 2013-09-08 11:44 - 2013-09-08 11:44 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\HomeTab 2013-09-08 11:44 - 2013-08-13 08:38 - 00032328 _____ C:\Windows\Launcher.exe 2013-09-08 11:42 - 2013-09-08 11:46 - 00000000 ____D C:\Users\Lasko\AppData\Local\DownloadGuide 2013-09-08 11:41 - 2013-09-13 17:11 - 00000000 ____D C:\Users\Lasko\Downloads\SecureEraser 2013-09-08 11:24 - 2013-09-18 10:28 - 00000000 ____D C:\Users\Lasko\Downloads\CCleaner 2013-09-08 10:31 - 2013-09-08 10:31 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-09-08 10:31 - 2013-09-08 10:31 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-09-08 10:31 - 2013-09-08 10:31 - 00745472 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00719360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00629248 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-09-08 10:31 - 2013-09-08 10:31 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00242200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-09-08 10:31 - 2013-09-08 10:31 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-09-08 10:30 - 2013-09-08 10:30 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2013-09-08 10:29 - 2013-09-08 10:29 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-09-08 10:28 - 2013-09-08 10:33 - 00013972 _____ C:\Windows\IE10_main.log 2013-09-08 10:28 - 2013-09-08 10:28 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-09-08 10:11 - 2013-09-20 09:37 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Ditto 2013-09-08 10:00 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-09-08 10:00 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-09-08 10:00 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-09-08 10:00 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-09-08 10:00 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-09-08 10:00 - 2013-04-12 15:45 - 01211752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2013-09-08 09:59 - 2013-02-12 05:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2013-09-08 09:59 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2013-09-08 09:59 - 2011-04-29 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2013-09-08 09:59 - 2011-04-29 04:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2013-09-08 09:59 - 2011-04-29 04:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2013-09-08 09:59 - 2011-04-25 04:18 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-09-08 09:59 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2013-09-08 09:59 - 2011-03-03 07:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2013-09-08 09:59 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2013-09-08 09:58 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-09-08 09:58 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-09-08 09:58 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-09-08 09:58 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2013-09-08 09:58 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2013-09-08 09:58 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2013-09-08 09:58 - 2013-03-19 06:48 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2013-09-08 09:58 - 2013-03-19 04:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2013-09-08 09:58 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-09-08 09:58 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2013-09-08 09:58 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-09-08 09:58 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2013-09-08 09:58 - 2012-06-06 07:05 - 01236992 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2013-09-08 09:58 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2013-09-08 09:58 - 2012-06-02 06:45 - 00134000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-09-08 09:58 - 2012-06-02 06:45 - 00067440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-09-08 09:58 - 2012-06-02 06:40 - 00369336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-09-08 09:58 - 2012-06-02 06:40 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-09-08 09:58 - 2012-04-28 05:17 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2013-09-08 09:58 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2013-09-08 09:58 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2013-09-08 09:58 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2013-09-08 09:58 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2013-09-08 09:58 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2013-09-08 09:58 - 2011-07-09 04:30 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2013-09-08 09:58 - 2011-05-24 12:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2013-09-08 09:58 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2013-09-08 09:58 - 2011-04-27 04:17 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2013-09-08 09:58 - 2011-04-27 04:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2013-09-08 09:58 - 2010-06-26 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2013-09-08 09:57 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-09-08 09:57 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-09-08 09:57 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-09-08 09:57 - 2013-04-10 07:18 - 00728424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-09-08 09:57 - 2013-04-10 07:18 - 00218984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2013-09-08 09:57 - 2013-01-03 07:04 - 00187752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2013-09-08 09:57 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-09-08 09:57 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2013-09-08 09:57 - 2012-08-22 19:16 - 00240496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2013-09-08 09:57 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2013-09-08 09:57 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2013-09-08 09:57 - 2012-07-04 23:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2013-09-08 09:57 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2013-09-08 09:57 - 2012-05-14 06:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2013-09-08 09:57 - 2012-04-26 06:45 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2013-09-08 09:57 - 2012-04-26 06:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2013-09-08 09:57 - 2012-04-26 06:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2013-09-08 09:57 - 2012-03-17 09:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2013-09-08 09:57 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2013-09-08 09:57 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2013-09-08 09:57 - 2011-11-17 07:34 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-09-08 09:57 - 2011-11-17 07:34 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-09-08 09:57 - 2011-11-17 07:34 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-09-08 09:57 - 2011-11-17 07:32 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-09-08 09:57 - 2011-11-17 07:29 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-09-08 09:57 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2013-09-08 09:57 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2013-09-08 09:57 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2013-09-08 09:57 - 2011-02-12 07:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2013-09-08 09:57 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2013-09-08 09:57 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2013-09-08 09:57 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2013-09-08 09:56 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-09-08 09:56 - 2013-06-15 05:40 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2013-09-08 09:56 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-09-08 09:56 - 2013-02-27 07:05 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2013-09-08 09:56 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-09-08 09:56 - 2013-02-27 06:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2013-09-08 09:56 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2013-09-08 09:56 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2013-09-08 09:56 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2013-09-08 09:56 - 2011-02-23 06:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2013-09-08 09:38 - 2013-09-08 09:38 - 00000000 ____D C:\Users\Lasko\Downloads\SpeedProject 2013-09-08 00:41 - 2013-09-08 00:41 - 00000000 ____D C:\Hotfix 2013-09-08 00:41 - 2013-09-07 14:49 - 00000000 ____D C:\Windows\Panther 2013-09-08 00:41 - 2011-02-16 03:57 - 00000025 ___RH C:\Windows\version 2013-09-08 00:41 - 2011-02-16 03:57 - 00000013 ____R C:\Windows\csup.txt 2013-09-08 00:40 - 2013-09-17 13:25 - 00000000 ____D C:\Windows\system32\Drivers\de-DE 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\XPSViewer 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\de 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\0407 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\de-DE 2013-09-07 18:21 - 2013-09-19 14:56 - 00000000 ____D C:\Users\Lasko\Downloads\KeePass 2013-09-07 18:20 - 2013-09-18 10:46 - 00000000 ____D C:\Users\Lasko\Programme 2013-09-07 17:38 - 2013-09-20 09:38 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\KeePass 2013-09-07 17:30 - 2013-09-07 17:40 - 00000000 ____D C:\Program Files\KeePass Password Safe 2 2013-09-07 17:30 - 2013-09-07 17:30 - 00001068 _____ C:\Users\Lasko\Desktop\KeePass 2.lnk 2013-09-07 17:10 - 2013-09-07 17:10 - 00002077 _____ C:\Users\Public\Desktop\StarMoney 8.0 S-Edition.lnk 2013-09-07 17:10 - 2013-09-07 17:10 - 00000000 ____D C:\ProgramData\StarMoney 8.0 2013-09-07 17:08 - 2013-09-19 09:42 - 00000000 ____D C:\Program Files\StarMoney 8.0 S-Edition 2013-09-07 17:08 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\Common Files\StarFinanz 2013-09-07 17:08 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\Business Objects 2013-09-07 17:07 - 2013-09-10 12:15 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-09-07 17:01 - 2013-09-07 16:57 - 00002629 _____ C:\Users\Public\Desktop\Corel PHOTO-PAINT X6.lnk 2013-09-07 17:01 - 2013-09-07 16:57 - 00002613 _____ C:\Users\Public\Desktop\CorelDRAW X6.lnk 2013-09-07 17:00 - 2013-09-07 17:00 - 00000000 ____D C:\Program Files\Common Files\Protexis 2013-09-07 16:57 - 2013-09-07 16:57 - 00000000 ____D C:\Users\Public\Documents\Corel 2013-09-07 16:46 - 2013-09-18 09:46 - 00127328 _____ C:\Users\Lasko\AppData\Local\GDIPFONTCACHEV1.DAT 2013-09-07 16:43 - 2013-09-07 16:46 - 00000000 ____D C:\ProgramData\Protexis 2013-09-07 16:43 - 2013-09-07 16:44 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Corel 2013-09-07 16:39 - 2013-09-07 18:27 - 00000000 ____D C:\Users\Lasko\Documents\Corel 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\Documents\Visual Studio 2008 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Microsoft Help 2013-09-07 16:38 - 2013-09-12 17:10 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-09-07 16:38 - 2013-09-07 17:00 - 00000000 ____D C:\ProgramData\Corel 2013-09-07 16:38 - 2013-09-07 16:40 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft SDKs 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Common Files\Corel 2013-09-07 16:35 - 2013-09-07 16:35 - 00000000 ____D C:\Program Files\Corel 2013-09-07 16:31 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-09-07 16:29 - 2013-09-07 17:01 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X6 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Macromedia 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Macromedia 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\ProgramData\APN 2013-09-07 16:10 - 2013-09-07 16:10 - 00002032 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Local\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-09-07 16:07 - 2013-09-07 16:08 - 19681592 _____ (Mozilla) C:\Users\Lasko\Downloads\Thunderbird Setup 17.0.8.exe 2013-09-07 16:03 - 2013-09-17 12:41 - 00000000 ____D C:\ProgramData\Avira 2013-09-07 15:58 - 2013-09-20 09:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-07 15:58 - 2013-09-13 12:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-09-07 15:58 - 2013-09-13 12:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-09-07 15:58 - 2013-09-07 15:58 - 00000000 ____D C:\Windows\system32\Macromed 2013-09-07 15:26 - 2013-09-07 15:27 - 00000000 ____D C:\Program Files\Windows XP Mode 2013-09-07 15:06 - 2013-08-07 04:22 - 00238872 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-09-07 15:00 - 2012-04-11 18:30 - 00543336 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys 2013-09-07 15:00 - 2012-04-11 18:30 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll 2013-09-07 15:00 - 2012-04-11 18:30 - 00080488 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll 2013-09-07 14:57 - 2013-09-18 10:50 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-07 14:57 - 2013-09-07 16:21 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-09-07 14:57 - 2013-09-07 14:57 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ___HD C:\ProgramData\CanonBJ 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Local\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-07 14:53 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2013-09-07 14:53 - 2012-02-17 06:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2013-09-07 14:53 - 2006-09-12 20:00 - 00197632 _____ (CANON INC.) C:\Windows\system32\CNMLM86.DLL 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\MSDOS.SYS 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\IO.SYS 2013-09-07 14:50 - 2013-09-07 14:50 - 00001409 _____ C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-09-07 14:50 - 2012-06-03 00:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2013-09-07 14:50 - 2012-06-03 00:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2013-09-07 14:50 - 2012-06-03 00:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2013-09-07 14:50 - 2012-06-03 00:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2013-09-07 14:50 - 2012-06-03 00:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2013-09-07 14:50 - 2012-06-03 00:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2013-09-07 14:50 - 2012-06-03 00:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2013-09-07 14:50 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2013-09-07 14:50 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2013-09-07 14:49 - 2013-09-20 10:10 - 00000000 ____D C:\Users\Lasko 2013-09-07 14:49 - 2013-09-20 09:53 - 01194924 _____ C:\Windows\WindowsUpdate.log 2013-09-07 14:49 - 2013-09-18 15:04 - 00000000 ____D C:\Users\Lasko\AppData\Local\VirtualStore 2013-09-07 14:49 - 2013-09-07 14:49 - 00000020 ___SH C:\Users\Lasko\ntuser.ini 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 __SHD C:\Recovery 2013-09-07 14:49 - 2009-07-14 06:42 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-09-07 14:49 - 2009-07-14 06:37 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\system32\atiicdxx.dat 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-09-07 14:43 - 2013-09-07 14:45 - 00001355 _____ C:\Windows\TSSysprep.log 2013-09-07 14:43 - 2013-09-07 14:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf ==================== One Month Modified Files and Folders ======= 2013-09-20 10:21 - 2013-09-20 10:21 - 00000000 ____D C:\FRST 2013-09-20 10:19 - 2013-09-20 10:18 - 01083549 _____ (Farbar) C:\Users\Lasko\Desktop\FRST.exe 2013-09-20 10:14 - 2013-09-20 10:14 - 00001338 _____ C:\Users\Lasko\Desktop\Defogger - Verknüpfung.lnk 2013-09-20 10:10 - 2013-09-20 10:10 - 00000000 _____ C:\Users\Lasko\defogger_reenable 2013-09-20 10:10 - 2013-09-07 14:49 - 00000000 ____D C:\Users\Lasko 2013-09-20 09:53 - 2013-09-07 14:49 - 01194924 _____ C:\Windows\WindowsUpdate.log 2013-09-20 09:45 - 2013-09-07 15:58 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-20 09:38 - 2013-09-07 17:38 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\KeePass 2013-09-20 09:37 - 2013-09-08 10:11 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Ditto 2013-09-20 08:47 - 2009-07-14 06:34 - 00025648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-20 08:47 - 2009-07-14 06:34 - 00025648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-20 08:44 - 2010-11-20 23:01 - 01673206 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-20 08:40 - 2013-09-20 08:40 - 98443620 _____ C:\Windows\system32\〰᭔` 2013-09-20 08:39 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-20 08:39 - 2009-07-14 06:39 - 00031478 _____ C:\Windows\setupact.log 2013-09-19 16:44 - 2013-09-18 09:05 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro PDF 2013-09-19 15:42 - 2013-09-10 11:24 - 00000000 ____D C:\Program Files\StarMoney 9.0 S-Edition 2013-09-19 14:56 - 2013-09-07 18:21 - 00000000 ____D C:\Users\Lasko\Downloads\KeePass 2013-09-19 14:04 - 2013-09-19 14:02 - 00000000 ____D C:\Users\Lasko\Downloads\Trojaner-Board 2013-09-19 13:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache 2013-09-19 12:39 - 2013-09-19 12:39 - 00020684 _____ C:\CMDTEMP.dxf 2013-09-19 12:34 - 2013-09-18 15:04 - 00000000 ____D C:\Users\Lasko\SIBBW 2013-09-19 11:32 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-09-19 09:42 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\StarMoney 8.0 S-Edition 2013-09-18 17:35 - 2010-11-21 02:46 - 00000000 ____D C:\Windows\ShellNew 2013-09-18 17:35 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Microsoft Games 2013-09-18 17:35 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker 2013-09-18 17:35 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-09-18 15:08 - 2013-09-18 15:06 - 00000000 ____D C:\SIB-Bilder 2013-09-18 15:05 - 2013-09-18 15:05 - 00000000 ____D C:\Users\Lasko\Documents\SIBBW 2013-09-18 15:04 - 2013-09-07 14:49 - 00000000 ____D C:\Users\Lasko\AppData\Local\VirtualStore 2013-09-18 15:03 - 2013-09-18 15:00 - 00000000 ____D C:\Program Files\BAUWERKE 2013-09-18 15:02 - 2013-09-18 15:01 - 00009917 _____ C:\Windows\aksdrvsetup.log 2013-09-18 15:01 - 2013-09-18 15:01 - 00001885 _____ C:\Users\Public\Desktop\Bauwerke 1.8 (MSDE).lnk 2013-09-18 15:01 - 2013-09-18 15:01 - 00000167 _____ C:\Windows\ODBCINST.INI 2013-09-18 15:01 - 2013-09-18 15:01 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard 2013-09-18 15:01 - 2013-09-09 18:34 - 00000494 _____ C:\Windows\ODBC.INI 2013-09-18 15:00 - 2013-09-18 15:00 - 00000000 ____D C:\Windows\system32\Help 2013-09-18 15:00 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-09-18 14:59 - 2013-09-18 14:59 - 15651522 _____ C:\Users\Lasko\Downloads\sib_bauwerke_18_sp23_msde_update.exe 2013-09-18 14:58 - 2013-09-18 14:58 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autostart 2013-09-18 14:56 - 2013-09-18 14:56 - 00212992 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\MSSQL$SIBBAUWERKE 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\SafeNet Sentinel 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\Aladdin Shared 2013-09-18 14:05 - 2013-09-09 18:21 - 00000000 ___RD C:\Users\Lasko\Virtual Machines 2013-09-18 13:19 - 2013-09-08 15:56 - 00000000 ____D C:\Program Files\CheckPoint 2013-09-18 12:22 - 2010-11-20 23:48 - 00336622 _____ C:\Windows\PFRO.log 2013-09-18 12:10 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Globalization 2013-09-18 10:50 - 2013-09-07 14:57 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Adobe 2013-09-18 10:46 - 2013-09-07 18:20 - 00000000 ____D C:\Users\Lasko\Programme 2013-09-18 10:42 - 2013-09-18 10:42 - 00000000 ____D C:\Users\Lasko\Downloads\Unlocker 2013-09-18 10:28 - 2013-09-08 11:24 - 00000000 ____D C:\Users\Lasko\Downloads\CCleaner 2013-09-18 09:46 - 2013-09-07 16:46 - 00127328 _____ C:\Users\Lasko\AppData\Local\GDIPFONTCACHEV1.DAT 2013-09-17 18:39 - 2013-09-17 18:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00001925 _____ C:\Users\Public\Desktop\Nitro Pro 8.lnk 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\ProgramData\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Common Files\Nitro 2013-09-17 18:37 - 2013-09-17 18:37 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Downloaded Installations 2013-09-17 18:37 - 2013-09-17 18:29 - 00000000 ____D C:\Users\Lasko\Downloads\Nitro.Pro.Enterprise.v 8.5.3.14.x86 2013-09-17 18:28 - 2013-09-09 16:17 - 00001053 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk 2013-09-17 13:45 - 2013-09-15 13:45 - 00000000 ____D C:\Users\Lasko\Documents\PersBackup 2013-09-17 13:26 - 2009-07-14 06:33 - 00492728 _____ C:\Windows\system32\FNTCACHE.DAT 2013-09-17 13:25 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\Drivers\de-DE 2013-09-17 13:06 - 2013-09-08 15:11 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-09-17 13:05 - 2013-09-08 15:57 - 00415928 _____ C:\Windows\system32\Drivers\vsconfig.xml 2013-09-17 13:04 - 2013-09-08 15:11 - 00000000 ____D C:\Program Files\Adobe 2013-09-17 12:44 - 2013-09-17 12:44 - 00000000 ____D C:\Users\Lasko\Documents\ForceField Shared Files 2013-09-17 12:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp 2013-09-17 12:43 - 2013-09-14 16:16 - 00000000 ____D C:\Users\Lasko\Downloads\Update-Checker(Filehippo) 2013-09-17 12:43 - 2013-09-13 15:15 - 00000000 ____D C:\Users\Lasko\Avira 2013-09-17 12:43 - 2013-09-11 16:27 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\PersBackup5 2013-09-17 12:43 - 2013-09-08 17:04 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\IrfanView 2013-09-17 12:43 - 2013-09-08 15:13 - 00000000 ____D C:\ProgramData\FLEXnet 2013-09-17 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF 2013-09-17 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration 2013-09-17 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat 2013-09-17 12:41 - 2013-09-13 15:25 - 00000000 ____D C:\Program Files\Avira 2013-09-17 12:41 - 2013-09-09 16:39 - 00000000 ____D C:\Users\Lasko\Downloads\Brother-DCP-6690CW 2013-09-17 12:41 - 2013-09-07 16:03 - 00000000 ____D C:\ProgramData\Avira 2013-09-17 12:20 - 2013-09-08 15:11 - 00000000 ____D C:\ProgramData\Adobe 2013-09-17 09:12 - 2013-09-17 09:12 - 00000000 ____D C:\Users\Lasko\Downloads\ASUS-Treiber 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\Program Files\AskPartnerNetwork 2013-09-17 09:01 - 2013-09-17 09:01 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Avira 2013-09-16 13:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\LiveKernelReports 2013-09-15 19:45 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles 2013-09-15 13:09 - 2013-09-15 12:54 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Systweak 2013-09-15 13:05 - 2009-07-14 04:03 - 49283072 _____ C:\Windows\system32\config\SOFTWARE.bak 2013-09-15 13:05 - 2009-07-14 04:03 - 13369344 _____ C:\Windows\system32\config\SYSTEM.bak 2013-09-15 13:05 - 2009-07-14 04:03 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak 2013-09-15 13:02 - 2009-07-14 04:03 - 00262144 _____ C:\Windows\system32\config\SAM.bak 2013-09-15 13:01 - 2013-09-15 13:01 - 00000000 ____D C:\Windows\system32\config\RCCBakup 2013-09-14 13:59 - 2013-09-14 13:59 - 00000000 ____D C:\Users\Lasko\Word 2013-09-14 11:46 - 2013-09-14 11:46 - 00000000 ____D C:\SoloApp 2013-09-14 11:12 - 2013-09-14 11:12 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-09-14 11:09 - 2013-09-13 15:26 - 00002017 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-09-14 11:07 - 2013-09-13 15:26 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00113024 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00092448 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys 2013-09-13 17:20 - 2013-09-09 11:01 - 00000000 ____D C:\Users\Lasko\ZIP 2013-09-13 17:11 - 2013-09-12 11:18 - 00000000 ____D C:\Users\Lasko\Downloads\Malwarebytes 2013-09-13 17:11 - 2013-09-11 16:50 - 00000000 ____D C:\Users\Lasko\Downloads\CD-DVD-Brenner 2013-09-13 17:11 - 2013-09-09 08:58 - 00000000 ____D C:\Users\Lasko\Downloads\WindowsXP-Mode 2013-09-13 17:11 - 2013-09-08 11:41 - 00000000 ____D C:\Users\Lasko\Downloads\SecureEraser 2013-09-13 14:35 - 2013-09-08 15:13 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2013-09-13 12:41 - 2013-09-12 17:36 - 00000000 ____D C:\Users\Lasko\Downloads\AdobeFlashPlayer 2013-09-13 12:41 - 2013-09-07 15:58 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-09-13 12:41 - 2013-09-07 15:58 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-09-12 17:10 - 2013-09-12 17:10 - 00002703 _____ C:\Users\Lasko\Desktop\Microsoft Office Project 2007.lnk 2013-09-12 17:10 - 2013-09-07 16:38 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Windows\PCHEALTH 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Program Files\Microsoft Works 2013-09-12 17:07 - 2013-09-12 17:07 - 00000000 __RHD C:\MSOCache 2013-09-12 11:23 - 2013-09-12 11:23 - 00001074 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Malwarebytes 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-12 10:22 - 2013-09-12 10:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Virtual PC 2013-09-11 17:08 - 2013-09-11 17:08 - 00002675 _____ C:\Users\Lasko\Desktop\Nero CoverDesigner.lnk 2013-09-11 17:08 - 2013-09-11 17:08 - 00000000 ____D C:\Users\Lasko\Documents\Nero 2013-09-11 17:04 - 2013-09-10 14:16 - 00000000 ____D C:\ProgramData\Nero 2013-09-11 17:04 - 2013-09-10 14:16 - 00000000 ____D C:\Program Files\Common Files\Nero 2013-09-11 16:27 - 2013-09-11 16:27 - 00001045 _____ C:\Users\Public\Desktop\Personal Backup 5.lnk 2013-09-11 14:55 - 2013-09-11 14:55 - 00000000 ____D C:\Users\Lasko\Documents\default 2013-09-11 14:50 - 2013-09-11 14:50 - 00000000 ____D C:\Users\Lasko\AppData\Local\ashampoo 2013-09-11 14:18 - 2013-09-11 14:18 - 00278934 _____ C:\Windows\msxml4-KB954430-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00289664 _____ C:\Windows\msxml4-KB973688-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00000000 ____D C:\Program Files\MSXML 4.0 2013-09-11 14:17 - 2013-09-08 12:59 - 00000000 ____D C:\Windows\system32\MRT 2013-09-11 14:16 - 2013-09-08 12:59 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-09-10 19:23 - 2013-09-10 19:23 - 00002175 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Google 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Program Files\Google 2013-09-10 17:25 - 2013-09-10 17:25 - 00001921 _____ C:\Users\Lasko\Desktop\SpeedCommander - Verknüpfung.lnk 2013-09-10 14:49 - 2013-09-10 14:49 - 00000000 ____D C:\Users\Lasko\Documents\Updater 2013-09-10 14:22 - 2013-09-10 14:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nero 2013-09-10 14:16 - 2013-09-10 14:16 - 00002696 _____ C:\Users\Public\Desktop\Nero StartSmart.lnk 2013-09-10 12:15 - 2013-09-07 17:07 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-09-10 11:27 - 2013-09-10 11:27 - 00002077 _____ C:\Users\Public\Desktop\StarMoney 9.0 S-Edition.lnk 2013-09-10 11:27 - 2013-09-10 11:27 - 00000000 ____D C:\ProgramData\StarMoney 9.0 2013-09-10 11:25 - 2009-07-14 04:04 - 00017486 _____ C:\Windows\system32\Drivers\etc\services 2013-09-10 10:44 - 2013-09-10 10:43 - 00000000 ____D C:\Users\Lasko\Scan 2013-09-10 10:12 - 2013-09-10 10:12 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Brother 2013-09-10 10:05 - 2013-09-10 10:05 - 00000425 _____ C:\Windows\BRWMARK.INI 2013-09-10 10:05 - 2013-09-10 10:05 - 00000027 _____ C:\Windows\BRPP2KA.INI 2013-09-10 10:05 - 2013-09-09 16:49 - 00000050 _____ C:\Windows\system32\bridf08a.dat 2013-09-10 10:05 - 2013-09-09 16:48 - 00000000 ____D C:\Program Files\Brother 2013-09-10 10:04 - 2013-09-10 10:04 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\InstallShield 2013-09-09 20:26 - 2013-09-09 20:21 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Autodesk 2013-09-09 20:23 - 2013-09-09 20:23 - 00054784 _____ (Macrovision) C:\Windows\system32\Drivers\CDAC11BA.EXE 2013-09-09 20:23 - 2013-09-09 20:23 - 00012464 _____ (Macrovision Europe Ltd) C:\Windows\system32\Drivers\CDAC15BA.SYS 2013-09-09 20:23 - 2013-09-09 20:23 - 00000000 ____D C:\Program Files\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00002071 _____ C:\Users\Public\Desktop\AutoCAD 2004 Deu.lnk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Windows\system32\1031 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Users\Lasko\AppData\Local\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Microsoft Office 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\AnswerWorks 4.0 2013-09-09 20:22 - 2013-09-09 20:21 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2013-09-09 20:22 - 2013-09-09 18:33 - 00000000 ____D C:\Program Files\Common Files\Designer 2013-09-09 20:21 - 2013-09-09 20:21 - 00000000 ____D C:\ProgramData\Autodesk 2013-09-09 20:21 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Help 2013-09-09 18:36 - 2013-09-09 18:36 - 00002675 _____ C:\Users\Lasko\Desktop\Microsoft Word.lnk 2013-09-09 18:33 - 2013-09-09 18:33 - 00002715 _____ C:\Users\Lasko\Desktop\Microsoft Excel.lnk 2013-09-09 18:33 - 2009-07-14 04:37 - 00000000 __RSD C:\Windows\Media 2013-09-09 18:32 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-TW 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-CN 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\th-TH 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\sv-SE 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ru-RU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-PT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-BR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pl-PL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nl-NL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nb-NO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ko-KR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ja-JP 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\it-IT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\hu-HU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\he-IL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fr-FR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fi-FI 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\el-GR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Program Files\Windows Virtual PC 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-TW 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-CN 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\tr-TR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\th-TH 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\sv-SE 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ru-RU 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ro-RO 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pt-PT 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pt-BR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pl-PL 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\nl-NL 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\nb-NO 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ko-KR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ja-JP 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\it-IT 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\hu-HU 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\he-IL 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\fr-FR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\fi-FI 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\el-GR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ar-SA 2013-09-09 16:49 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\twain_32 2013-09-09 16:46 - 2013-09-09 16:46 - 00000000 ____D C:\ProgramData\Brother 2013-09-09 16:17 - 2013-09-09 16:17 - 00000000 ____D C:\Program Files\TeamViewer 2013-09-09 10:57 - 2013-09-09 10:57 - 00000821 _____ C:\Users\Lasko\Desktop\7-Zip File Manager.lnk 2013-09-09 10:57 - 2013-09-09 10:56 - 00000000 ____D C:\Users\Lasko\7-Zip 2013-09-08 17:04 - 2013-09-08 17:04 - 00000967 _____ C:\Users\Public\Desktop\IrfanView.lnk 2013-09-08 16:57 - 2013-09-08 16:56 - 00000000 ____D C:\Users\Lasko\Downloads\Bildbetrachter 2013-09-08 16:49 - 2013-09-08 16:49 - 00000972 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-09-08 15:35 - 2013-09-08 15:35 - 96566691 _____ C:\Windows\system32\ŝ듮ᩌd 2013-09-08 15:13 - 2013-09-08 15:13 - 00000000 ____D C:\Users\Lasko\Documents\Updater5 2013-09-08 14:43 - 2013-09-08 14:43 - 00000000 ____D C:\Users\Lasko\Documents\Steuer-Sparbuch 2013-09-08 14:43 - 2013-09-08 14:38 - 00000670 _____ C:\Windows\wiso.ini 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Buhl Data Service 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl Data Service 2013-09-08 14:39 - 2013-09-08 14:34 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH 2013-09-08 14:38 - 2013-09-08 14:38 - 00001812 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2013.lnk 2013-09-08 14:38 - 2013-09-08 14:38 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl 2013-09-08 13:17 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender 2013-09-08 13:17 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System 2013-09-08 11:46 - 2013-09-08 11:46 - 00001914 _____ C:\Users\Public\Desktop\Secure Eraser.lnk 2013-09-08 11:46 - 2013-09-08 11:46 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\ASCOMP Software 2013-09-08 11:46 - 2013-09-08 11:42 - 00000000 ____D C:\Users\Lasko\AppData\Local\DownloadGuide 2013-09-08 11:44 - 2013-09-08 11:44 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\HomeTab 2013-09-08 10:35 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-HK 2013-09-08 10:33 - 2013-09-08 10:28 - 00013972 _____ C:\Windows\IE10_main.log 2013-09-08 10:31 - 2013-09-08 10:31 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-09-08 10:31 - 2013-09-08 10:31 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-09-08 10:31 - 2013-09-08 10:31 - 00745472 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00719360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00629248 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-09-08 10:31 - 2013-09-08 10:31 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00242200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-09-08 10:31 - 2013-09-08 10:31 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-09-08 10:30 - 2013-09-08 10:30 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2013-09-08 10:29 - 2013-09-08 10:29 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll Ende Teil 1 |
20.09.2013, 11:24 | #4 |
| C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start FRST.txt 2. Teil Code:
ATTFilter 2013-09-08 10:29 - 2013-09-08 10:29 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-09-08 10:28 - 2013-09-08 10:28 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-09-08 09:38 - 2013-09-08 09:38 - 00000000 ____D C:\Users\Lasko\Downloads\SpeedProject 2013-09-08 00:41 - 2013-09-08 00:41 - 00000000 ____D C:\Hotfix 2013-09-08 00:41 - 2009-07-14 06:57 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG 2013-09-08 00:41 - 2009-07-14 06:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\XPSViewer 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\de 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\0407 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\de-DE 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\winrm 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\WCN 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\slmgr 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\DigitalLocker 2013-09-08 00:40 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2013-09-08 00:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-09-08 00:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\MUI 2013-09-08 00:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\com 2013-09-08 00:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\IME 2013-09-07 18:27 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\Documents\Corel 2013-09-07 17:40 - 2013-09-07 17:30 - 00000000 ____D C:\Program Files\KeePass Password Safe 2 2013-09-07 17:30 - 2013-09-07 17:30 - 00001068 _____ C:\Users\Lasko\Desktop\KeePass 2.lnk 2013-09-07 17:10 - 2013-09-07 17:10 - 00002077 _____ C:\Users\Public\Desktop\StarMoney 8.0 S-Edition.lnk 2013-09-07 17:10 - 2013-09-07 17:10 - 00000000 ____D C:\ProgramData\StarMoney 8.0 2013-09-07 17:08 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\Common Files\StarFinanz 2013-09-07 17:08 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\Business Objects 2013-09-07 17:01 - 2013-09-07 16:29 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X6 2013-09-07 17:00 - 2013-09-07 17:00 - 00000000 ____D C:\Program Files\Common Files\Protexis 2013-09-07 17:00 - 2013-09-07 16:38 - 00000000 ____D C:\ProgramData\Corel 2013-09-07 16:57 - 2013-09-07 17:01 - 00002629 _____ C:\Users\Public\Desktop\Corel PHOTO-PAINT X6.lnk 2013-09-07 16:57 - 2013-09-07 17:01 - 00002613 _____ C:\Users\Public\Desktop\CorelDRAW X6.lnk 2013-09-07 16:57 - 2013-09-07 16:57 - 00000000 ____D C:\Users\Public\Documents\Corel 2013-09-07 16:46 - 2013-09-07 16:43 - 00000000 ____D C:\ProgramData\Protexis 2013-09-07 16:44 - 2013-09-07 16:43 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Corel 2013-09-07 16:40 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\Documents\Visual Studio 2008 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Microsoft Help 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft SDKs 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Common Files\Corel 2013-09-07 16:38 - 2013-09-07 16:31 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-09-07 16:35 - 2013-09-07 16:35 - 00000000 ____D C:\Program Files\Corel 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Macromedia 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Macromedia 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\ProgramData\APN 2013-09-07 16:21 - 2013-09-07 14:57 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-09-07 16:10 - 2013-09-07 16:10 - 00002032 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Local\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-09-07 16:08 - 2013-09-07 16:07 - 19681592 _____ (Mozilla) C:\Users\Lasko\Downloads\Thunderbird Setup 17.0.8.exe 2013-09-07 15:58 - 2013-09-07 15:58 - 00000000 ____D C:\Windows\system32\Macromed 2013-09-07 15:27 - 2013-09-07 15:26 - 00000000 ____D C:\Program Files\Windows XP Mode 2013-09-07 14:57 - 2013-09-07 14:57 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ___HD C:\ProgramData\CanonBJ 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Local\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\MSDOS.SYS 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\IO.SYS 2013-09-07 14:50 - 2013-09-07 14:50 - 00001409 _____ C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-09-07 14:49 - 2013-09-08 00:41 - 00000000 ____D C:\Windows\Panther 2013-09-07 14:49 - 2013-09-07 14:49 - 00000020 ___SH C:\Users\Lasko\ntuser.ini 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 __SHD C:\Recovery 2013-09-07 14:49 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\restore 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Public\Libraries 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Default 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\Recovery 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Windows NT 2013-09-07 14:45 - 2013-09-07 14:43 - 00001355 _____ C:\Windows\TSSysprep.log 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\system32\atiicdxx.dat 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-09-07 14:43 - 2013-09-07 14:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2013-09-07 14:43 - 2010-11-21 02:46 - 00000000 ____D C:\Windows\CSC 2013-09-07 14:43 - 2009-07-14 06:34 - 00002790 _____ C:\Windows\DtcInstall.log Some content of TEMP: ==================== C:\Users\Lasko\AppData\Local\Temp\gFpbKQRLUQUJNUutUfiE.DLL C:\Users\Lasko\AppData\Local\Temp\ose00000.exe C:\Users\Lasko\AppData\Local\Temp\uninst1.exe C:\Users\Lasko\AppData\Local\Temp\xgPTqUyVXXxAVThSdGuO.DLL ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-12 13:35 ==================== End Of Log ============================ Addition.txt Teil 1 Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 19-09-2013 01 Ran by Lasko at 2013-09-20 10:22:30 Running from C:\Users\Lasko\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 7-Zip 9.20 Adobe Bridge 1.0 (Version: 001.000.001) Adobe Flash Player 11 Plugin (Version: 11.8.800.168) Advertising Center (Version: 0.0.0.2) alt-SafeCast Shared Components-alt AutoCAD 2004 (Version: 16.0.0.086) Autodesk Express Viewer (Version: 3.1) Avira Internet Security (Version: 13.0.0.4052) Brother MFL-Pro Suite DCP-6690CW (Version: 1.0.1.0) cadMANdu CCleaner (Version: 4.05) Corel Graphics - Windows Shell Extension (Version: 16.1.0.843) Corel Graphics - Windows Shell Extension (Version: 16.1.843) CorelDRAW Graphics Suite X6 - Capture (Version: 16.1) CorelDRAW Graphics Suite X6 - Common (Version: 16.1) CorelDRAW Graphics Suite X6 - Connect (Version: 16.1) CorelDRAW Graphics Suite X6 - Custom Data (Version: 16.1) CorelDRAW Graphics Suite X6 - DE (Version: 16.1) CorelDRAW Graphics Suite X6 - Draw (Version: 16.1) CorelDRAW Graphics Suite X6 - Filters (Version: 16.1) CorelDRAW Graphics Suite X6 - FontNav (Version: 16.1) CorelDRAW Graphics Suite X6 - IPM (Version: 16.1) CorelDRAW Graphics Suite X6 - PHOTO-PAINT (Version: 16.1) CorelDRAW Graphics Suite X6 - Photozoom Plugin (Version: 16.1) CorelDRAW Graphics Suite X6 - Redist (Version: 16.1) CorelDRAW Graphics Suite X6 - Setup Files (Version: 16.1) CorelDRAW Graphics Suite X6 - VBA (Version: 16.1) CorelDRAW Graphics Suite X6 - VideoBrowser (Version: 16.1) CorelDRAW Graphics Suite X6 - VSTA (Version: 16.1) CorelDRAW Graphics Suite X6 - Writing Tools (Version: 16.1) CorelDRAW Graphics Suite X6 (Version: 16.1) CorelDRAW Graphics Suite X6 (Version: 16.1.0.843) Ditto Google Earth (Version: 7.1.1.1888) Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (Version: 1) IrfanView (remove only) (Version: 4.36) KeePass Password Safe 2.23 Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft Office 2000 Premium (Version: 9.00.2816) Microsoft Office Project MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Project Professional 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (Italian) 2007 (Version: 12.0.4518.1014) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft SQL Server Desktop Engine (SIBBauwerke) (Version: 8.00.2039) Microsoft Visual Basic for Applications 7.1 (x86) (Version: 7.1.00.00) Microsoft Visual Basic for Applications 7.1 (x86) German (Version: 7.1.0.0) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual Studio Tools for Applications 2.0 - ENU (Version: 9.0.30729) Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (Version: 9.0.30729) Microsoft Visual Studio Tools for Applications 2.0 Runtime (Version: 9.0.30729) Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (Version: 9.0.30729) Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1) Mozilla Maintenance Service (Version: 17.0.8) Mozilla Thunderbird 17.0.8 (x86 de) (Version: 17.0.8) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) Nero 9 Lite Nero ControlCenter (Version: 11.0.16500) Nero ControlCenter (Version: 9.0.0.1) Nero Core Components (Version: 11.0.20200) Nero CoverDesigner (Version: 12.0.01300) Nero CoverDesigner (Version: 12.0.10003) Nero CoverDesigner Help (CHM) (Version: 12.0.2000) Nero Installer (Version: 4.4.9.0) Nero Online Upgrade (Version: 1.3.0.0) Nero StartSmart (Version: 9.4.31.100) neroxml (Version: 1.0.0) Nitro Pro 8 (Version: 8.5.3.14) Personal Backup 5.4 (Version: 5.3) Prerequisite installer (Version: 12.0.0003) Secure Eraser (Version: 4.2.0.1) Sentinel HASP Run-time (Version: 5.10.1.17163) SIB-BAUWERKE V 1.8 SP2.2 StarMoney (Version: 3.0.3.19) StarMoney (Version: 4.0.0.203) StarMoney 8.0 S-Edition (Version: 8.0) StarMoney 9.0 S-Edition (Version: 9.0) TeamViewer 8 (Version: 8.0.20935) Unlocker 1.9.2 (Version: 1.9.2) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1) Windows XP Mode (Version: 1.3.7600.16422) WISO Steuer-Sparbuch 2013 (Version: 20.00.8137) ZoneAlarm Antivirus (Version: 10.2.081.000) ZoneAlarm Firewall (Version: 10.2.081.000) ZoneAlarm LTD Toolbar ZoneAlarm Security (Version: 10.2.081.000) ==================== Restore Points ========================= 18-09-2013 12:55:07 Microsoft SQL Server Desktop Engine wird installiert 18-09-2013 13:01:33 Installed Sentinel HASP Run-time 18-09-2013 15:14:16 Windows Modules Installer ==================== Hosts content: ========================== 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0D9B5D92-3A22-486D-A887-3AA21597CF27} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started Task: {2F6C5D6B-2CF3-4949-8AF4-CB141B3A8DD2} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation) Task: {3EF4B516-FE94-460E-B1EB-0FD01B39C1DF} - System32\Tasks\CCleanerSkipUAC => C:\Users\Lasko\Programme\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd) Task: {5D932FE7-AA5C-4953-BD3B-B893855AB596} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation) Task: {708E00DA-F2CF-44C8-8D96-36EEAA098C84} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files\HomeTab\ProtectedSearch.exe Task: {8CFC2B8E-1F9B-415A-B633-B9214C67A777} - System32\Tasks\Browser Updater\Browser Updater => Rundll32.exe "C:\Program Files\HomeTab\TBUpdater.dll",TBCheckForUpdate Task: {973FF924-2043-4C5D-99BB-A3FCDBA9F0AD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-13] (Adobe Systems Incorporated) Task: {F38A89BA-33F0-4877-A20F-E370C4A1A510} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2003-02-14 10:31 - 2003-02-14 10:31 - 00136352 _____ (Autodesk) C:\Windows\system32\AcSignIcon.dll 2003-02-14 10:31 - 2003-02-14 10:31 - 00223904 _____ (Autodesk) C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll 2010-11-18 18:08 - 2010-11-18 18:08 - 00055808 _____ (Igor Pavlov) C:\Users\Lasko\7-Zip\7-zip.dll 2012-10-09 14:45 - 2012-10-09 14:45 - 00010928 _____ (Zone Labs Inc.) C:\Program Files\CheckPoint\ZoneAlarm\zlavscan_Loc0407.dll 2013-09-08 11:46 - 2012-09-07 16:57 - 00452592 _____ () C:\Users\Lasko\Programme\Secure Eraser\SecEraser32.dll 2013-04-30 09:12 - 2013-04-30 09:12 - 00095752 _____ (Nitro PDF) C:\Program Files\Nitro\Pro 8\NPShellExtension.dll 2013-09-10 10:04 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll 2013-09-07 14:53 - 2006-09-12 20:10 - 01867264 _____ (CANON INC.) C:\Windows\system32\spool\DRIVERS\W32X86\3\CNMUI86.DLL 2013-09-10 10:04 - 2009-06-25 10:24 - 02028544 _____ (Brother Industries Ltd.) C:\Windows\system32\spool\DRIVERS\W32X86\3\briu08a.dll 2013-09-10 10:04 - 2009-06-25 10:24 - 00058368 _____ (Brother Industries Ltd.) C:\Windows\system32\spool\DRIVERS\W32X86\3\BRIL08A.DLL ==================== Alternate Data Streams (whitelisted) ========== ==================== Faulty Device Manager Devices ============= Name: ZoneAlarm LTD Toolbar ISWKL Description: ZoneAlarm LTD Toolbar ISWKL Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: ISWKL Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (09/20/2013 08:41:30 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2013 05:23:27 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2013 05:19:35 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2013 02:45:47 PM) (Source: Application Hang) (User: ) Description: Programm WINWORD.EXE, Version 9.0.0.2823 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: b3c Startzeit: 01ceb53600d7fd2e Endzeit: 15 Anwendungspfad: C:\Users\Lasko\Virtual Machines\Office\WINWORD.EXE Berichts-ID: 65181540-2129-11e3-8cc7-001e8c84de5c Error: (09/19/2013 09:43:44 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 05:14:18 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddWin32ServiceFiles: Unable to back up image of service ZoneAlarm LTD Toolbar IswSvc since QueryServiceConfig API failed System Error: Das System kann die angegebene Datei nicht finden. . Error: (09/18/2013 01:08:36 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 00:24:05 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 00:14:16 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 00:03:30 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (09/20/2013 08:39:46 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "ZoneAlarm LTD Toolbar ISWKL" wurde aufgrund folgenden Fehlers nicht gestartet: %%3 Error: (09/20/2013 08:39:46 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "TrueVector Internet Monitor" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (09/19/2013 05:32:37 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "ZoneAlarm LTD Toolbar ISWKL" wurde aufgrund folgenden Fehlers nicht gestartet: %%3 Error: (09/19/2013 05:32:37 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "TrueVector Internet Monitor" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (09/19/2013 05:29:53 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/19/2013 05:29:36 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/19/2013 05:26:47 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/19/2013 05:22:00 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/19/2013 05:22:00 PM) (Source: DCOM) (User: ) Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F} Error: (09/19/2013 05:22:00 PM) (Source: DCOM) (User: ) Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF} Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2013-09-17 08:53:01.979 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-16 20:15:53.172 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-16 19:20:36.719 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-16 18:20:36.892 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-16 17:58:27.913 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-16 17:44:32.827 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-16 17:32:54.430 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-16 17:18:46.623 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-16 16:57:18.198 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-16 16:17:01.131 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 40% Total physical RAM: 2047.18 MB Available physical RAM: 1219.9 MB Total Pagefile: 4094.36 MB Available Pagefile: 2957.64 MB Total Virtual: 2047.88 MB Available Virtual: 1892.24 MB ==================== Drives ================================ Drive c: (Win 7) (Fixed) (Total:119.24 GB) (Free:88.72 GB) NTFS Drive d: (Anwendungen) (Fixed) (Total:258.08 GB) (Free:168.39 GB) NTFS Drive f: (Backup) (Fixed) (Total:38.29 GB) (Free:15.93 GB) NTFS Drive h: (DATALUX) (Fixed) (Total:37.3 GB) (Free:11.41 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 1FDD0197) Partition 1: (Not Active) - (Size=119 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 4B3A4B39) Partition 1: (Active) - (Size=40 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=258 GB) - (Type=OF Extended) ======================================================== Disk: 2 (Size: 38 GB) (Disk ID: 445F68B7) Partition 1: (Not Active) - (Size=38 GB) - (Type=07 NTFS) ======================================================== Disk: 3 (MBR Code: Windows XP) (Size: 37 GB) (Disk ID: 2527A2C7) Partition 1: (Not Active) - (Size=37 GB) - (Type=0C) ==================== End Of Log ============================ Ende Addition.txt Gruß Lasko |
20.09.2013, 15:32 | #5 | |
/// the machine /// TB-Ausbilder | C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 StartCombofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
20.09.2013, 16:32 | #6 |
| C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start Hi Schrauber, vielen Dank für Deine Hilfe. Nachfolgend Conbofix.txt Code:
ATTFilter ComboFix 13-09-19.01 - HLK 20.09.2013 17:14:31.1.2 - x86 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.2047.1166 [GMT 2:00] ausgeführt von:: c:\users\HLK\Desktop\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} FW: FireWall *Disabled* {CE40CCC0-8ADB-6D67-25A0-C5B6438E4B57} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\unin0407.exe . . ((((((((((((((((((((((( Dateien erstellt von 2013-08-20 bis 2013-09-20 )))))))))))))))))))))))))))))) . . 2013-09-20 15:22 . 2013-09-20 15:22 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-09-20 14:01 . 2013-09-20 14:01 60872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{341945AA-302F-48F3-A16E-582AA4D92A2F}\offreg.dll 2013-09-20 13:57 . 2013-09-20 13:57 -------- d-----w- c:\program files\Borland 2013-09-20 08:21 . 2013-09-20 08:21 -------- d-----w- C:\FRST 2013-09-20 06:44 . 2013-09-15 22:50 7328304 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{341945AA-302F-48F3-A16E-582AA4D92A2F}\mpengine.dll 2013-09-18 13:06 . 2013-09-18 13:08 -------- d-----w- C:\SIB-Bilder 2013-09-18 13:00 . 2004-11-10 09:10 778240 ----a-w- c:\windows\system32\hasp_com_windows.dll 2013-09-18 12:56 . 2013-09-18 12:56 212992 ----a-w- c:\windows\IsUninst.exe 2013-09-18 12:55 . 2013-09-18 12:55 -------- d-sh--we c:\windows\system32\config\systemprofile\Startmenü 2013-09-18 12:55 . 2013-09-18 12:55 -------- d-sh--we c:\windows\system32\config\systemprofile\Lokale Einstellungen 2013-09-18 12:55 . 2013-09-18 12:55 -------- d-sh--we c:\windows\system32\config\systemprofile\Anwendungsdaten 2013-09-18 12:55 . 2013-09-18 12:55 -------- d-----r- c:\windows\system32\config\systemprofile\Virtual Machines 2013-09-18 12:55 . 2013-09-18 12:55 -------- d-----w- C:\MSSQL$SIBBAUWERKE 2013-09-18 12:55 . 2013-09-18 12:55 -------- d-----w- c:\program files\Microsoft SQL Server 2013-09-18 12:49 . 2013-09-18 12:49 -------- d-----w- c:\program files\Common Files\SafeNet Sentinel 2013-09-18 12:49 . 2013-09-18 12:49 -------- d-----w- c:\program files\Common Files\Aladdin Shared 2013-09-18 12:49 . 2013-08-09 07:52 4609928 ----a-w- c:\windows\system32\hasplms.exe 2013-09-17 16:39 . 2013-09-17 16:39 -------- d-----w- c:\programdata\FileOpen 2013-09-17 16:38 . 2013-04-30 07:10 18440 ----a-w- c:\windows\system32\nitrolocalui2.dll 2013-09-17 16:38 . 2013-04-30 07:10 27144 ----a-w- c:\windows\system32\nitrolocalmon2.dll 2013-09-17 16:38 . 2013-09-17 16:38 -------- d-----w- c:\programdata\Nitro 2013-09-17 16:38 . 2013-09-17 16:38 -------- d-----w- c:\program files\Nitro 2013-09-17 16:38 . 2013-09-17 16:38 -------- d-----w- c:\program files\Common Files\Nitro 2013-09-17 11:21 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2013-09-17 11:21 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys 2013-09-17 11:21 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll 2013-09-17 11:20 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll 2013-09-17 11:20 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll 2013-09-17 11:20 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys 2013-09-17 11:20 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys 2013-09-17 11:20 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe 2013-09-17 11:20 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll 2013-09-17 11:20 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll 2013-09-17 10:58 . 2011-03-11 05:39 148864 ----a-w- c:\windows\system32\drivers\storport.sys 2013-09-17 10:58 . 2011-03-11 05:39 143744 ----a-w- c:\windows\system32\drivers\nvstor.sys 2013-09-17 10:58 . 2011-03-11 05:39 117120 ----a-w- c:\windows\system32\drivers\nvraid.sys 2013-09-17 10:58 . 2011-03-11 05:38 332160 ----a-w- c:\windows\system32\drivers\iaStorV.sys 2013-09-17 10:58 . 2011-03-11 05:38 80256 ----a-w- c:\windows\system32\drivers\amdsata.sys 2013-09-17 10:58 . 2011-03-11 05:38 22400 ----a-w- c:\windows\system32\drivers\amdxata.sys 2013-09-17 10:58 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\system32\esent.dll 2013-09-17 10:58 . 2011-03-11 05:31 74240 ----a-w- c:\windows\system32\fsutil.exe 2013-09-17 10:58 . 2012-08-21 20:12 245760 ----a-w- c:\windows\system32\OxpsConverter.exe 2013-09-17 10:57 . 2011-12-30 05:27 478720 ----a-w- c:\windows\system32\timedate.cpl 2013-09-17 10:57 . 2013-03-19 04:53 186368 ----a-w- c:\windows\system32\wwansvc.dll 2013-09-17 10:57 . 2013-03-19 03:33 40960 ----a-w- c:\windows\system32\wwanprotdim.dll 2013-09-17 10:57 . 2013-05-10 03:20 24576 ----a-w- c:\windows\system32\cryptdlg.dll 2013-09-17 10:57 . 2012-10-03 16:42 52224 ----a-w- c:\windows\system32\nlaapi.dll 2013-09-17 10:57 . 2012-10-03 16:42 242176 ----a-w- c:\windows\system32\nlasvc.dll 2013-09-17 10:57 . 2012-10-03 16:42 18944 ----a-w- c:\windows\system32\netevent.dll 2013-09-17 10:57 . 2012-10-03 16:42 175104 ----a-w- c:\windows\system32\netcorehc.dll 2013-09-17 10:57 . 2012-10-03 16:42 156672 ----a-w- c:\windows\system32\ncsi.dll 2013-09-17 10:57 . 2012-10-03 16:40 499712 ----a-w- c:\windows\system32\iphlpsvc.dll 2013-09-17 10:57 . 2012-10-03 15:21 35328 ----a-w- c:\windows\system32\drivers\tcpipreg.sys 2013-09-17 10:56 . 2011-05-04 04:34 1549312 ----a-w- c:\windows\system32\tquery.dll 2013-09-17 10:56 . 2011-05-04 04:32 666624 ----a-w- c:\windows\system32\mssvp.dll 2013-09-17 10:56 . 2011-05-04 04:32 337408 ----a-w- c:\windows\system32\mssph.dll 2013-09-17 10:56 . 2011-05-04 04:32 197120 ----a-w- c:\windows\system32\mssphtb.dll 2013-09-17 10:56 . 2011-05-04 04:32 1401344 ----a-w- c:\windows\system32\mssrch.dll 2013-09-17 10:56 . 2011-05-04 04:32 59392 ----a-w- c:\windows\system32\msscntrs.dll 2013-09-17 10:56 . 2011-05-04 04:28 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe 2013-09-17 10:56 . 2011-05-04 04:28 427520 ----a-w- c:\windows\system32\SearchIndexer.exe 2013-09-17 10:56 . 2011-05-04 04:28 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe 2013-09-17 10:54 . 2012-05-01 04:44 164352 ----a-w- c:\windows\system32\profsvc.dll 2013-09-17 10:54 . 2013-08-05 01:56 133056 ----a-w- c:\windows\system32\drivers\ataport.sys 2013-09-17 10:54 . 2012-01-04 08:58 442880 ----a-w- c:\windows\system32\ntshrui.dll 2013-09-17 10:54 . 2012-10-09 17:40 44032 ----a-w- c:\windows\system32\dhcpcsvc6.dll 2013-09-17 10:54 . 2012-10-09 17:40 193536 ----a-w- c:\windows\system32\dhcpcore6.dll 2013-09-17 10:54 . 2011-04-22 19:14 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys 2013-09-17 07:02 . 2013-09-17 07:02 -------- d-----w- c:\programdata\AskPartnerNetwork 2013-09-17 07:02 . 2013-09-17 07:02 -------- d-----w- c:\program files\AskPartnerNetwork 2013-09-14 09:46 . 2013-09-14 09:46 -------- d-----w- C:\SoloApp 2013-09-14 09:12 . 2013-09-14 09:12 66144 ----a-w- c:\windows\system32\drivers\avnetflt.sys 2013-09-13 13:26 . 2013-09-14 09:07 92448 ----a-w- c:\windows\system32\drivers\avfwim.sys 2013-09-13 13:26 . 2013-09-14 09:07 88840 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2013-09-13 13:26 . 2013-09-14 09:07 37352 ----a-w- c:\windows\system32\drivers\avkmgr.sys 2013-09-13 13:26 . 2013-09-14 09:07 136672 ----a-w- c:\windows\system32\drivers\avipbb.sys 2013-09-13 13:26 . 2013-09-14 09:07 113024 ----a-w- c:\windows\system32\drivers\avfwot.sys 2013-09-13 13:25 . 2013-09-17 10:41 -------- d-----w- c:\program files\Avira 2013-09-12 15:09 . 2013-09-12 15:09 -------- d-----w- c:\program files\Microsoft Works 2013-09-12 15:09 . 2013-09-12 15:09 -------- d-----w- c:\windows\PCHEALTH 2013-09-12 15:07 . 2013-09-12 15:07 -------- d-----r- C:\MSOCache 2013-09-12 09:23 . 2013-09-12 09:23 -------- d-----w- c:\programdata\Malwarebytes 2013-09-12 09:23 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys 2013-09-11 12:17 . 2013-09-11 12:17 -------- d-----w- c:\program files\MSXML 4.0 2013-09-10 17:23 . 2013-09-10 17:23 -------- d-----w- c:\program files\Google 2013-09-10 12:16 . 2013-09-11 15:04 -------- d-----w- c:\programdata\Nero 2013-09-10 12:16 . 2013-09-11 15:04 -------- d-----w- c:\program files\Common Files\Nero 2013-09-10 09:27 . 2013-09-10 09:27 -------- d-----w- c:\programdata\StarMoney 9.0 2013-09-10 09:24 . 2013-09-19 13:42 -------- d-----w- c:\program files\StarMoney 9.0 S-Edition 2013-09-10 08:04 . 2007-12-13 20:16 73728 ------w- c:\windows\system32\BrDctF2.dll 2013-09-10 08:04 . 2007-12-13 20:16 5632 ------w- c:\windows\system32\BrDctF2L.dll 2013-09-10 08:04 . 2007-12-13 20:16 3072 ------w- c:\windows\system32\BrDctF2S.dll 2013-09-10 08:04 . 2006-12-28 11:39 176128 ------w- c:\windows\system32\BroSNMP.dll 2013-09-10 08:04 . 2008-06-17 13:33 167936 ------w- c:\windows\system32\NSSearch.dll 2013-09-09 18:23 . 2013-09-09 18:23 -------- d-----w- c:\program files\Autodesk 2013-09-09 18:23 . 2013-09-09 18:23 12464 ----a-w- c:\windows\system32\drivers\CDAC15BA.SYS 2013-09-09 18:23 . 2013-09-09 18:23 54784 ----a-w- c:\windows\system32\drivers\CDAC11BA.EXE 2013-09-09 18:22 . 2013-09-09 18:22 -------- d-----w- c:\program files\AnswerWorks 4.0 2013-09-09 18:22 . 2013-09-09 18:22 -------- d-----w- c:\windows\system32\1031 2013-09-09 18:22 . 2013-09-09 18:22 -------- d-----w- c:\windows\system32\Common Files 2013-09-09 18:21 . 2013-09-09 18:22 -------- d-----w- c:\program files\Common Files\Autodesk Shared 2013-09-09 18:21 . 2013-09-09 18:21 -------- d-----w- c:\programdata\Autodesk 2013-09-09 16:07 . 2010-11-20 12:17 2171392 ----a-w- c:\windows\system32\VPCWizard.exe 2013-09-09 16:07 . 2010-11-20 10:50 48128 ----a-w- c:\windows\system32\drivers\vpcnfltr.sys 2013-09-09 16:07 . 2010-11-20 12:30 296064 ----a-w- c:\windows\system32\drivers\vpcvmm.sys 2013-09-09 16:07 . 2010-11-20 12:30 172416 ----a-w- c:\windows\system32\drivers\vpchbus.sys 2013-09-09 16:07 . 2010-11-20 12:21 14848 ----a-w- c:\windows\system32\vpchbuspipe.dll 2013-09-09 16:07 . 2010-11-20 10:50 78336 ----a-w- c:\windows\system32\drivers\vpcusb.sys 2013-09-09 16:07 . 2010-11-20 12:17 1260032 ----a-w- c:\windows\system32\VPCSettings.exe 2013-09-09 16:07 . 2010-11-20 10:50 559616 ----a-w- c:\windows\system32\VMCPropertyHandler.dll 2013-09-09 16:06 . 2010-11-20 10:52 1003008 ----a-w- c:\windows\system32\VMWindow.exe 2013-09-09 16:06 . 2010-11-20 10:52 793600 ----a-w- c:\windows\system32\vmsal.exe 2013-09-09 16:06 . 2010-11-20 12:17 3330560 ----a-w- c:\windows\system32\vpc.exe 2013-09-09 14:48 . 2009-07-21 13:31 1534464 ----a-w- c:\windows\system32\BrWia09b.dll 2013-09-09 14:48 . 2009-02-24 08:37 53760 ----a-w- c:\windows\system32\BrUsi09a.dll 2013-09-09 14:48 . 2013-09-10 08:05 -------- d-----w- c:\program files\Brother 2013-09-09 14:46 . 2013-09-09 14:46 -------- d-----w- c:\programdata\Brother 2013-09-09 14:17 . 2013-09-09 14:17 -------- d-----w- c:\program files\TeamViewer 2013-09-08 14:08 . 2012-01-09 16:59 133208 ----a-w- c:\windows\system32\drivers\kl1.sys 2013-09-08 14:08 . 2012-01-09 16:59 11352 ----a-w- c:\windows\system32\drivers\kl2.sys 2013-09-08 14:08 . 2013-09-17 10:43 -------- dc----w- c:\windows\system32\DRVSTORE 2013-09-08 13:56 . 2013-09-18 11:19 -------- d-----w- c:\program files\CheckPoint 2013-09-08 13:13 . 2013-09-17 10:43 -------- d-----w- c:\programdata\FLEXnet 2013-09-08 13:13 . 2013-09-13 12:35 -------- d-----w- c:\program files\Common Files\Macrovision Shared 2013-09-08 13:11 . 2013-09-17 11:06 -------- d-----w- c:\program files\Common Files\Adobe . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-08-09 07:52 . 2013-08-09 07:52 608648 ----a-w- c:\windows\system32\drivers\hardlock.sys 2013-08-09 07:52 . 2013-08-09 07:52 53192 ----a-w- c:\windows\system32\drivers\akshhl.sys 2013-08-09 07:52 . 2013-08-09 07:52 46536 ----a-w- c:\windows\system32\aksusb4.dll 2013-08-09 07:52 . 2013-08-09 07:52 43976 ----a-w- c:\windows\system32\akshhl30.dll 2013-08-09 07:52 . 2013-08-09 07:52 296200 ----a-w- c:\windows\system32\drivers\aksusb.sys 2013-08-09 07:52 . 2013-08-09 07:52 244040 ----a-w- c:\windows\system32\drivers\akshasp.sys 2013-08-09 07:52 . 2013-08-09 07:52 17992 ----a-w- c:\windows\system32\drivers\aksclass.sys 2013-08-09 07:52 . 2013-08-09 07:52 15816 ----a-w- c:\windows\system32\akshsp52.dll 2013-08-09 07:52 . 2013-08-09 07:52 4609928 ----a-w- c:\windows\system32\aksllmtp.exe 2013-08-09 07:52 . 2013-08-09 07:52 376200 ----a-w- c:\windows\system32\drivers\aksfridge.sys . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "KeePass 2 PreLoad"="c:\program files\KeePass Password Safe 2\KeePass.exe" [2013-07-20 2010624] "BrMfcWnd"="c:\program files\Brother\Brmfcmon\BrMfcWnd.exe" [2009-05-26 1159168] "ControlCenter3"="c:\program files\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2013-09-14 347192] . c:\users\HLK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Persbackup.lnk - c:\users\HLK\Programme\Personal Backup 5\Persbackup.exe /auto [2013-9-11 6125056] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Dienst-Manager.lnk - c:\program files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe /n [2005-5-3 81920] Microsoft Office.lnk - c:\users\HLK\Virtual Machines\Office\OSA9.EXE -b -l [1999-4-29 65588] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . R2 ISWKL;ZoneAlarm LTD Toolbar ISWKL;c:\program files\CheckPoint\ZAForceField\ISWKL.sys [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872] R3 SQLAgent$SIBBAUWERKE;SQLAgent$SIBBAUWERKE;c:\mssql$sibbauwerke\Binn\sqlagent.EXE [2005-05-03 323584] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2010-11-20 77184] R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2010-11-20 25600] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2010-11-20 112640] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x] S1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys [2013-09-14 113024] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-09-14 37352] S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [2012-01-09 11352] S2 AntiVirFirewallService;Avira FireWall;c:\program files\Avira\AntiVir Desktop\avfwsvc.exe [2013-09-14 655928] S2 AntiVirMailService;Avira Email-Schutz;c:\program files\Avira\AntiVir Desktop\avmailc.exe [2013-09-14 622648] S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2013-09-14 84024] S2 AntiVirWebService;Avira Browser-Schutz;c:\program files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2013-09-14 815160] S2 hasplms;Sentinel HASP License Manager;c:\windows\system32\hasplms.exe [2013-08-09 4609928] S2 MSSQL$SIBBAUWERKE;MSSQL$SIBBAUWERKE;c:\mssql$sibbauwerke\Binn\sqlservr.exe [2005-05-03 9150464] S2 NitroDriverReadSpool8;NitroPDFDriverCreatorReadSpool8;c:\program files\Nitro\Pro 8\NitroPDFDriverService8.exe [2013-04-30 196616] S2 StarMoney 8.0 OnlineUpdate;StarMoney 8.0 OnlineUpdate;c:\program files\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [2012-12-21 699680] S2 StarMoney 9.0 OnlineUpdate;StarMoney 9.0 OnlineUpdate;c:\program files\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [2013-06-13 663184] S2 TeamViewer8;TeamViewer 8;c:\program files\TeamViewer\Version8\TeamViewer_Service.exe [2013-09-12 5071712] S3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys [2013-09-14 92448] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2012-04-11 543336] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc SensrSvc . Inhalt des "geplante Tasks" Ordners . 2013-09-20 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-07 10:41] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://www.google.com mStart Page = about:newtab LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\HLK\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\ FF - prefs.js: browser.startup.homepage - www.t-online.de FF - ExtSQL: 2013-08-18 10:41; firefox@ghostery.com; c:\users\HLK\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\extensions\firefox@ghostery.com.xpi FF - user.js: extensions.zonealarm.rvrtMsg - Click Yes to keep current home page and default search settings, Click No to restore original settings FF - user.js: extensions.zonealarm.autoRvrt - true FF - user.js: extensions.zonealarm_i.newTab - false FF - user.js: extensions.zonealarm.tlbrSrchUrl - hxxp://search.zonealarm.com/search?Source=ToolBar&oemCode=ZLN07881512980689-4901&toolbarId=base&affiliateId=1025&Lan={dfltLng}&utid=40382dda000000000000001e8c84de5c&q= FF - user.js: extensions.zonealarm.id - 40382dda000000000000001e8c84de5c FF - user.js: extensions.zonealarm.instlDay - 15508 FF - user.js: extensions.zonealarm.vrsn - 1.5.24.4 FF - user.js: extensions.zonealarm.vrsni - 1.5.24.4 FF - user.js: extensions.zonealarm_i.vrsnTs - 1.5.24.410:08 FF - user.js: extensions.zonealarm.prtnrId - checkpoint FF - user.js: extensions.zonealarm.prdct - zonealarm FF - user.js: extensions.zonealarm.aflt - 1025 FF - user.js: extensions.zonealarm_i.smplGrp - none FF - user.js: extensions.zonealarm.tlbrId - base FF - user.js: extensions.zonealarm.instlRef - ZLN07881512980689-4901 FF - user.js: extensions.zonealarm.dfltLng - de FF - user.js: extensions.zonealarm.excTlbr - false FF - user.js: extensions.zonealarm.admin - false FF - user.js: extensions.delta.tlbrSrchUrl - FF - user.js: extensions.delta.id - 6cfd043500000000000000133b0db875 FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} FF - user.js: extensions.delta.instlDay - 15966 FF - user.js: extensions.delta.vrsn - 1.8.24.6 FF - user.js: extensions.delta.vrsni - 1.8.24.6 FF - user.js: extensions.delta.vrsnTs - 1.8.24.610:45 FF - user.js: extensions.delta.prtnrId - delta FF - user.js: extensions.delta.prdct - delta FF - user.js: extensions.delta.aflt - babsst FF - user.js: extensions.delta.smplGrp - none FF - user.js: extensions.delta.tlbrId - base FF - user.js: extensions.delta.instlRef - sst FF - user.js: extensions.delta.dfltLng - de FF - user.js: extensions.delta.excTlbr - false FF - user.js: extensions.delta.ffxUnstlRst - true FF - user.js: extensions.delta.admin - false FF - user.js: extensions.delta_i.babTrack - affID=122471&tt=160913_m2&tsp=5009 FF - user.js: extensions.delta_i.babExt - FF - user.js: extensions.delta_i.srcExt - ss FF - user.js: extensions.delta.autoRvrt - false FF - user.js: extensions.delta.rvrt - false FF - user.js: extensions.delta.newTab - false . . ------- Dateityp-Verknüpfung ------- . .scr=AutoCADScriptFile . - - - - Entfernte verwaiste Registrierungseinträge - - - - . HKLM-Run-ZoneAlarm - c:\program files\CheckPoint\ZoneAlarm\zatray.exe HKLM-Run-NWEReboot - (no file) MSConfigStartUp-ISW - c:\program files\CheckPoint\ZAForceField\ForceField.exe AddRemove-cadMANdu - c:\windows\unin0407.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2013-09-20 17:24:57 ComboFix-quarantined-files.txt 2013-09-20 15:24 . Vor Suchlauf: 11 Verzeichnis(se), 95.114.395.648 Bytes frei Nach Suchlauf: 15 Verzeichnis(se), 96.200.671.232 Bytes frei . - - End Of File - - 758D5A2E26D2FCDC08E2C8F30E7D1F12 A36C5E4F47E84449FF07ED3517B43A31 Gruß Lasko |
20.09.2013, 21:01 | #7 |
/// the machine /// TB-Ausbilder | C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.09.2013, 08:47 | #8 |
| C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start Moin Schrauber, wegen einer gestrigen Familienfeier kann ich erst heute antworten. Als gute Meldung: Fenster RunDLL mit der Meldung, dass das Modul TBUpdater.dll nicht gefunden wurde erscheint beim Rechner hochfahren nicht mehr. Das ist tollhttp://www.trojaner-board.de/images/smilies/taenzer.gif Scheinbar nach dem Suchlauf mit Combofix, habe ich auch erst heute Morgen gemerkt. Habe vor dem Start der neuen Suchprogramme einen Programmstart bei all meiner Software durchgeführt. Beim Start von StarMoney kommt die Meldung, dass das Online Update nicht läuft. Nachfolgend nun MBAM-Log Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.21.03 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 10.0.9200.16686 Lasko :: Lasko-PC [Administrator] 21.09.2013 08:30:45 MBAM-log-2013-09-21 (08-35-50).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 198874 Laufzeit: 4 Minute(n), 29 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 3 HKCR\CLSID\{3c98be86-cf79-4484-a2b2-dfe1ee126592} (PUP.Optional.HomeTab.A) -> Keine Aktion durchgeführt. HKCR\wtb.NotificationSource.1 (PUP.Optional.HomeTab.A) -> Keine Aktion durchgeführt. HKCR\wtb.NotificationSource (PUP.Optional.HomeTab.A) -> Keine Aktion durchgeführt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 1 C:\Users\Lasko\AppData\Roaming\HomeTab\HomeTab.dll (PUP.Optional.HomeTab.A) -> Keine Aktion durchgeführt. (Ende) Code:
ATTFilter # AdwCleaner v3.004 - Bericht erstellt am 21/09/2013 um 08:54:23 # Updated 15/09/2013 von Xplode # Betriebssystem : Windows 7 Ultimate Service Pack 1 (32 bits) # Benutzername : Lasko - Lasko-PC # Gestartet von : C:\Users\Lasko\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Users\Lasko\AppData\Local\DownloadGuide Ordner Gelöscht : C:\Users\Lasko\AppData\LocalLow\HomeTab Ordner Gelöscht : C:\Users\Lasko\AppData\LocalLow\SimplyTech Ordner Gelöscht : C:\Users\Lasko\AppData\Roaming\HomeTab Ordner Gelöscht : C:\Users\Lasko\AppData\Roaming\Systweak Ordner Gelöscht : C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Conduit Ordner Gelöscht : C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\ConduitCommon Ordner Gelöscht : C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\jetpack Ordner Gelöscht : C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\CT2613550 Ordner Gelöscht : C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b}(2) Datei Gelöscht : C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\\invalidprefs.js Datei Gelöscht : C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\bProtector_extensions.rdf Datei Gelöscht : C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\searchplugins\BrowserProtect.xml Datei Gelöscht : C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\searchplugins\delta.xml Datei Gelöscht : C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\user.js Datei Gelöscht : C:\Windows\System32\Tasks\Browser Updater ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\HomeTab.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.NotificationSource Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.NotificationSource.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB} [#] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A25E7121-3DD8-41B3-855B-756C5BC45449} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Schlüssel Gelöscht : HKCU\Software\HomeTab Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\simplytech Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar ***** [ Browser ] ***** -\\ Internet Explorer v10.0.9200.16686 -\\ Mozilla Firefox v23.0.1 (de) [ Datei : C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\prefs.js ] Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=6CFD00133B0DB875&affID=122471&tt=160913_m2&tsp=5009"); Zeile gelöscht : user_pref("extensions.delta.admin", false); Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst"); Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false"); Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de"); Zeile gelöscht : user_pref("extensions.delta.excTlbr", false); Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true); Zeile gelöscht : user_pref("extensions.delta.id", "6cfd043500000000000000133b0db875"); Zeile gelöscht : user_pref("extensions.delta.instlDay", "15966"); Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst"); Zeile gelöscht : user_pref("extensions.delta.newTab", false); Zeile gelöscht : user_pref("extensions.delta.prdct", "delta"); Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta"); Zeile gelöscht : user_pref("extensions.delta.rvrt", "false"); Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none"); Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base"); Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", ""); Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6"); Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.610:45:44"); Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6"); Zeile gelöscht : user_pref("extensions.delta_i.babExt", ""); Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=122471&tt=160913_m2&tsp=5009"); Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss"); ************************* AdwCleaner[R0].txt - [6249 octets] - [21/09/2013 08:49:34] AdwCleaner[S0].txt - [6079 octets] - [21/09/2013 08:54:23] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6139 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.1 (09.15.2013:1) OS: Windows 7 Ultimate x86 Ran by Lasko on 21.09.2013 at 9:02:40,98 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3330655016-2360188124-75919307-1000\Software\SweetIM ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\apn" ~~~ FireFox Emptied folder: C:\Users\Lasko\AppData\Roaming\mozilla\firefox\profiles\0mwzsocu.default\minidumps [1 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 21.09.2013 at 9:05:54,81 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [CODE]Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-09-2013 01 Ran by Lasko (administrator) on Lasko-PC on 21-09-2013 09:16:03 Running from C:\Users\Lasko\Desktop Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Macrovision) C:\Windows\system32\drivers\CDAC11BA.EXE (SafeNet Inc.) C:\Windows\system32\hasplms.exe (Microsoft Corporation) C:\MSSQL$SIBBAUWERKE\Binn\sqlservr.exe (Nitro PDF Software) C:\Program Files\Nitro\Pro 8\NitroPDFDriverService8.exe (Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Dr. J. Rathlev, D-24222 Schwentinental) C:\Users\Lasko\Programme\Personal Backup 5\Persbackup.exe (Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE (Microsoft Corporation) C:\Windows\System32\mobsync.exe () C:\Users\Lasko\Programme\Ditto\Ditto.exe (Dominik Reichl) C:\Program Files\KeePass Password Safe 2\KeePass.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\usrreq.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [KeePass 2 PreLoad] - C:\Program Files\KeePass Password Safe 2\KeePass.exe [2010624 2013-07-20] (Dominik Reichl) HKLM\...\Run: [BrMfcWnd] - C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.) HKLM\...\Run: [ControlCenter3] - C:\Program Files\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-14] (Avira Operations GmbH & Co. KG) HKLM\...\Policies\Explorer: [NoDrives] 0 HKCU\...\Policies\Explorer: [NoDrives] 0 HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun Startup: C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Persbackup.lnk ShortcutTarget: Persbackup.lnk -> C:\Users\Lasko\Programme\Personal Backup 5\Persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab SearchScopes: HKLM - DefaultScope value is missing. Toolbar: HKLM - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default FF Homepage: www.t-online.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @nitropdf.com/NitroPDF - C:\Program Files\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF) FF SearchPlugin: C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\searchplugins\{0488D87D-B84F-4C94-A4CF-A719B5EFF6E3}.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Click&Clean - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\clickclean@hotcleaner.com FF Extension: Fasterfox Lite - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\FasterFox_Lite@BigRedBrent FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\nostmp FF Extension: Flagfox - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} FF Extension: WOT - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} FF Extension: Memory Fox - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{E173B749-DB5B-4fd2-BA0E-94ECEA0CA55B} FF Extension: finder - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\finder@meingutscheincode.de.xpi FF Extension: firefox - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\firefox@ghostery.com.xpi FF Extension: trackmenot - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\trackmenot@mrl.nyu.edu.xpi FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\TrustChecker ========================== Services (Whitelisted) ================= R2 AntiVirFirewallService; C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe [655928 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [622648 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-14] (Avira Operations GmbH & Co. KG) R2 C-DillaCdaC11BA; C:\Windows\system32\drivers\CDAC11BA.EXE [54784 2013-09-09] (Macrovision) R2 hasplms; C:\Windows\system32\hasplms.exe [4609928 2013-08-09] (SafeNet Inc.) R2 MSSQL$SIBBAUWERKE; C:\MSSQL$SIBBAUWERKE\Binn\sqlservr.exe [9150464 2005-05-04] (Microsoft Corporation) S3 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [73728 2005-05-03] (Microsoft Corporation) R2 NitroDriverReadSpool8; C:\Program Files\Nitro\Pro 8\NitroPDFDriverService8.exe [196616 2013-04-30] (Nitro PDF Software) S3 SQLAgent$SIBBAUWERKE; C:\MSSQL$SIBBAUWERKE\Binn\sqlagent.EXE [323584 2005-05-03] (Microsoft Corporation) S2 StarMoney 8.0 OnlineUpdate; C:\Program Files\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH) S2 StarMoney 9.0 OnlineUpdate; C:\Program Files\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [663184 2013-06-13] (Star Finanz-Software Entwicklung und Vertriebs GmbH) S2 vsmon; C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe -service [x] ==================== Drivers (Whitelisted) ==================== R2 aksfridge; C:\Windows\System32\DRIVERS\aksfridge.sys [376200 2013-08-09] (SafeNet Inc.) R3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [244040 2013-08-09] (SafeNet Inc.) R3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [53192 2013-08-09] (SafeNet Inc.) R3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [296200 2013-08-09] (SafeNet Inc.) R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [92448 2013-09-14] (Avira GmbH) R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [113024 2013-09-14] (Avira GmbH) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-14] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-14] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-09-14] (Avira Operations GmbH & Co. KG) R2 CdaC15BA; C:\Windows\system32\drivers\CDAC15BA.SYS [12464 2013-09-09] (Macrovision Europe Ltd) R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation) R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [608648 2013-08-09] (SafeNet Inc.) R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [133208 2012-01-09] (Kaspersky Lab ZAO) R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11352 2012-01-09] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [468272 2012-01-09] (Kaspersky Lab) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] () R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-14] (Avira GmbH) R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation) R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation) R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation) R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation) R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [455256 2011-05-07] (Check Point Software Technologies LTD) S3 catchme; \??\C:\Users\Lasko\AppData\Local\Temp\catchme.sys [x] S2 ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-21 09:05 - 2013-09-21 09:05 - 00000991 _____ C:\Users\Lasko\Desktop\JRT.txt 2013-09-21 09:02 - 2013-09-21 09:02 - 00000000 ____D C:\Windows\ERUNT 2013-09-21 08:54 - 2013-09-21 08:57 - 00006257 _____ C:\Users\Lasko\Desktop\AdwCleaner[S0].txt 2013-09-21 08:39 - 2013-09-21 09:02 - 00000000 ____D C:\AdwCleaner 2013-09-21 08:28 - 2013-09-21 08:28 - 01029675 _____ (Thisisu) C:\Users\Lasko\Desktop\JRT.exe 2013-09-21 08:27 - 2013-09-21 08:27 - 01039554 _____ C:\Users\Lasko\Desktop\adwcleaner.exe 2013-09-20 17:13 - 2013-09-20 17:25 - 00000000 ____D C:\Qoobox 2013-09-20 17:13 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-09-20 17:13 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-09-20 17:13 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-09-20 17:13 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-09-20 17:13 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-09-20 17:13 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-09-20 17:13 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-09-20 17:13 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-09-20 17:12 - 2013-09-20 17:24 - 00000000 ____D C:\Windows\erdnt 2013-09-20 17:07 - 2013-09-20 17:07 - 05128554 ____R (Swearware) C:\Users\Lasko\Desktop\ComboFix.exe 2013-09-20 15:58 - 2013-09-20 15:58 - 00003055 _____ C:\Users\Lasko\Desktop\Karten- und Luftbildverzeichnis 2004.lnk 2013-09-20 15:57 - 2013-09-20 15:57 - 00003055 _____ C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Karten- und Luftbildverzeichnis 2004.lnk 2013-09-20 15:57 - 2013-09-20 15:57 - 00000000 ____D C:\Program Files\Borland 2013-09-20 13:53 - 2013-09-20 13:53 - 00000798 _____ C:\Users\Lasko\Documents\acadstk.dmp 2013-09-20 13:45 - 2013-09-20 13:45 - 00017882 _____ C:\CMDTEMP.dxf 2013-09-20 10:45 - 2013-09-20 10:52 - 00009969 _____ C:\Users\Lasko\Desktop\Gmer.txt 2013-09-20 10:21 - 2013-09-20 10:21 - 00000000 ____D C:\FRST 2013-09-20 10:18 - 2013-09-20 10:19 - 01083549 _____ (Farbar) C:\Users\Lasko\Desktop\FRST.exe 2013-09-20 10:10 - 2013-09-20 10:10 - 00000442 _____ C:\Users\Lasko\Desktop\defogger_disable.log 2013-09-20 10:10 - 2013-09-20 10:10 - 00000000 _____ C:\Users\Lasko\defogger_reenable 2013-09-19 14:04 - 2013-09-19 14:04 - 00377856 _____ C:\Users\Lasko\Desktop\gmer_2.1.19163.exe 2013-09-19 14:02 - 2013-09-21 08:28 - 00000000 ____D C:\Users\Lasko\Downloads\Trojaner-Board 2013-09-19 14:02 - 2013-09-19 14:02 - 00050477 _____ C:\Users\Lasko\Desktop\Defogger.exe 2013-09-18 15:06 - 2013-09-18 15:08 - 00000000 ____D C:\SIB-Bilder 2013-09-18 15:05 - 2013-09-18 15:05 - 00000000 ____D C:\Users\Lasko\Documents\SIBBW 2013-09-18 15:04 - 2013-09-20 18:12 - 00000000 ____D C:\Users\Lasko\SIBBW 2013-09-18 15:01 - 2013-09-18 15:02 - 00009917 _____ C:\Windows\aksdrvsetup.log 2013-09-18 15:01 - 2013-09-18 15:01 - 00001885 _____ C:\Users\Public\Desktop\Bauwerke 1.8 (MSDE).lnk 2013-09-18 15:01 - 2013-09-18 15:01 - 00000167 _____ C:\Windows\ODBCINST.INI 2013-09-18 15:01 - 2013-09-18 15:01 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard 2013-09-18 15:01 - 2001-09-06 07:47 - 00045056 _____ (WPM-Ingenieure GmbH) C:\Windows\system32\SIBDriveBox2.ocx 2013-09-18 15:01 - 2000-08-16 08:12 - 00155920 _____ (Microsoft Corporation) C:\Windows\system32\temp.01B 2013-09-18 15:01 - 2000-08-16 08:12 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\temp.013 2013-09-18 15:01 - 2000-08-16 08:12 - 00041232 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.cpl 2013-09-18 15:01 - 2000-08-16 08:12 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\temp.01C 2013-09-18 15:01 - 2000-07-26 14:37 - 00221456 _____ (Microsoft Corporation) C:\Windows\system32\temp.018 2013-09-18 15:01 - 2000-07-26 14:37 - 00200976 _____ (Microsoft Corporation) C:\Windows\system32\temp.00D 2013-09-18 15:01 - 2000-07-26 14:37 - 00196880 _____ (Microsoft Corporation) C:\Windows\system32\temp.00E 2013-09-18 15:01 - 2000-07-26 14:37 - 00151824 _____ (Microsoft Corporation) C:\Windows\system32\temp.00C 2013-09-18 15:01 - 2000-07-26 14:37 - 00102672 _____ (Microsoft Corporation) C:\Windows\system32\temp.00F 2013-09-18 15:01 - 2000-07-26 14:37 - 00037136 _____ (Microsoft Corporation) C:\Windows\system32\temp.016 2013-09-18 15:01 - 2000-07-26 14:37 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.017 2013-09-18 15:01 - 2000-07-26 14:36 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.01D 2013-09-18 15:01 - 2000-06-27 12:05 - 00026224 _____ (Microsoft Corporation) C:\Windows\system32\temp.019 2013-09-18 15:01 - 2000-06-27 12:05 - 00004656 _____ (Microsoft Corporation) C:\Windows\system32\temp.01F 2013-09-18 15:01 - 2000-06-26 07:15 - 00002233 _____ C:\Windows\system32\~GLH0411.TMP 2013-09-18 15:01 - 2000-06-26 07:15 - 00002151 _____ C:\Windows\system32\~GLH0412.TMP 2013-09-18 15:01 - 2000-05-25 11:58 - 00040960 _____ ( WPM-Ingenieure GMBH) C:\Windows\system32\DriveBox.ocx 2013-09-18 15:01 - 1999-03-15 13:02 - 00045107 _____ (Microsoft Corporation) C:\Windows\system32\temp.014 2013-09-18 15:01 - 1999-03-08 10:50 - 00147728 _____ (Microsoft Corporation) C:\Windows\system32\temp.009 2013-09-18 15:01 - 1999-03-08 10:15 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\temp.010 2013-09-18 15:01 - 1999-02-02 15:56 - 00000421 _____ C:\Windows\system32\odbcinst.cnt 2013-09-18 15:01 - 1999-01-27 12:40 - 00015716 _____ C:\Windows\system32\Sqlsrdme.txt 2013-09-18 15:01 - 1999-01-25 14:00 - 00512272 _____ (Microsoft Corporation) C:\Windows\system32\temp.00A 2013-09-18 15:01 - 1999-01-25 14:00 - 00061712 _____ (Microsoft Corporation) C:\Windows\system32\temp.008 2013-09-18 15:01 - 1998-12-14 13:49 - 00002287 _____ C:\Windows\system32\12520433.cpx 2013-09-18 15:01 - 1998-12-14 08:35 - 00002287 _____ C:\Windows\system32\12520435.cpx 2013-09-18 15:01 - 1998-11-30 08:21 - 00041316 _____ C:\Windows\system32\odbcinst.hlp 2013-09-18 15:01 - 1998-11-25 11:41 - 00049984 _____ C:\Windows\system32\msorcl32.hlp 2013-09-18 15:01 - 1998-11-13 03:25 - 00119056 _____ (Microsoft Corporation) C:\Windows\system32\sqlstr.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00049424 _____ (Microsoft Corporation) C:\Windows\system32\temp.011 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\temp.01E 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\dbmsspxn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\dbmsshrn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\dbmsadsn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00028944 _____ (Microsoft Corporation) C:\Windows\system32\dbmsvinn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00028944 _____ (Microsoft Corporation) C:\Windows\system32\dbmssocn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00028944 _____ (Microsoft Corporation) C:\Windows\system32\dbmsrpcn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.015 2013-09-18 15:01 - 1998-11-13 03:25 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.012 2013-09-18 15:01 - 1998-11-13 03:23 - 00037136 _____ (Microsoft Corporation) C:\Windows\system32\temp.007 2013-09-18 15:01 - 1998-11-12 23:25 - 00030376 _____ C:\Windows\system32\cliconf.hlp 2013-09-18 15:01 - 1998-11-06 12:40 - 00001926 _____ C:\Windows\system32\msorcl32.cnt 2013-09-18 15:01 - 1998-10-28 16:06 - 00017725 _____ C:\Windows\system32\sqlsodbc.hlp 2013-09-18 15:01 - 1998-10-23 13:10 - 00001938 _____ C:\Windows\system32\msorcrdm.txt 2013-09-18 15:01 - 1998-06-17 00:00 - 00077878 _____ (Microsoft Corporation) C:\Windows\system32\temp.00B 2013-09-18 15:01 - 1998-04-24 00:00 - 00002320 _____ C:\Windows\system32\12500852.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002318 _____ C:\Windows\system32\12510866.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002173 _____ C:\Windows\system32\12520863.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002167 _____ C:\Windows\system32\12520860.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002162 _____ C:\Windows\system32\12520861.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002147 _____ C:\Windows\system32\12520865.cpx 2013-09-18 15:01 - 1997-11-14 04:43 - 00029456 _____ (Microsoft Corporation) C:\Windows\system32\temp.01A 2013-09-18 15:00 - 2013-09-18 15:03 - 00000000 ____D C:\Program Files\BAUWERKE 2013-09-18 15:00 - 2013-09-18 15:00 - 00000000 ____D C:\Windows\system32\Help 2013-09-18 15:00 - 2008-04-15 19:46 - 01724416 _____ (Microsoft Corporation) C:\Windows\system32\gdiplus.dll 2013-09-18 15:00 - 2007-03-21 19:33 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\msvcp71.dll 2013-09-18 15:00 - 2007-03-21 19:33 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\msvcr71.dll 2013-09-18 15:00 - 2007-02-17 17:28 - 02511360 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\haspds_windows.dll 2013-09-18 15:00 - 2004-11-10 11:10 - 00778240 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\hasp_com_windows.dll 2013-09-18 15:00 - 2004-05-13 16:26 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\msvci70.dll 2013-09-18 15:00 - 2004-03-09 19:45 - 00224016 _____ (Microsoft Corporation) C:\Windows\system32\tabctl32.ocx 2013-09-18 15:00 - 2004-03-09 17:45 - 00084512 _____ (Microsoft Corporation) C:\Windows\system32\picclp32.ocx 2013-09-18 15:00 - 2004-03-09 02:00 - 00212240 _____ (Microsoft Corporation) C:\Windows\system32\richtx32.ocx 2013-09-18 15:00 - 2004-02-23 02:00 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\tlbinf32.dll 2013-09-18 15:00 - 2001-02-05 23:59 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\foxhhelp.exe 2013-09-18 15:00 - 2000-07-15 03:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\foxhhelpps.dll 2013-09-18 15:00 - 2000-04-03 20:52 - 00067376 _____ (Microsoft Corporation) C:\Windows\system32\sysinfo.ocx 2013-09-18 15:00 - 2000-03-06 23:00 - 00278581 _____ (Microsoft Corporation) C:\Windows\system32\temp.000 2013-09-18 15:00 - 1999-03-07 23:00 - 00598288 _____ (Microsoft Corporation) C:\Windows\system32\temp.004 2013-09-18 15:00 - 1999-03-07 23:00 - 00164112 _____ (Microsoft Corporation) C:\Windows\system32\temp.005 2013-09-18 15:00 - 1999-03-07 23:00 - 00147728 _____ (Microsoft Corporation) C:\Windows\system32\temp.006 2013-09-18 15:00 - 1999-02-07 23:00 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\temp.002 2013-09-18 15:00 - 1998-09-29 06:44 - 00013919 _____ C:\Windows\system32\vfpodbc.txt 2013-09-18 15:00 - 1998-06-22 23:00 - 00084000 _____ (Microsoft Corporation) C:\Windows\system32\MSOUTL32.OCX 2013-09-18 15:00 - 1998-04-30 00:00 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\temp.003 2013-09-18 15:00 - 1998-04-24 00:00 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\temp.001 2013-09-18 15:00 - 1997-04-24 16:32 - 00220372 _____ C:\Windows\system32\drvvfp.hlp 2013-09-18 15:00 - 1996-09-19 10:27 - 00005902 _____ C:\Windows\system32\drvvfp.cnt 2013-09-18 14:59 - 2013-09-18 14:59 - 15651522 _____ C:\Users\Lasko\Downloads\sib_bauwerke_18_sp23_msde_update.exe 2013-09-18 14:58 - 2013-09-18 14:58 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autostart 2013-09-18 14:56 - 2013-09-18 14:56 - 00212992 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\MSSQL$SIBBAUWERKE 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\SafeNet Sentinel 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\Aladdin Shared 2013-09-18 14:49 - 2013-08-09 09:52 - 04609928 _____ (SafeNet Inc.) C:\Windows\system32\hasplms.exe 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Adobe 2013-09-18 10:42 - 2013-09-18 10:42 - 00000000 ____D C:\Users\Lasko\Downloads\Unlocker 2013-09-18 09:05 - 2013-09-20 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro PDF 2013-09-17 18:39 - 2013-09-17 18:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00001925 _____ C:\Users\Public\Desktop\Nitro Pro 8.lnk 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\ProgramData\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Common Files\Nitro 2013-09-17 18:38 - 2013-04-30 09:10 - 00027144 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon2.dll 2013-09-17 18:38 - 2013-04-30 09:10 - 00018440 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui2.dll 2013-09-17 18:37 - 2013-09-17 18:37 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Downloaded Installations 2013-09-17 18:29 - 2013-09-17 18:37 - 00000000 ____D C:\Users\Lasko\Downloads\Nitro.Pro.Enterprise.v 8.5.3.14.x86 2013-09-17 13:21 - 2012-07-26 05:39 - 00526952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-09-17 13:21 - 2012-07-26 05:39 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2013-09-17 13:21 - 2012-07-26 04:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2013-09-17 13:21 - 2012-06-02 16:34 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2013-09-17 13:20 - 2012-07-26 05:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2013-09-17 13:20 - 2012-07-26 05:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2013-09-17 13:20 - 2012-07-26 05:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2013-09-17 13:20 - 2012-07-26 05:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2013-09-17 13:20 - 2012-07-26 05:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2013-09-17 13:20 - 2012-07-26 04:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2013-09-17 13:20 - 2012-07-26 04:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2013-09-17 13:20 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2013-09-17 12:59 - 2013-01-24 06:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2013-09-17 12:59 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2013-09-17 12:59 - 2012-08-22 19:16 - 00712048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2013-09-17 12:59 - 2012-07-04 21:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2013-09-17 12:59 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2013-09-17 12:59 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2013-09-17 12:59 - 2011-03-25 04:58 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-09-17 12:59 - 2011-03-25 04:58 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-09-17 12:59 - 2011-03-25 04:58 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00005888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-09-17 12:59 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2013-09-17 12:58 - 2012-08-21 22:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2013-09-17 12:58 - 2011-03-11 07:39 - 00148864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2013-09-17 12:58 - 2011-03-11 07:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2013-09-17 12:58 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2013-09-17 12:58 - 2011-03-11 07:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2013-09-17 12:58 - 2011-03-11 07:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2013-09-17 12:58 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2013-09-17 12:58 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2013-09-17 12:58 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2013-09-17 12:58 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2013-09-17 12:57 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-09-17 12:57 - 2013-03-19 06:53 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2013-09-17 12:57 - 2013-03-19 05:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2013-09-17 12:57 - 2012-10-03 18:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2013-09-17 12:57 - 2012-10-03 17:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2013-09-17 12:57 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2013-09-17 12:56 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\system32\locale.nls 2013-09-17 12:56 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2013-09-17 12:56 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2013-09-17 12:56 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2013-09-17 12:56 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2013-09-17 12:55 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-09-17 12:55 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2013-09-17 12:55 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2013-09-17 12:55 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2013-09-17 12:55 - 2012-05-05 09:46 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2013-09-17 12:55 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2013-09-17 12:55 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2013-09-17 12:54 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-09-17 12:54 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2013-09-17 12:54 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2013-09-17 12:54 - 2012-05-01 06:44 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2013-09-17 12:54 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2013-09-17 12:54 - 2011-04-22 21:14 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2013-09-17 12:44 - 2013-09-17 12:44 - 00000000 ____D C:\Users\Lasko\Documents\ForceField Shared Files 2013-09-17 09:12 - 2013-09-17 09:12 - 00000000 ____D C:\Users\Lasko\Downloads\ASUS-Treiber 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\Program Files\AskPartnerNetwork 2013-09-17 09:01 - 2013-09-17 09:01 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Avira 2013-09-15 13:45 - 2013-09-17 13:45 - 00000000 ____D C:\Users\Lasko\Documents\PersBackup 2013-09-15 13:01 - 2013-09-15 13:01 - 00000000 ____D C:\Windows\system32\config\RCCBakup 2013-09-14 16:16 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\Downloads\Update-Checker(Filehippo) 2013-09-14 13:59 - 2013-09-14 13:59 - 00000000 ____D C:\Users\Lasko\Word 2013-09-14 11:46 - 2013-09-14 11:46 - 00000000 ____D C:\SoloApp 2013-09-14 11:12 - 2013-09-14 11:12 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-09-13 15:26 - 2013-09-14 11:09 - 00002017 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-09-13 15:26 - 2013-09-14 11:07 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00113024 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00092448 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys 2013-09-13 15:25 - 2013-09-17 12:41 - 00000000 ____D C:\Program Files\Avira 2013-09-13 15:15 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\Avira 2013-09-12 17:36 - 2013-09-13 12:41 - 00000000 ____D C:\Users\Lasko\Downloads\AdobeFlashPlayer 2013-09-12 17:10 - 2013-09-12 17:10 - 00002703 _____ C:\Users\Lasko\Desktop\Microsoft Office Project 2007.lnk 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Windows\PCHEALTH 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Program Files\Microsoft Works 2013-09-12 17:07 - 2013-09-12 17:07 - 00000000 ___RD C:\MSOCache 2013-09-12 11:23 - 2013-09-12 11:23 - 00001074 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Malwarebytes 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-12 11:23 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-09-12 11:18 - 2013-09-21 08:40 - 00000000 ____D C:\Users\Lasko\Downloads\Malwarebytes 2013-09-12 10:22 - 2013-09-12 10:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Virtual PC 2013-09-11 17:08 - 2013-09-11 17:08 - 00002675 _____ C:\Users\Lasko\Desktop\Nero CoverDesigner.lnk 2013-09-11 17:08 - 2013-09-11 17:08 - 00000000 ____D C:\Users\Lasko\Documents\Nero 2013-09-11 16:50 - 2013-09-13 17:11 - 00000000 ____D C:\Users\Lasko\Downloads\CD-DVD-Brenner 2013-09-11 16:27 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\PersBackup5 2013-09-11 16:27 - 2013-09-11 16:27 - 00001045 _____ C:\Users\Public\Desktop\Personal Backup 5.lnk 2013-09-11 14:55 - 2013-09-11 14:55 - 00000000 ____D C:\Users\Lasko\Documents\default 2013-09-11 14:50 - 2013-09-11 14:50 - 00000000 ____D C:\Users\Lasko\AppData\Local\ashampoo 2013-09-11 14:19 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-11 14:19 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-11 14:19 - 2013-08-10 05:59 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-09-11 14:19 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-09-11 14:19 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-11 14:19 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-09-11 14:18 - 2013-09-11 14:18 - 00278934 _____ C:\Windows\msxml4-KB954430-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00289664 _____ C:\Windows\msxml4-KB973688-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00000000 ____D C:\Program Files\MSXML 4.0 2013-09-11 14:15 - 2013-08-08 03:03 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-09-11 14:15 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2013-09-11 14:15 - 2013-08-02 03:49 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2013-09-11 14:15 - 2013-08-02 03:49 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2013-09-11 14:15 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-09-11 14:15 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-09-11 14:15 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2013-09-10 19:23 - 2013-09-10 19:23 - 00002175 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Google 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Program Files\Google 2013-09-10 17:25 - 2013-09-10 17:25 - 00001921 _____ C:\Users\Lasko\Desktop\SpeedCommander - Verknüpfung.lnk 2013-09-10 14:49 - 2013-09-10 14:49 - 00000000 ____D C:\Users\Lasko\Documents\Updater 2013-09-10 14:22 - 2013-09-10 14:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nero 2013-09-10 14:16 - 2013-09-11 17:04 - 00000000 ____D C:\ProgramData\Nero 2013-09-10 14:16 - 2013-09-11 17:04 - 00000000 ____D C:\Program Files\Common Files\Nero 2013-09-10 14:16 - 2013-09-10 14:16 - 00002696 _____ C:\Users\Public\Desktop\Nero StartSmart.lnk 2013-09-10 11:27 - 2013-09-10 11:27 - 00002077 _____ C:\Users\Public\Desktop\StarMoney 9.0 S-Edition.lnk 2013-09-10 11:27 - 2013-09-10 11:27 - 00000000 ____D C:\ProgramData\StarMoney 9.0 2013-09-10 11:24 - 2013-09-19 15:42 - 00000000 ____D C:\Program Files\StarMoney 9.0 S-Edition 2013-09-10 10:43 - 2013-09-10 10:44 - 00000000 ____D C:\Users\Lasko\Scan 2013-09-10 10:12 - 2013-09-10 10:12 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Brother 2013-09-10 10:05 - 2013-09-10 10:05 - 00000425 _____ C:\Windows\BRWMARK.INI 2013-09-10 10:05 - 2013-09-10 10:05 - 00000027 _____ C:\Windows\BRPP2KA.INI 2013-09-10 10:04 - 2013-09-10 10:04 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\InstallShield 2013-09-10 10:04 - 2008-06-17 15:33 - 00167936 ____N (brother) C:\Windows\system32\NSSearch.dll 2013-09-10 10:04 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2.dll 2013-09-10 10:04 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2L.dll 2013-09-10 10:04 - 2007-12-13 22:16 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2S.dll 2013-09-10 10:04 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\system32\BroSNMP.dll 2013-09-10 09:50 - 2005-12-09 04:52 - 00000060 ____R C:\Program Files\BRINST.INI 2013-09-09 20:23 - 2013-09-09 20:23 - 00054784 _____ (Macrovision) C:\Windows\system32\Drivers\CDAC11BA.EXE 2013-09-09 20:23 - 2013-09-09 20:23 - 00012464 _____ (Macrovision Europe Ltd) C:\Windows\system32\Drivers\CDAC15BA.SYS 2013-09-09 20:23 - 2013-09-09 20:23 - 00000000 ____D C:\Program Files\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00002071 _____ C:\Users\Public\Desktop\AutoCAD 2004 Deu.lnk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Windows\system32\1031 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Users\Lasko\AppData\Local\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Microsoft Office 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\AnswerWorks 4.0 2013-09-09 20:21 - 2013-09-09 20:26 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Autodesk 2013-09-09 20:21 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2013-09-09 20:21 - 2013-09-09 20:21 - 00000000 ____D C:\ProgramData\Autodesk 2013-09-09 18:36 - 2013-09-09 18:36 - 00002675 _____ C:\Users\Lasko\Desktop\Microsoft Word.lnk 2013-09-09 18:34 - 2013-09-18 15:01 - 00000494 _____ C:\Windows\ODBC.INI 2013-09-09 18:33 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Common Files\Designer 2013-09-09 18:33 - 2013-09-09 18:33 - 00002715 _____ C:\Users\Lasko\Desktop\Microsoft Excel.lnk 2013-09-09 18:21 - 2013-09-18 14:05 - 00000000 ___RD C:\Users\Lasko\Virtual Machines 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-TW 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-CN 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\th-TH 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\sv-SE 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ru-RU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-PT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-BR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pl-PL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nl-NL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nb-NO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ko-KR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ja-JP 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\it-IT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\hu-HU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\he-IL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fr-FR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fi-FI 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\el-GR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Program Files\Windows Virtual PC 2013-09-09 18:07 - 2010-11-20 14:30 - 00296064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcvmm.sys 2013-09-09 18:07 - 2010-11-20 14:30 - 00172416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpchbus.sys 2013-09-09 18:07 - 2010-11-20 14:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\vpchbuspipe.dll 2013-09-09 18:07 - 2010-11-20 14:17 - 02171392 _____ (Microsoft Corporation) C:\Windows\system32\VPCWizard.exe 2013-09-09 18:07 - 2010-11-20 14:17 - 01260032 _____ (Microsoft Corporation) C:\Windows\system32\VPCSettings.exe 2013-09-09 18:07 - 2010-11-20 12:50 - 00559616 _____ (Microsoft Corporation) C:\Windows\system32\VMCPropertyHandler.dll 2013-09-09 18:07 - 2010-11-20 12:50 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcusb.sys 2013-09-09 18:07 - 2010-11-20 12:50 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcnfltr.sys 2013-09-09 18:06 - 2010-11-20 14:17 - 03330560 _____ (Microsoft Corporation) C:\Windows\system32\vpc.exe 2013-09-09 18:06 - 2010-11-20 12:52 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\VMWindow.exe 2013-09-09 18:06 - 2010-11-20 12:52 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\vmsal.exe 2013-09-09 16:49 - 2013-09-10 10:05 - 00000050 _____ C:\Windows\system32\bridf08a.dat 2013-09-09 16:48 - 2013-09-10 10:05 - 00000000 ____D C:\Program Files\Brother 2013-09-09 16:48 - 2009-07-21 15:31 - 01534464 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWia09b.dll 2013-09-09 16:48 - 2009-02-24 10:37 - 00053760 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrUsi09a.dll 2013-09-09 16:46 - 2013-09-09 16:46 - 00000000 ____D C:\ProgramData\Brother 2013-09-09 16:39 - 2013-09-17 12:41 - 00000000 ____D C:\Users\Lasko\Downloads\Brother-DCP-6690CW 2013-09-09 16:17 - 2013-09-17 18:28 - 00001053 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk 2013-09-09 16:17 - 2013-09-09 16:17 - 00000000 ____D C:\Program Files\TeamViewer 2013-09-09 11:01 - 2013-09-13 17:20 - 00000000 ____D C:\Users\Lasko\ZIP 2013-09-09 10:57 - 2013-09-09 10:57 - 00000821 _____ C:\Users\Lasko\Desktop\7-Zip File Manager.lnk 2013-09-09 10:56 - 2013-09-09 10:57 - 00000000 ____D C:\Users\Lasko\7-Zip 2013-09-09 08:58 - 2013-09-13 17:11 - 00000000 ____D C:\Users\Lasko\Downloads\WindowsXP-Mode 2013-09-08 17:04 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\IrfanView 2013-09-08 17:04 - 2013-09-08 17:04 - 00000967 _____ C:\Users\Public\Desktop\IrfanView.lnk 2013-09-08 16:56 - 2013-09-08 16:57 - 00000000 ____D C:\Users\Lasko\Downloads\Bildbetrachter 2013-09-08 16:49 - 2013-09-08 16:49 - 00000972 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-09-08 16:08 - 2012-01-09 18:59 - 00468272 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys 2013-09-08 16:08 - 2012-01-09 18:59 - 00133208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys 2013-09-08 16:08 - 2012-01-09 18:59 - 00011352 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl2.sys 2013-09-08 15:57 - 2013-09-17 13:05 - 00415928 _____ C:\Windows\system32\Drivers\vsconfig.xml 2013-09-08 15:35 - 2013-09-08 15:35 - 96566691 _____ C:\Windows\system32\ŝ듮ᩌd 2013-09-08 15:13 - 2013-09-17 12:43 - 00000000 ____D C:\ProgramData\FLEXnet 2013-09-08 15:13 - 2013-09-13 14:35 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2013-09-08 15:13 - 2013-09-08 15:13 - 00000000 ____D C:\Users\Lasko\Documents\Updater5 2013-09-08 15:11 - 2013-09-17 13:06 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-09-08 15:11 - 2013-09-17 13:04 - 00000000 ____D C:\Program Files\Adobe 2013-09-08 15:11 - 2013-09-17 12:20 - 00000000 ____D C:\ProgramData\Adobe 2013-09-08 14:43 - 2013-09-08 14:43 - 00000000 ____D C:\Users\Lasko\Documents\Steuer-Sparbuch 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Buhl Data Service 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl Data Service 2013-09-08 14:38 - 2013-09-08 14:43 - 00000670 _____ C:\Windows\wiso.ini 2013-09-08 14:38 - 2013-09-08 14:38 - 00001812 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2013.lnk 2013-09-08 14:38 - 2013-09-08 14:38 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl 2013-09-08 14:34 - 2013-09-08 14:39 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH 2013-09-08 13:01 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-09-08 13:01 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-09-08 13:01 - 2010-09-30 08:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-09-08 12:59 - 2013-09-11 14:17 - 00000000 ____D C:\Windows\system32\MRT 2013-09-08 12:59 - 2013-09-11 14:16 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-09-08 12:56 - 2012-03-01 07:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2013-09-08 12:56 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-09-08 12:56 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2013-09-08 12:56 - 2010-02-11 09:10 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2013-09-08 12:17 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-09-08 11:46 - 2013-09-08 11:46 - 00001914 _____ C:\Users\Public\Desktop\Secure Eraser.lnk 2013-09-08 11:46 - 2013-09-08 11:46 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\ASCOMP Software 2013-09-08 11:44 - 2013-08-13 08:38 - 00032328 _____ C:\Windows\Launcher.exe 2013-09-08 11:41 - 2013-09-13 17:11 - 00000000 ____D C:\Users\Lasko\Downloads\SecureEraser 2013-09-08 11:24 - 2013-09-18 10:28 - 00000000 ____D C:\Users\Lasko\Downloads\CCleaner 2013-09-08 10:31 - 2013-09-08 10:31 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-09-08 10:31 - 2013-09-08 10:31 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-09-08 10:31 - 2013-09-08 10:31 - 00745472 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00719360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00629248 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-09-08 10:31 - 2013-09-08 10:31 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00242200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-09-08 10:31 - 2013-09-08 10:31 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-09-08 10:30 - 2013-09-08 10:30 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2013-09-08 10:29 - 2013-09-08 10:29 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-09-08 10:28 - 2013-09-08 10:33 - 00013972 _____ C:\Windows\IE10_main.log 2013-09-08 10:28 - 2013-09-08 10:28 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-09-08 10:11 - 2013-09-21 09:12 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Ditto 2013-09-08 10:00 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-09-08 10:00 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-09-08 10:00 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-09-08 10:00 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-09-08 10:00 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-09-08 10:00 - 2013-04-12 15:45 - 01211752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2013-09-08 09:59 - 2013-02-12 05:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2013-09-08 09:59 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2013-09-08 09:59 - 2011-04-29 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2013-09-08 09:59 - 2011-04-29 04:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2013-09-08 09:59 - 2011-04-29 04:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2013-09-08 09:59 - 2011-04-25 04:18 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-09-08 09:59 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2013-09-08 09:59 - 2011-03-03 07:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2013-09-08 09:59 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2013-09-08 09:58 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-09-08 09:58 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-09-08 09:58 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-09-08 09:58 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2013-09-08 09:58 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2013-09-08 09:58 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2013-09-08 09:58 - 2013-03-19 06:48 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2013-09-08 09:58 - 2013-03-19 04:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2013-09-08 09:58 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-09-08 09:58 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2013-09-08 09:58 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-09-08 09:58 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2013-09-08 09:58 - 2012-06-06 07:05 - 01236992 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2013-09-08 09:58 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2013-09-08 09:58 - 2012-06-02 06:45 - 00134000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-09-08 09:58 - 2012-06-02 06:45 - 00067440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-09-08 09:58 - 2012-06-02 06:40 - 00369336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-09-08 09:58 - 2012-06-02 06:40 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-09-08 09:58 - 2012-04-28 05:17 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2013-09-08 09:58 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2013-09-08 09:58 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2013-09-08 09:58 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2013-09-08 09:58 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2013-09-08 09:58 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2013-09-08 09:58 - 2011-07-09 04:30 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2013-09-08 09:58 - 2011-05-24 12:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2013-09-08 09:58 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2013-09-08 09:58 - 2011-04-27 04:17 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2013-09-08 09:58 - 2011-04-27 04:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2013-09-08 09:58 - 2010-06-26 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2013-09-08 09:57 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-09-08 09:57 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-09-08 09:57 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-09-08 09:57 - 2013-04-10 07:18 - 00728424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-09-08 09:57 - 2013-04-10 07:18 - 00218984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2013-09-08 09:57 - 2013-01-03 07:04 - 00187752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2013-09-08 09:57 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-09-08 09:57 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2013-09-08 09:57 - 2012-08-22 19:16 - 00240496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2013-09-08 09:57 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2013-09-08 09:57 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2013-09-08 09:57 - 2012-07-04 23:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2013-09-08 09:57 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2013-09-08 09:57 - 2012-05-14 06:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2013-09-08 09:57 - 2012-04-26 06:45 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2013-09-08 09:57 - 2012-04-26 06:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2013-09-08 09:57 - 2012-04-26 06:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2013-09-08 09:57 - 2012-03-17 09:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2013-09-08 09:57 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2013-09-08 09:57 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2013-09-08 09:57 - 2011-11-17 07:34 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-09-08 09:57 - 2011-11-17 07:34 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-09-08 09:57 - 2011-11-17 07:34 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-09-08 09:57 - 2011-11-17 07:32 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-09-08 09:57 - 2011-11-17 07:29 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-09-08 09:57 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2013-09-08 09:57 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2013-09-08 09:57 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2013-09-08 09:57 - 2011-02-12 07:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2013-09-08 09:57 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2013-09-08 09:57 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2013-09-08 09:57 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2013-09-08 09:56 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-09-08 09:56 - 2013-06-15 05:40 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2013-09-08 09:56 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-09-08 09:56 - 2013-02-27 07:05 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2013-09-08 09:56 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-09-08 09:56 - 2013-02-27 06:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2013-09-08 09:56 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2013-09-08 09:56 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2013-09-08 09:56 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2013-09-08 09:56 - 2011-02-23 06:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2013-09-08 09:38 - 2013-09-08 09:38 - 00000000 ____D C:\Users\Lasko\Downloads\SpeedProject 2013-09-08 00:41 - 2013-09-08 00:41 - 00000000 ____D C:\Hotfix 2013-09-08 00:41 - 2013-09-07 14:49 - 00000000 ____D C:\Windows\Panther 2013-09-08 00:41 - 2011-02-16 03:57 - 00000025 ___RH C:\Windows\version 2013-09-08 00:41 - 2011-02-16 03:57 - 00000013 ____R C:\Windows\csup.txt 2013-09-08 00:40 - 2013-09-17 13:25 - 00000000 ____D C:\Windows\system32\Drivers\de-DE 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\XPSViewer 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\de 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\0407 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\de-DE 2013-09-07 18:21 - 2013-09-20 11:16 - 00000000 ____D C:\Users\Lasko\Downloads\KeePass 2013-09-07 18:20 - 2013-09-20 15:57 - 00000000 ____D C:\Users\Lasko\Programme 2013-09-07 17:38 - 2013-09-21 08:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\KeePass 2013-09-07 17:30 - 2013-09-07 17:40 - 00000000 ____D C:\Program Files\KeePass Password Safe 2 2013-09-07 17:30 - 2013-09-07 17:30 - 00001068 _____ C:\Users\Lasko\Desktop\KeePass 2.lnk 2013-09-07 17:10 - 2013-09-07 17:10 - 00002077 _____ C:\Users\Public\Desktop\StarMoney 8.0 S-Edition.lnk 2013-09-07 17:10 - 2013-09-07 17:10 - 00000000 ____D C:\ProgramData\StarMoney 8.0 2013-09-07 17:08 - 2013-09-20 13:48 - 00000000 ____D C:\Program Files\StarMoney 8.0 S-Edition 2013-09-07 17:08 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\Common Files\StarFinanz 2013-09-07 17:08 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\Business Objects 2013-09-07 17:07 - 2013-09-10 12:15 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-09-07 17:01 - 2013-09-07 16:57 - 00002629 _____ C:\Users\Public\Desktop\Corel PHOTO-PAINT X6.lnk 2013-09-07 17:01 - 2013-09-07 16:57 - 00002613 _____ C:\Users\Public\Desktop\CorelDRAW X6.lnk 2013-09-07 17:00 - 2013-09-07 17:00 - 00000000 ____D C:\Program Files\Common Files\Protexis 2013-09-07 16:57 - 2013-09-07 16:57 - 00000000 ____D C:\Users\Public\Documents\Corel 2013-09-07 16:46 - 2013-09-18 09:46 - 00127328 _____ C:\Users\Lasko\AppData\Local\GDIPFONTCACHEV1.DAT 2013-09-07 16:43 - 2013-09-07 16:46 - 00000000 ____D C:\ProgramData\Protexis 2013-09-07 16:43 - 2013-09-07 16:44 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Corel 2013-09-07 16:39 - 2013-09-07 18:27 - 00000000 ____D C:\Users\Lasko\Documents\Corel 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\Documents\Visual Studio 2008 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Microsoft Help 2013-09-07 16:38 - 2013-09-12 17:10 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-09-07 16:38 - 2013-09-07 17:00 - 00000000 ____D C:\ProgramData\Corel 2013-09-07 16:38 - 2013-09-07 16:40 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft SDKs 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Common Files\Corel 2013-09-07 16:35 - 2013-09-07 16:35 - 00000000 ____D C:\Program Files\Corel 2013-09-07 16:31 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-09-07 16:29 - 2013-09-07 17:01 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X6 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Macromedia 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Macromedia 2013-09-07 16:10 - 2013-09-07 16:10 - 00002032 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Local\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-09-07 16:07 - 2013-09-07 16:08 - 19681592 _____ (Mozilla) C:\Users\Lasko\Downloads\Thunderbird Setup 17.0.8.exe 2013-09-07 16:03 - 2013-09-17 12:41 - 00000000 ____D C:\ProgramData\Avira 2013-09-07 15:58 - 2013-09-21 08:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-07 15:58 - 2013-09-13 12:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-09-07 15:58 - 2013-09-13 12:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-09-07 15:58 - 2013-09-07 15:58 - 00000000 ____D C:\Windows\system32\Macromed 2013-09-07 15:26 - 2013-09-07 15:27 - 00000000 ____D C:\Program Files\Windows XP Mode 2013-09-07 15:06 - 2013-08-07 04:22 - 00238872 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-09-07 15:00 - 2012-04-11 18:30 - 00543336 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys 2013-09-07 15:00 - 2012-04-11 18:30 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll 2013-09-07 15:00 - 2012-04-11 18:30 - 00080488 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll 2013-09-07 14:57 - 2013-09-18 10:50 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-07 14:57 - 2013-09-07 16:21 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-09-07 14:57 - 2013-09-07 14:57 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ___HD C:\ProgramData\CanonBJ 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Local\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-07 14:53 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2013-09-07 14:53 - 2012-02-17 06:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2013-09-07 14:53 - 2006-09-12 20:00 - 00197632 _____ (CANON INC.) C:\Windows\system32\CNMLM86.DLL 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\MSDOS.SYS 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\IO.SYS 2013-09-07 14:50 - 2013-09-07 14:50 - 00001409 _____ C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-09-07 14:50 - 2012-06-03 00:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2013-09-07 14:50 - 2012-06-03 00:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2013-09-07 14:50 - 2012-06-03 00:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2013-09-07 14:50 - 2012-06-03 00:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2013-09-07 14:50 - 2012-06-03 00:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2013-09-07 14:50 - 2012-06-03 00:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2013-09-07 14:50 - 2012-06-03 00:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2013-09-07 14:50 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2013-09-07 14:50 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2013-09-07 14:49 - 2013-09-21 09:09 - 01287873 _____ C:\Windows\WindowsUpdate.log 2013-09-07 14:49 - 2013-09-20 15:58 - 00000000 ____D C:\Users\Lasko\AppData\Local\VirtualStore 2013-09-07 14:49 - 2013-09-20 10:10 - 00000000 ____D C:\Users\Lasko 2013-09-07 14:49 - 2013-09-07 14:49 - 00000020 ___SH C:\Users\Lasko\ntuser.ini 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 ____D C:\Recovery 2013-09-07 14:49 - 2009-07-14 06:42 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-09-07 14:49 - 2009-07-14 06:37 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\system32\atiicdxx.dat 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-09-07 14:43 - 2013-09-07 14:45 - 00001355 _____ C:\Windows\TSSysprep.log 2013-09-07 14:43 - 2013-09-07 14:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf ==================== One Month Modified Files and Folders ======= |
21.09.2013, 08:48 | #9 |
| C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start nun FRST Teil 2 Code:
ATTFilter 2013-09-21 09:15 - 2010-11-20 23:01 - 01673206 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-21 09:14 - 2013-09-07 14:49 - 01287873 _____ C:\Windows\WindowsUpdate.log 2013-09-21 09:12 - 2013-09-08 10:11 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Ditto 2013-09-21 09:10 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-21 09:10 - 2009-07-14 06:39 - 00031926 _____ C:\Windows\setupact.log 2013-09-21 09:05 - 2013-09-21 09:05 - 00000991 _____ C:\Users\Lasko\Desktop\JRT.txt 2013-09-21 09:04 - 2009-07-14 06:34 - 00025648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-21 09:04 - 2009-07-14 06:34 - 00025648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-21 09:02 - 2013-09-21 09:02 - 00000000 ____D C:\Windows\ERUNT 2013-09-21 09:02 - 2013-09-21 08:39 - 00000000 ____D C:\AdwCleaner 2013-09-21 08:57 - 2013-09-21 08:54 - 00006257 _____ C:\Users\Lasko\Desktop\AdwCleaner[S0].txt 2013-09-21 08:45 - 2013-09-07 15:58 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-21 08:40 - 2013-09-12 11:18 - 00000000 ____D C:\Users\Lasko\Downloads\Malwarebytes 2013-09-21 08:39 - 2013-09-07 17:38 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\KeePass 2013-09-21 08:28 - 2013-09-21 08:28 - 01029675 _____ (Thisisu) C:\Users\Lasko\Desktop\JRT.exe 2013-09-21 08:28 - 2013-09-19 14:02 - 00000000 ____D C:\Users\Lasko\Downloads\Trojaner-Board 2013-09-21 08:27 - 2013-09-21 08:27 - 01039554 _____ C:\Users\Lasko\Desktop\adwcleaner.exe 2013-09-20 18:12 - 2013-09-18 15:04 - 00000000 ____D C:\Users\Lasko\SIBBW 2013-09-20 17:26 - 2010-11-20 23:48 - 00337174 _____ C:\Windows\PFRO.log 2013-09-20 17:25 - 2013-09-20 17:13 - 00000000 ____D C:\Qoobox 2013-09-20 17:24 - 2013-09-20 17:12 - 00000000 ____D C:\Windows\erdnt 2013-09-20 17:24 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public 2013-09-20 17:22 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini 2013-09-20 17:07 - 2013-09-20 17:07 - 05128554 ____R (Swearware) C:\Users\Lasko\Desktop\ComboFix.exe 2013-09-20 15:58 - 2013-09-20 15:58 - 00003055 _____ C:\Users\Lasko\Desktop\Karten- und Luftbildverzeichnis 2004.lnk 2013-09-20 15:58 - 2013-09-07 14:49 - 00000000 ____D C:\Users\Lasko\AppData\Local\VirtualStore 2013-09-20 15:57 - 2013-09-20 15:57 - 00003055 _____ C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Karten- und Luftbildverzeichnis 2004.lnk 2013-09-20 15:57 - 2013-09-20 15:57 - 00000000 ____D C:\Program Files\Borland 2013-09-20 15:57 - 2013-09-07 18:20 - 00000000 ____D C:\Users\Lasko\Programme 2013-09-20 14:39 - 2013-09-18 09:05 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro PDF 2013-09-20 13:53 - 2013-09-20 13:53 - 00000798 _____ C:\Users\Lasko\Documents\acadstk.dmp 2013-09-20 13:48 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\StarMoney 8.0 S-Edition 2013-09-20 13:45 - 2013-09-20 13:45 - 00017882 _____ C:\CMDTEMP.dxf 2013-09-20 11:16 - 2013-09-07 18:21 - 00000000 ____D C:\Users\Lasko\Downloads\KeePass 2013-09-20 10:52 - 2013-09-20 10:45 - 00009969 _____ C:\Users\Lasko\Desktop\Gmer.txt 2013-09-20 10:21 - 2013-09-20 10:21 - 00000000 ____D C:\FRST 2013-09-20 10:19 - 2013-09-20 10:18 - 01083549 _____ (Farbar) C:\Users\Lasko\Desktop\FRST.exe 2013-09-20 10:10 - 2013-09-20 10:10 - 00000442 _____ C:\Users\Lasko\Desktop\defogger_disable.log 2013-09-20 10:10 - 2013-09-20 10:10 - 00000000 _____ C:\Users\Lasko\defogger_reenable 2013-09-20 10:10 - 2013-09-07 14:49 - 00000000 ____D C:\Users\Lasko 2013-09-19 15:42 - 2013-09-10 11:24 - 00000000 ____D C:\Program Files\StarMoney 9.0 S-Edition 2013-09-19 14:04 - 2013-09-19 14:04 - 00377856 _____ C:\Users\Lasko\Desktop\gmer_2.1.19163.exe 2013-09-19 14:02 - 2013-09-19 14:02 - 00050477 _____ C:\Users\Lasko\Desktop\Defogger.exe 2013-09-19 13:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache 2013-09-19 11:32 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-09-18 17:35 - 2010-11-21 02:46 - 00000000 ____D C:\Windows\ShellNew 2013-09-18 17:35 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Microsoft Games 2013-09-18 17:35 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker 2013-09-18 17:35 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-09-18 15:08 - 2013-09-18 15:06 - 00000000 ____D C:\SIB-Bilder 2013-09-18 15:05 - 2013-09-18 15:05 - 00000000 ____D C:\Users\Lasko\Documents\SIBBW 2013-09-18 15:03 - 2013-09-18 15:00 - 00000000 ____D C:\Program Files\BAUWERKE 2013-09-18 15:02 - 2013-09-18 15:01 - 00009917 _____ C:\Windows\aksdrvsetup.log 2013-09-18 15:01 - 2013-09-18 15:01 - 00001885 _____ C:\Users\Public\Desktop\Bauwerke 1.8 (MSDE).lnk 2013-09-18 15:01 - 2013-09-18 15:01 - 00000167 _____ C:\Windows\ODBCINST.INI 2013-09-18 15:01 - 2013-09-18 15:01 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard 2013-09-18 15:01 - 2013-09-09 18:34 - 00000494 _____ C:\Windows\ODBC.INI 2013-09-18 15:00 - 2013-09-18 15:00 - 00000000 ____D C:\Windows\system32\Help 2013-09-18 15:00 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-09-18 14:59 - 2013-09-18 14:59 - 15651522 _____ C:\Users\Lasko\Downloads\sib_bauwerke_18_sp23_msde_update.exe 2013-09-18 14:58 - 2013-09-18 14:58 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autostart 2013-09-18 14:56 - 2013-09-18 14:56 - 00212992 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\MSSQL$SIBBAUWERKE 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\SafeNet Sentinel 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\Aladdin Shared 2013-09-18 14:05 - 2013-09-09 18:21 - 00000000 ___RD C:\Users\Lasko\Virtual Machines 2013-09-18 12:12 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Globalization 2013-09-18 10:50 - 2013-09-07 14:57 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Adobe 2013-09-18 10:42 - 2013-09-18 10:42 - 00000000 ____D C:\Users\Lasko\Downloads\Unlocker 2013-09-18 10:28 - 2013-09-08 11:24 - 00000000 ____D C:\Users\Lasko\Downloads\CCleaner 2013-09-18 09:46 - 2013-09-07 16:46 - 00127328 _____ C:\Users\Lasko\AppData\Local\GDIPFONTCACHEV1.DAT 2013-09-17 18:39 - 2013-09-17 18:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00001925 _____ C:\Users\Public\Desktop\Nitro Pro 8.lnk 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\ProgramData\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Common Files\Nitro 2013-09-17 18:37 - 2013-09-17 18:37 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Downloaded Installations 2013-09-17 18:37 - 2013-09-17 18:29 - 00000000 ____D C:\Users\Lasko\Downloads\Nitro.Pro.Enterprise.v 8.5.3.14.x86 2013-09-17 18:28 - 2013-09-09 16:17 - 00001053 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk 2013-09-17 13:45 - 2013-09-15 13:45 - 00000000 ____D C:\Users\Lasko\Documents\PersBackup 2013-09-17 13:26 - 2009-07-14 06:33 - 00492728 _____ C:\Windows\system32\FNTCACHE.DAT 2013-09-17 13:25 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\Drivers\de-DE 2013-09-17 13:06 - 2013-09-08 15:11 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-09-17 13:05 - 2013-09-08 15:57 - 00415928 _____ C:\Windows\system32\Drivers\vsconfig.xml 2013-09-17 13:04 - 2013-09-08 15:11 - 00000000 ____D C:\Program Files\Adobe 2013-09-17 12:44 - 2013-09-17 12:44 - 00000000 ____D C:\Users\Lasko\Documents\ForceField Shared Files 2013-09-17 12:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp 2013-09-17 12:43 - 2013-09-14 16:16 - 00000000 ____D C:\Users\Lasko\Downloads\Update-Checker(Filehippo) 2013-09-17 12:43 - 2013-09-13 15:15 - 00000000 ____D C:\Users\Lasko\Avira 2013-09-17 12:43 - 2013-09-11 16:27 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\PersBackup5 2013-09-17 12:43 - 2013-09-08 17:04 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\IrfanView 2013-09-17 12:43 - 2013-09-08 15:13 - 00000000 ____D C:\ProgramData\FLEXnet 2013-09-17 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF 2013-09-17 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration 2013-09-17 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat 2013-09-17 12:41 - 2013-09-13 15:25 - 00000000 ____D C:\Program Files\Avira 2013-09-17 12:41 - 2013-09-09 16:39 - 00000000 ____D C:\Users\Lasko\Downloads\Brother-DCP-6690CW 2013-09-17 12:41 - 2013-09-07 16:03 - 00000000 ____D C:\ProgramData\Avira 2013-09-17 12:20 - 2013-09-08 15:11 - 00000000 ____D C:\ProgramData\Adobe 2013-09-17 09:12 - 2013-09-17 09:12 - 00000000 ____D C:\Users\Lasko\Downloads\ASUS-Treiber 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\Program Files\AskPartnerNetwork 2013-09-17 09:01 - 2013-09-17 09:01 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Avira 2013-09-16 13:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\LiveKernelReports 2013-09-15 19:45 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles 2013-09-15 13:05 - 2009-07-14 04:03 - 49283072 _____ C:\Windows\system32\config\SOFTWARE.bak 2013-09-15 13:05 - 2009-07-14 04:03 - 13369344 _____ C:\Windows\system32\config\SYSTEM.bak 2013-09-15 13:05 - 2009-07-14 04:03 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak 2013-09-15 13:02 - 2009-07-14 04:03 - 00262144 _____ C:\Windows\system32\config\SAM.bak 2013-09-15 13:01 - 2013-09-15 13:01 - 00000000 ____D C:\Windows\system32\config\RCCBakup 2013-09-14 13:59 - 2013-09-14 13:59 - 00000000 ____D C:\Users\Lasko\Word 2013-09-14 11:46 - 2013-09-14 11:46 - 00000000 ____D C:\SoloApp 2013-09-14 11:12 - 2013-09-14 11:12 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-09-14 11:09 - 2013-09-13 15:26 - 00002017 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-09-14 11:07 - 2013-09-13 15:26 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00113024 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00092448 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys 2013-09-13 17:20 - 2013-09-09 11:01 - 00000000 ____D C:\Users\Lasko\ZIP 2013-09-13 17:11 - 2013-09-11 16:50 - 00000000 ____D C:\Users\Lasko\Downloads\CD-DVD-Brenner 2013-09-13 17:11 - 2013-09-09 08:58 - 00000000 ____D C:\Users\Lasko\Downloads\WindowsXP-Mode 2013-09-13 17:11 - 2013-09-08 11:41 - 00000000 ____D C:\Users\Lasko\Downloads\SecureEraser 2013-09-13 14:35 - 2013-09-08 15:13 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2013-09-13 12:41 - 2013-09-12 17:36 - 00000000 ____D C:\Users\Lasko\Downloads\AdobeFlashPlayer 2013-09-13 12:41 - 2013-09-07 15:58 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-09-13 12:41 - 2013-09-07 15:58 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-09-12 17:10 - 2013-09-12 17:10 - 00002703 _____ C:\Users\Lasko\Desktop\Microsoft Office Project 2007.lnk 2013-09-12 17:10 - 2013-09-07 16:38 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Windows\PCHEALTH 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Program Files\Microsoft Works 2013-09-12 17:07 - 2013-09-12 17:07 - 00000000 ___RD C:\MSOCache 2013-09-12 11:23 - 2013-09-12 11:23 - 00001074 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Malwarebytes 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-12 10:22 - 2013-09-12 10:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Virtual PC 2013-09-11 17:08 - 2013-09-11 17:08 - 00002675 _____ C:\Users\Lasko\Desktop\Nero CoverDesigner.lnk 2013-09-11 17:08 - 2013-09-11 17:08 - 00000000 ____D C:\Users\Lasko\Documents\Nero 2013-09-11 17:04 - 2013-09-10 14:16 - 00000000 ____D C:\ProgramData\Nero 2013-09-11 17:04 - 2013-09-10 14:16 - 00000000 ____D C:\Program Files\Common Files\Nero 2013-09-11 16:27 - 2013-09-11 16:27 - 00001045 _____ C:\Users\Public\Desktop\Personal Backup 5.lnk 2013-09-11 14:55 - 2013-09-11 14:55 - 00000000 ____D C:\Users\Lasko\Documents\default 2013-09-11 14:50 - 2013-09-11 14:50 - 00000000 ____D C:\Users\Lasko\AppData\Local\ashampoo 2013-09-11 14:18 - 2013-09-11 14:18 - 00278934 _____ C:\Windows\msxml4-KB954430-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00289664 _____ C:\Windows\msxml4-KB973688-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00000000 ____D C:\Program Files\MSXML 4.0 2013-09-11 14:17 - 2013-09-08 12:59 - 00000000 ____D C:\Windows\system32\MRT 2013-09-11 14:16 - 2013-09-08 12:59 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-09-10 19:23 - 2013-09-10 19:23 - 00002175 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Google 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Program Files\Google 2013-09-10 17:25 - 2013-09-10 17:25 - 00001921 _____ C:\Users\Lasko\Desktop\SpeedCommander - Verknüpfung.lnk 2013-09-10 14:49 - 2013-09-10 14:49 - 00000000 ____D C:\Users\Lasko\Documents\Updater 2013-09-10 14:22 - 2013-09-10 14:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nero 2013-09-10 14:16 - 2013-09-10 14:16 - 00002696 _____ C:\Users\Public\Desktop\Nero StartSmart.lnk 2013-09-10 12:15 - 2013-09-07 17:07 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-09-10 11:27 - 2013-09-10 11:27 - 00002077 _____ C:\Users\Public\Desktop\StarMoney 9.0 S-Edition.lnk 2013-09-10 11:27 - 2013-09-10 11:27 - 00000000 ____D C:\ProgramData\StarMoney 9.0 2013-09-10 11:25 - 2009-07-14 04:04 - 00017486 _____ C:\Windows\system32\Drivers\etc\services 2013-09-10 10:44 - 2013-09-10 10:43 - 00000000 ____D C:\Users\Lasko\Scan 2013-09-10 10:12 - 2013-09-10 10:12 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Brother 2013-09-10 10:05 - 2013-09-10 10:05 - 00000425 _____ C:\Windows\BRWMARK.INI 2013-09-10 10:05 - 2013-09-10 10:05 - 00000027 _____ C:\Windows\BRPP2KA.INI 2013-09-10 10:05 - 2013-09-09 16:49 - 00000050 _____ C:\Windows\system32\bridf08a.dat 2013-09-10 10:05 - 2013-09-09 16:48 - 00000000 ____D C:\Program Files\Brother 2013-09-10 10:04 - 2013-09-10 10:04 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\InstallShield 2013-09-09 20:26 - 2013-09-09 20:21 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Autodesk 2013-09-09 20:23 - 2013-09-09 20:23 - 00054784 _____ (Macrovision) C:\Windows\system32\Drivers\CDAC11BA.EXE 2013-09-09 20:23 - 2013-09-09 20:23 - 00012464 _____ (Macrovision Europe Ltd) C:\Windows\system32\Drivers\CDAC15BA.SYS 2013-09-09 20:23 - 2013-09-09 20:23 - 00000000 ____D C:\Program Files\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00002071 _____ C:\Users\Public\Desktop\AutoCAD 2004 Deu.lnk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Windows\system32\1031 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Users\Lasko\AppData\Local\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Microsoft Office 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\AnswerWorks 4.0 2013-09-09 20:22 - 2013-09-09 20:21 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2013-09-09 20:22 - 2013-09-09 18:33 - 00000000 ____D C:\Program Files\Common Files\Designer 2013-09-09 20:21 - 2013-09-09 20:21 - 00000000 ____D C:\ProgramData\Autodesk 2013-09-09 20:21 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Help 2013-09-09 18:36 - 2013-09-09 18:36 - 00002675 _____ C:\Users\Lasko\Desktop\Microsoft Word.lnk 2013-09-09 18:33 - 2013-09-09 18:33 - 00002715 _____ C:\Users\Lasko\Desktop\Microsoft Excel.lnk 2013-09-09 18:33 - 2009-07-14 04:37 - 00000000 __RSD C:\Windows\Media 2013-09-09 18:32 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-TW 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-CN 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\th-TH 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\sv-SE 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ru-RU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-PT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-BR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pl-PL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nl-NL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nb-NO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ko-KR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ja-JP 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\it-IT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\hu-HU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\he-IL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fr-FR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fi-FI 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\el-GR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Program Files\Windows Virtual PC 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-TW 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-CN 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\tr-TR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\th-TH 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\sv-SE 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ru-RU 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ro-RO 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pt-PT 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pt-BR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pl-PL 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\nl-NL 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\nb-NO 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ko-KR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ja-JP 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\it-IT 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\hu-HU 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\he-IL 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\fr-FR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\fi-FI 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\el-GR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ar-SA 2013-09-09 16:49 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\twain_32 2013-09-09 16:46 - 2013-09-09 16:46 - 00000000 ____D C:\ProgramData\Brother 2013-09-09 16:17 - 2013-09-09 16:17 - 00000000 ____D C:\Program Files\TeamViewer 2013-09-09 10:57 - 2013-09-09 10:57 - 00000821 _____ C:\Users\Lasko\Desktop\7-Zip File Manager.lnk 2013-09-09 10:57 - 2013-09-09 10:56 - 00000000 ____D C:\Users\Lasko\7-Zip 2013-09-08 17:04 - 2013-09-08 17:04 - 00000967 _____ C:\Users\Public\Desktop\IrfanView.lnk 2013-09-08 16:57 - 2013-09-08 16:56 - 00000000 ____D C:\Users\Lasko\Downloads\Bildbetrachter 2013-09-08 16:49 - 2013-09-08 16:49 - 00000972 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-09-08 15:35 - 2013-09-08 15:35 - 96566691 _____ C:\Windows\system32\ŝ듮ᩌd 2013-09-08 15:13 - 2013-09-08 15:13 - 00000000 ____D C:\Users\Lasko\Documents\Updater5 2013-09-08 14:43 - 2013-09-08 14:43 - 00000000 ____D C:\Users\Lasko\Documents\Steuer-Sparbuch 2013-09-08 14:43 - 2013-09-08 14:38 - 00000670 _____ C:\Windows\wiso.ini 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Buhl Data Service 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl Data Service 2013-09-08 14:39 - 2013-09-08 14:34 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH 2013-09-08 14:38 - 2013-09-08 14:38 - 00001812 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2013.lnk 2013-09-08 14:38 - 2013-09-08 14:38 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl 2013-09-08 13:17 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender 2013-09-08 13:17 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System 2013-09-08 11:46 - 2013-09-08 11:46 - 00001914 _____ C:\Users\Public\Desktop\Secure Eraser.lnk 2013-09-08 11:46 - 2013-09-08 11:46 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\ASCOMP Software 2013-09-08 10:35 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-HK 2013-09-08 10:33 - 2013-09-08 10:28 - 00013972 _____ C:\Windows\IE10_main.log 2013-09-08 10:31 - 2013-09-08 10:31 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-09-08 10:31 - 2013-09-08 10:31 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-09-08 10:31 - 2013-09-08 10:31 - 00745472 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00719360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00629248 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-09-08 10:31 - 2013-09-08 10:31 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00242200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-09-08 10:31 - 2013-09-08 10:31 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-09-08 10:30 - 2013-09-08 10:30 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2013-09-08 10:29 - 2013-09-08 10:29 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-09-08 10:28 - 2013-09-08 10:28 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-09-08 09:38 - 2013-09-08 09:38 - 00000000 ____D C:\Users\Lasko\Downloads\SpeedProject 2013-09-08 00:41 - 2013-09-08 00:41 - 00000000 ____D C:\Hotfix 2013-09-08 00:41 - 2009-07-14 06:57 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG 2013-09-08 00:41 - 2009-07-14 06:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\XPSViewer 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\de 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\0407 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\de-DE 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\winrm 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\WCN 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\slmgr 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\DigitalLocker 2013-09-08 00:40 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2013-09-08 00:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-09-08 00:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\MUI 2013-09-08 00:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\com 2013-09-08 00:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\IME 2013-09-07 18:27 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\Documents\Corel 2013-09-07 17:40 - 2013-09-07 17:30 - 00000000 ____D C:\Program Files\KeePass Password Safe 2 2013-09-07 17:30 - 2013-09-07 17:30 - 00001068 _____ C:\Users\Lasko\Desktop\KeePass 2.lnk 2013-09-07 17:10 - 2013-09-07 17:10 - 00002077 _____ C:\Users\Public\Desktop\StarMoney 8.0 S-Edition.lnk 2013-09-07 17:10 - 2013-09-07 17:10 - 00000000 ____D C:\ProgramData\StarMoney 8.0 2013-09-07 17:08 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\Common Files\StarFinanz 2013-09-07 17:08 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\Business Objects 2013-09-07 17:01 - 2013-09-07 16:29 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X6 2013-09-07 17:00 - 2013-09-07 17:00 - 00000000 ____D C:\Program Files\Common Files\Protexis 2013-09-07 17:00 - 2013-09-07 16:38 - 00000000 ____D C:\ProgramData\Corel 2013-09-07 16:57 - 2013-09-07 17:01 - 00002629 _____ C:\Users\Public\Desktop\Corel PHOTO-PAINT X6.lnk 2013-09-07 16:57 - 2013-09-07 17:01 - 00002613 _____ C:\Users\Public\Desktop\CorelDRAW X6.lnk 2013-09-07 16:57 - 2013-09-07 16:57 - 00000000 ____D C:\Users\Public\Documents\Corel 2013-09-07 16:46 - 2013-09-07 16:43 - 00000000 ____D C:\ProgramData\Protexis 2013-09-07 16:44 - 2013-09-07 16:43 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Corel 2013-09-07 16:40 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\Documents\Visual Studio 2008 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Microsoft Help 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft SDKs 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Common Files\Corel 2013-09-07 16:38 - 2013-09-07 16:31 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-09-07 16:35 - 2013-09-07 16:35 - 00000000 ____D C:\Program Files\Corel 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Macromedia 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Macromedia 2013-09-07 16:21 - 2013-09-07 14:57 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-09-07 16:10 - 2013-09-07 16:10 - 00002032 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Local\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-09-07 16:08 - 2013-09-07 16:07 - 19681592 _____ (Mozilla) C:\Users\Lasko\Downloads\Thunderbird Setup 17.0.8.exe 2013-09-07 15:58 - 2013-09-07 15:58 - 00000000 ____D C:\Windows\system32\Macromed 2013-09-07 15:27 - 2013-09-07 15:26 - 00000000 ____D C:\Program Files\Windows XP Mode 2013-09-07 14:57 - 2013-09-07 14:57 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ___HD C:\ProgramData\CanonBJ 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Local\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\MSDOS.SYS 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\IO.SYS 2013-09-07 14:50 - 2013-09-07 14:50 - 00001409 _____ C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-09-07 14:49 - 2013-09-08 00:41 - 00000000 ____D C:\Windows\Panther 2013-09-07 14:49 - 2013-09-07 14:49 - 00000020 ___SH C:\Users\Lasko\ntuser.ini 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 ____D C:\Recovery 2013-09-07 14:49 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\restore 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Public\Libraries 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Default 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\Recovery 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Windows NT 2013-09-07 14:45 - 2013-09-07 14:43 - 00001355 _____ C:\Windows\TSSysprep.log 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\system32\atiicdxx.dat 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-09-07 14:43 - 2013-09-07 14:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2013-09-07 14:43 - 2010-11-21 02:46 - 00000000 ____D C:\Windows\CSC 2013-09-07 14:43 - 2009-07-14 06:34 - 00002790 _____ C:\Windows\DtcInstall.log ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-12 13:35 ==================== End Of Log ============================ Toll TBUpdater.dll ist weg. Danke Hast Du vielleicht noch einen Tip wie ich die ganzen Suchprogramme weg bekomme? Oder reicht nur löschen aus. Über einen kurzen Tip währe ich Dir Dankbar. Gruß Lasko Geändert von Lasko (21.09.2013 um 08:56 Uhr) Grund: Textergänzugen vorgenommen |
21.09.2013, 16:17 | #10 |
/// the machine /// TB-Ausbilder | C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start Machen wir am Schluss, erst noch nen Onlinescan. ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
Downloade dir bitte Farbar Service Scanner
Poste bitte den Inhalt hier. und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.09.2013, 21:12 | #11 |
| C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start Hi Schrauber, nachfolgend der Log Eset Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=cc0b01fea0968545ac435b91bc93b827 # engine=15210 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-09-21 07:31:59 # local_time=2013-09-21 09:31:59 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776573 100 94 30513 131423110 0 0 # scanned=279677 # found=0 # cleaned=0 # scan_time=11630 Code:
ATTFilter Results of screen317's Security Check version 0.99.73 Windows 7 Service Pack 1 x86 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 CCleaner Adobe Flash Player 11.8.800.168 Mozilla Firefox (23.0.1) Mozilla Thunderbird (17.0.8) ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe StarMoney 9.0 S-Edition ouservice StarMoneyOnlineUpdate.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Nun Log FSS Code:
ATTFilter Farbar Service Scanner Version: 13-09-2013 Ran by Lasko (administrator) on 21-09-2013 at 21:45:01 Running from "C:\Users\Lasko\Desktop" Microsoft Windows 7 Ultimate Service Pack 1 (X86) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall"=DWORD:0 System Restore: ============ System Restore Disabled Policy: ======================== Action Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== Other Services: ============== File Check: ======== C:\Windows\system32\nsisvc.dll => MD5 is legit C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit C:\Windows\system32\dhcpcore.dll => MD5 is legit C:\Windows\system32\Drivers\afd.sys => MD5 is legit C:\Windows\system32\Drivers\tdx.sys => MD5 is legit C:\Windows\system32\Drivers\tcpip.sys [2013-09-08 09:57] - [2013-07-06 07:05] - 1293760 ____A (Microsoft Corporation) 4E8B9BE71B807B3BAEDB7F4243F85E3C C:\Windows\system32\dnsrslvr.dll => MD5 is legit C:\Windows\system32\mpssvc.dll => MD5 is legit C:\Windows\system32\bfe.dll => MD5 is legit C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit C:\Windows\system32\SDRSVC.dll => MD5 is legit C:\Windows\system32\vssvc.exe => MD5 is legit C:\Windows\system32\wscsvc.dll => MD5 is legit C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit C:\Windows\system32\wuaueng.dll => MD5 is legit C:\Windows\system32\qmgr.dll => MD5 is legit C:\Windows\system32\es.dll => MD5 is legit C:\Windows\system32\cryptsvc.dll [2013-09-08 10:00] - [2013-07-09 06:46] - 0140288 ____A (Microsoft Corporation) 7CA1BECEA5DE2643ADDAD32670E7A4C9 C:\Program Files\Windows Defender\MpSvc.dll [2013-09-08 09:56] - [2013-05-27 06:57] - 0680960 ____A (Microsoft Corporation) 082CF481F659FAE0DE51AD060881EB47 C:\Windows\system32\ipnathlp.dll => MD5 is legit C:\Windows\system32\iphlpsvc.dll => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit **** End of log **** Teil 1 Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20-09-2013 Ran by Lasko (administrator) on Lasko-PC on 21-09-2013 21:59:17 Running from C:\Users\Lasko\Desktop Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Macrovision) C:\Windows\system32\drivers\CDAC11BA.EXE (SafeNet Inc.) C:\Windows\system32\hasplms.exe (Microsoft Corporation) C:\MSSQL$SIBBAUWERKE\Binn\sqlservr.exe (Nitro PDF Software) C:\Program Files\Nitro\Pro 8\NitroPDFDriverService8.exe (Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe (Dr. J. Rathlev, D-24222 Schwentinental) C:\Users\Lasko\Programme\Personal Backup 5\Persbackup.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE (Microsoft Corporation) C:\Windows\System32\mobsync.exe () C:\Users\Lasko\Programme\Ditto\Ditto.exe (Dominik Reichl) C:\Program Files\KeePass Password Safe 2\KeePass.exe (Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\usrreq.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [KeePass 2 PreLoad] - C:\Program Files\KeePass Password Safe 2\KeePass.exe [2010624 2013-07-20] (Dominik Reichl) HKLM\...\Run: [BrMfcWnd] - C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.) HKLM\...\Run: [ControlCenter3] - C:\Program Files\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-14] (Avira Operations GmbH & Co. KG) HKLM\...\Policies\Explorer: [NoDrives] 0 HKCU\...\Policies\Explorer: [NoDrives] 0 HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun Startup: C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Persbackup.lnk ShortcutTarget: Persbackup.lnk -> C:\Users\Lasko\Programme\Personal Backup 5\Persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab SearchScopes: HKLM - DefaultScope value is missing. Toolbar: HKLM - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default FF Homepage: www.t-online.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @nitropdf.com/NitroPDF - C:\Program Files\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF) FF SearchPlugin: C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\searchplugins\{0488D87D-B84F-4C94-A4CF-A719B5EFF6E3}.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Click&Clean - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\clickclean@hotcleaner.com FF Extension: Fasterfox Lite - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\FasterFox_Lite@BigRedBrent FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\nostmp FF Extension: Flagfox - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} FF Extension: WOT - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} FF Extension: Memory Fox - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{E173B749-DB5B-4fd2-BA0E-94ECEA0CA55B} FF Extension: finder - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\finder@meingutscheincode.de.xpi FF Extension: firefox - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\firefox@ghostery.com.xpi FF Extension: trackmenot - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\trackmenot@mrl.nyu.edu.xpi FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Users\Lasko\AppData\Roaming\Mozilla\Firefox\Profiles\0mwzsocu.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\TrustChecker ========================== Services (Whitelisted) ================= R2 AntiVirFirewallService; C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe [655928 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [622648 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-14] (Avira Operations GmbH & Co. KG) R2 C-DillaCdaC11BA; C:\Windows\system32\drivers\CDAC11BA.EXE [54784 2013-09-09] (Macrovision) R2 hasplms; C:\Windows\system32\hasplms.exe [4609928 2013-08-09] (SafeNet Inc.) R2 MSSQL$SIBBAUWERKE; C:\MSSQL$SIBBAUWERKE\Binn\sqlservr.exe [9150464 2005-05-04] (Microsoft Corporation) S3 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [73728 2005-05-03] (Microsoft Corporation) R2 NitroDriverReadSpool8; C:\Program Files\Nitro\Pro 8\NitroPDFDriverService8.exe [196616 2013-04-30] (Nitro PDF Software) S3 SQLAgent$SIBBAUWERKE; C:\MSSQL$SIBBAUWERKE\Binn\sqlagent.EXE [323584 2005-05-03] (Microsoft Corporation) R2 StarMoney 9.0 OnlineUpdate; C:\Program Files\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [663184 2013-06-13] (Star Finanz-Software Entwicklung und Vertriebs GmbH) S2 vsmon; C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe -service [x] ==================== Drivers (Whitelisted) ==================== R2 aksfridge; C:\Windows\System32\DRIVERS\aksfridge.sys [376200 2013-08-09] (SafeNet Inc.) R3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [244040 2013-08-09] (SafeNet Inc.) R3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [53192 2013-08-09] (SafeNet Inc.) R3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [296200 2013-08-09] (SafeNet Inc.) R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [92448 2013-09-14] (Avira GmbH) R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [113024 2013-09-14] (Avira GmbH) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-14] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-14] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-09-14] (Avira Operations GmbH & Co. KG) R2 CdaC15BA; C:\Windows\system32\drivers\CDAC15BA.SYS [12464 2013-09-09] (Macrovision Europe Ltd) R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation) R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [608648 2013-08-09] (SafeNet Inc.) R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [133208 2012-01-09] (Kaspersky Lab ZAO) R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11352 2012-01-09] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [468272 2012-01-09] (Kaspersky Lab) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] () R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-14] (Avira GmbH) R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation) R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation) R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation) R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation) R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [455256 2011-05-07] (Check Point Software Technologies LTD) S3 catchme; \??\C:\Users\Lasko\AppData\Local\Temp\catchme.sys [x] S2 ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-21 21:58 - 2013-09-21 21:58 - 01089757 _____ (Farbar) C:\Users\Lasko\Desktop\FRST.exe 2013-09-21 21:45 - 2013-09-21 21:47 - 00002515 _____ C:\Users\Lasko\Desktop\FSS.txt 2013-09-21 21:42 - 2013-09-21 21:42 - 00000884 _____ C:\Users\Lasko\Desktop\checkup.txt 2013-09-21 17:53 - 2013-09-21 17:53 - 00358923 _____ (Farbar) C:\Users\Lasko\Desktop\FSS.exe 2013-09-21 17:52 - 2013-09-21 17:52 - 00891144 _____ C:\Users\Lasko\Desktop\SecurityCheck.exe 2013-09-21 11:45 - 2013-09-21 17:51 - 02347384 _____ (ESET) C:\Users\Lasko\Desktop\esetsmartinstaller_enu.exe 2013-09-21 10:42 - 2013-09-21 10:42 - 00002110 _____ C:\Users\Public\Desktop\StarMoney 9.0 S-Edition.lnk 2013-09-21 10:42 - 2013-09-21 10:42 - 00000000 ____D C:\ProgramData\StarMoney 9.0 2013-09-21 10:40 - 2013-09-21 10:40 - 00000000 ____D C:\Program Files\Common Files\StarFinanz 2013-09-21 10:39 - 2013-09-21 10:44 - 00000000 ____D C:\Program Files\StarMoney 9.0 S-Edition 2013-09-21 09:05 - 2013-09-21 09:20 - 00000995 _____ C:\Users\Lasko\Desktop\JRT.txt 2013-09-21 09:02 - 2013-09-21 09:02 - 00000000 ____D C:\Windows\ERUNT 2013-09-21 08:54 - 2013-09-21 08:57 - 00006257 _____ C:\Users\Lasko\Desktop\AdwCleaner[S0].txt 2013-09-21 08:39 - 2013-09-21 09:02 - 00000000 ____D C:\AdwCleaner 2013-09-21 08:28 - 2013-09-21 08:28 - 01029675 _____ (Thisisu) C:\Users\Lasko\Desktop\JRT.exe 2013-09-21 08:27 - 2013-09-21 08:27 - 01039554 _____ C:\Users\Lasko\Desktop\adwcleaner.exe 2013-09-20 17:13 - 2013-09-20 17:25 - 00000000 ____D C:\Qoobox 2013-09-20 17:13 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-09-20 17:13 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-09-20 17:13 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-09-20 17:13 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-09-20 17:13 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-09-20 17:13 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-09-20 17:13 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-09-20 17:13 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-09-20 17:12 - 2013-09-20 17:24 - 00000000 ____D C:\Windows\erdnt 2013-09-20 17:07 - 2013-09-20 17:07 - 05128554 ____R (Swearware) C:\Users\Lasko\Desktop\ComboFix.exe 2013-09-20 15:58 - 2013-09-20 15:58 - 00003055 _____ C:\Users\Lasko\Desktop\Karten- und Luftbildverzeichnis 2004.lnk 2013-09-20 15:57 - 2013-09-20 15:57 - 00003055 _____ C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Karten- und Luftbildverzeichnis 2004.lnk 2013-09-20 15:57 - 2013-09-20 15:57 - 00000000 ____D C:\Program Files\Borland 2013-09-20 13:53 - 2013-09-20 13:53 - 00000798 _____ C:\Users\Lasko\Documents\acadstk.dmp 2013-09-20 13:45 - 2013-09-21 12:20 - 00017365 _____ C:\CMDTEMP.dxf 2013-09-20 10:45 - 2013-09-20 10:52 - 00009969 _____ C:\Users\Lasko\Desktop\Gmer.txt 2013-09-20 10:21 - 2013-09-20 10:21 - 00000000 ____D C:\FRST 2013-09-20 10:10 - 2013-09-20 10:10 - 00000442 _____ C:\Users\Lasko\Desktop\defogger_disable.log 2013-09-20 10:10 - 2013-09-20 10:10 - 00000000 _____ C:\Users\Lasko\defogger_reenable 2013-09-19 14:04 - 2013-09-19 14:04 - 00377856 _____ C:\Users\Lasko\Desktop\gmer_2.1.19163.exe 2013-09-19 14:02 - 2013-09-21 17:53 - 00000000 ____D C:\Users\Lasko\Downloads\Trojaner-Board 2013-09-19 14:02 - 2013-09-19 14:02 - 00050477 _____ C:\Users\Lasko\Desktop\Defogger.exe 2013-09-18 15:06 - 2013-09-18 15:08 - 00000000 ____D C:\SIB-Bilder 2013-09-18 15:05 - 2013-09-18 15:05 - 00000000 ____D C:\Users\Lasko\Documents\SIBBW 2013-09-18 15:04 - 2013-09-21 09:25 - 00000000 ____D C:\Users\Lasko\SIBBW 2013-09-18 15:01 - 2013-09-18 15:02 - 00009917 _____ C:\Windows\aksdrvsetup.log 2013-09-18 15:01 - 2013-09-18 15:01 - 00001885 _____ C:\Users\Public\Desktop\Bauwerke 1.8 (MSDE).lnk 2013-09-18 15:01 - 2013-09-18 15:01 - 00000167 _____ C:\Windows\ODBCINST.INI 2013-09-18 15:01 - 2013-09-18 15:01 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard 2013-09-18 15:01 - 2001-09-06 07:47 - 00045056 _____ (WPM-Ingenieure GmbH) C:\Windows\system32\SIBDriveBox2.ocx 2013-09-18 15:01 - 2000-08-16 08:12 - 00155920 _____ (Microsoft Corporation) C:\Windows\system32\temp.01B 2013-09-18 15:01 - 2000-08-16 08:12 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\temp.013 2013-09-18 15:01 - 2000-08-16 08:12 - 00041232 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.cpl 2013-09-18 15:01 - 2000-08-16 08:12 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\temp.01C 2013-09-18 15:01 - 2000-07-26 14:37 - 00221456 _____ (Microsoft Corporation) C:\Windows\system32\temp.018 2013-09-18 15:01 - 2000-07-26 14:37 - 00200976 _____ (Microsoft Corporation) C:\Windows\system32\temp.00D 2013-09-18 15:01 - 2000-07-26 14:37 - 00196880 _____ (Microsoft Corporation) C:\Windows\system32\temp.00E 2013-09-18 15:01 - 2000-07-26 14:37 - 00151824 _____ (Microsoft Corporation) C:\Windows\system32\temp.00C 2013-09-18 15:01 - 2000-07-26 14:37 - 00102672 _____ (Microsoft Corporation) C:\Windows\system32\temp.00F 2013-09-18 15:01 - 2000-07-26 14:37 - 00037136 _____ (Microsoft Corporation) C:\Windows\system32\temp.016 2013-09-18 15:01 - 2000-07-26 14:37 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.017 2013-09-18 15:01 - 2000-07-26 14:36 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.01D 2013-09-18 15:01 - 2000-06-27 12:05 - 00026224 _____ (Microsoft Corporation) C:\Windows\system32\temp.019 2013-09-18 15:01 - 2000-06-27 12:05 - 00004656 _____ (Microsoft Corporation) C:\Windows\system32\temp.01F 2013-09-18 15:01 - 2000-06-26 07:15 - 00002233 _____ C:\Windows\system32\~GLH0411.TMP 2013-09-18 15:01 - 2000-06-26 07:15 - 00002151 _____ C:\Windows\system32\~GLH0412.TMP 2013-09-18 15:01 - 2000-05-25 11:58 - 00040960 _____ ( WPM-Ingenieure GMBH) C:\Windows\system32\DriveBox.ocx 2013-09-18 15:01 - 1999-03-15 13:02 - 00045107 _____ (Microsoft Corporation) C:\Windows\system32\temp.014 2013-09-18 15:01 - 1999-03-08 10:50 - 00147728 _____ (Microsoft Corporation) C:\Windows\system32\temp.009 2013-09-18 15:01 - 1999-03-08 10:15 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\temp.010 2013-09-18 15:01 - 1999-02-02 15:56 - 00000421 _____ C:\Windows\system32\odbcinst.cnt 2013-09-18 15:01 - 1999-01-27 12:40 - 00015716 _____ C:\Windows\system32\Sqlsrdme.txt 2013-09-18 15:01 - 1999-01-25 14:00 - 00512272 _____ (Microsoft Corporation) C:\Windows\system32\temp.00A 2013-09-18 15:01 - 1999-01-25 14:00 - 00061712 _____ (Microsoft Corporation) C:\Windows\system32\temp.008 2013-09-18 15:01 - 1998-12-14 13:49 - 00002287 _____ C:\Windows\system32\12520433.cpx 2013-09-18 15:01 - 1998-12-14 08:35 - 00002287 _____ C:\Windows\system32\12520435.cpx 2013-09-18 15:01 - 1998-11-30 08:21 - 00041316 _____ C:\Windows\system32\odbcinst.hlp 2013-09-18 15:01 - 1998-11-25 11:41 - 00049984 _____ C:\Windows\system32\msorcl32.hlp 2013-09-18 15:01 - 1998-11-13 03:25 - 00119056 _____ (Microsoft Corporation) C:\Windows\system32\sqlstr.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00049424 _____ (Microsoft Corporation) C:\Windows\system32\temp.011 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\temp.01E 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\dbmsspxn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\dbmsshrn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00033040 _____ (Microsoft Corporation) C:\Windows\system32\dbmsadsn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00028944 _____ (Microsoft Corporation) C:\Windows\system32\dbmsvinn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00028944 _____ (Microsoft Corporation) C:\Windows\system32\dbmssocn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00028944 _____ (Microsoft Corporation) C:\Windows\system32\dbmsrpcn.dll 2013-09-18 15:01 - 1998-11-13 03:25 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.015 2013-09-18 15:01 - 1998-11-13 03:25 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\temp.012 2013-09-18 15:01 - 1998-11-13 03:23 - 00037136 _____ (Microsoft Corporation) C:\Windows\system32\temp.007 2013-09-18 15:01 - 1998-11-12 23:25 - 00030376 _____ C:\Windows\system32\cliconf.hlp 2013-09-18 15:01 - 1998-11-06 12:40 - 00001926 _____ C:\Windows\system32\msorcl32.cnt 2013-09-18 15:01 - 1998-10-28 16:06 - 00017725 _____ C:\Windows\system32\sqlsodbc.hlp 2013-09-18 15:01 - 1998-10-23 13:10 - 00001938 _____ C:\Windows\system32\msorcrdm.txt 2013-09-18 15:01 - 1998-06-17 00:00 - 00077878 _____ (Microsoft Corporation) C:\Windows\system32\temp.00B 2013-09-18 15:01 - 1998-04-24 00:00 - 00002320 _____ C:\Windows\system32\12500852.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002318 _____ C:\Windows\system32\12510866.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002173 _____ C:\Windows\system32\12520863.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002167 _____ C:\Windows\system32\12520860.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002162 _____ C:\Windows\system32\12520861.cpx 2013-09-18 15:01 - 1998-04-24 00:00 - 00002147 _____ C:\Windows\system32\12520865.cpx 2013-09-18 15:01 - 1997-11-14 04:43 - 00029456 _____ (Microsoft Corporation) C:\Windows\system32\temp.01A 2013-09-18 15:00 - 2013-09-18 15:03 - 00000000 ____D C:\Program Files\BAUWERKE 2013-09-18 15:00 - 2013-09-18 15:00 - 00000000 ____D C:\Windows\system32\Help 2013-09-18 15:00 - 2008-04-15 19:46 - 01724416 _____ (Microsoft Corporation) C:\Windows\system32\gdiplus.dll 2013-09-18 15:00 - 2007-03-21 19:33 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\msvcp71.dll 2013-09-18 15:00 - 2007-03-21 19:33 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\msvcr71.dll 2013-09-18 15:00 - 2007-02-17 17:28 - 02511360 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\haspds_windows.dll 2013-09-18 15:00 - 2004-11-10 11:10 - 00778240 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\hasp_com_windows.dll 2013-09-18 15:00 - 2004-05-13 16:26 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\msvci70.dll 2013-09-18 15:00 - 2004-03-09 19:45 - 00224016 _____ (Microsoft Corporation) C:\Windows\system32\tabctl32.ocx 2013-09-18 15:00 - 2004-03-09 17:45 - 00084512 _____ (Microsoft Corporation) C:\Windows\system32\picclp32.ocx 2013-09-18 15:00 - 2004-03-09 02:00 - 00212240 _____ (Microsoft Corporation) C:\Windows\system32\richtx32.ocx 2013-09-18 15:00 - 2004-02-23 02:00 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\tlbinf32.dll 2013-09-18 15:00 - 2001-02-05 23:59 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\foxhhelp.exe 2013-09-18 15:00 - 2000-07-15 03:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\foxhhelpps.dll 2013-09-18 15:00 - 2000-04-03 20:52 - 00067376 _____ (Microsoft Corporation) C:\Windows\system32\sysinfo.ocx 2013-09-18 15:00 - 2000-03-06 23:00 - 00278581 _____ (Microsoft Corporation) C:\Windows\system32\temp.000 2013-09-18 15:00 - 1999-03-07 23:00 - 00598288 _____ (Microsoft Corporation) C:\Windows\system32\temp.004 2013-09-18 15:00 - 1999-03-07 23:00 - 00164112 _____ (Microsoft Corporation) C:\Windows\system32\temp.005 2013-09-18 15:00 - 1999-03-07 23:00 - 00147728 _____ (Microsoft Corporation) C:\Windows\system32\temp.006 2013-09-18 15:00 - 1999-02-07 23:00 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\temp.002 2013-09-18 15:00 - 1998-09-29 06:44 - 00013919 _____ C:\Windows\system32\vfpodbc.txt 2013-09-18 15:00 - 1998-06-22 23:00 - 00084000 _____ (Microsoft Corporation) C:\Windows\system32\MSOUTL32.OCX 2013-09-18 15:00 - 1998-04-30 00:00 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\temp.003 2013-09-18 15:00 - 1998-04-24 00:00 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\temp.001 2013-09-18 15:00 - 1997-04-24 16:32 - 00220372 _____ C:\Windows\system32\drvvfp.hlp 2013-09-18 15:00 - 1996-09-19 10:27 - 00005902 _____ C:\Windows\system32\drvvfp.cnt 2013-09-18 14:59 - 2013-09-18 14:59 - 15651522 _____ C:\Users\Lasko\Downloads\sib_bauwerke_18_sp23_msde_update.exe 2013-09-18 14:58 - 2013-09-18 14:58 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autostart 2013-09-18 14:56 - 2013-09-18 14:56 - 00212992 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\MSSQL$SIBBAUWERKE 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\SafeNet Sentinel 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\Aladdin Shared 2013-09-18 14:49 - 2013-08-09 09:52 - 04609928 _____ (SafeNet Inc.) C:\Windows\system32\hasplms.exe 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Adobe 2013-09-18 10:42 - 2013-09-18 10:42 - 00000000 ____D C:\Users\Lasko\Downloads\Unlocker 2013-09-18 09:05 - 2013-09-20 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro PDF 2013-09-17 18:39 - 2013-09-17 18:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00001925 _____ C:\Users\Public\Desktop\Nitro Pro 8.lnk 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\ProgramData\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Common Files\Nitro 2013-09-17 18:38 - 2013-04-30 09:10 - 00027144 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon2.dll 2013-09-17 18:38 - 2013-04-30 09:10 - 00018440 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui2.dll 2013-09-17 18:37 - 2013-09-17 18:37 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Downloaded Installations 2013-09-17 18:29 - 2013-09-17 18:37 - 00000000 ____D C:\Users\Lasko\Downloads\Nitro.Pro.Enterprise.v 8.5.3.14.x86 2013-09-17 13:21 - 2012-07-26 05:39 - 00526952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-09-17 13:21 - 2012-07-26 05:39 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2013-09-17 13:21 - 2012-07-26 04:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2013-09-17 13:21 - 2012-06-02 16:34 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2013-09-17 13:20 - 2012-07-26 05:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2013-09-17 13:20 - 2012-07-26 05:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2013-09-17 13:20 - 2012-07-26 05:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2013-09-17 13:20 - 2012-07-26 05:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2013-09-17 13:20 - 2012-07-26 05:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2013-09-17 13:20 - 2012-07-26 04:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2013-09-17 13:20 - 2012-07-26 04:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2013-09-17 13:20 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2013-09-17 12:59 - 2013-01-24 06:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2013-09-17 12:59 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2013-09-17 12:59 - 2012-08-22 19:16 - 00712048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2013-09-17 12:59 - 2012-07-04 21:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2013-09-17 12:59 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2013-09-17 12:59 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2013-09-17 12:59 - 2011-03-25 04:58 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-09-17 12:59 - 2011-03-25 04:58 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-09-17 12:59 - 2011-03-25 04:58 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-09-17 12:59 - 2011-03-25 04:57 - 00005888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-09-17 12:59 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2013-09-17 12:58 - 2012-08-21 22:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2013-09-17 12:58 - 2011-03-11 07:39 - 00148864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2013-09-17 12:58 - 2011-03-11 07:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2013-09-17 12:58 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2013-09-17 12:58 - 2011-03-11 07:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2013-09-17 12:58 - 2011-03-11 07:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2013-09-17 12:58 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2013-09-17 12:58 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2013-09-17 12:58 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2013-09-17 12:58 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2013-09-17 12:57 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-09-17 12:57 - 2013-03-19 06:53 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2013-09-17 12:57 - 2013-03-19 05:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2013-09-17 12:57 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2013-09-17 12:57 - 2012-10-03 18:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2013-09-17 12:57 - 2012-10-03 17:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2013-09-17 12:57 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2013-09-17 12:56 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\system32\locale.nls 2013-09-17 12:56 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2013-09-17 12:56 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2013-09-17 12:56 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2013-09-17 12:56 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2013-09-17 12:56 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2013-09-17 12:55 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-09-17 12:55 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2013-09-17 12:55 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2013-09-17 12:55 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2013-09-17 12:55 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2013-09-17 12:55 - 2012-05-05 09:46 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2013-09-17 12:55 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2013-09-17 12:55 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2013-09-17 12:54 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-09-17 12:54 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2013-09-17 12:54 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2013-09-17 12:54 - 2012-05-01 06:44 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2013-09-17 12:54 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2013-09-17 12:54 - 2011-04-22 21:14 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2013-09-17 12:44 - 2013-09-17 12:44 - 00000000 ____D C:\Users\Lasko\Documents\ForceField Shared Files 2013-09-17 09:12 - 2013-09-17 09:12 - 00000000 ____D C:\Users\Lasko\Downloads\ASUS-Treiber 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\Program Files\AskPartnerNetwork 2013-09-17 09:01 - 2013-09-17 09:01 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Avira 2013-09-15 13:45 - 2013-09-21 11:18 - 00000000 ____D C:\Users\Lasko\Documents\PersBackup 2013-09-15 13:01 - 2013-09-15 13:01 - 00000000 ____D C:\Windows\system32\config\RCCBakup 2013-09-14 16:16 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\Downloads\Update-Checker(Filehippo) 2013-09-14 13:59 - 2013-09-14 13:59 - 00000000 ____D C:\Users\Lasko\Word 2013-09-14 11:46 - 2013-09-14 11:46 - 00000000 ____D C:\SoloApp 2013-09-14 11:12 - 2013-09-14 11:12 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-09-13 15:26 - 2013-09-14 11:09 - 00002017 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-09-13 15:26 - 2013-09-14 11:07 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00113024 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00092448 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-09-13 15:26 - 2013-09-14 11:07 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys 2013-09-13 15:25 - 2013-09-17 12:41 - 00000000 ____D C:\Program Files\Avira 2013-09-13 15:15 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\Avira 2013-09-12 17:36 - 2013-09-13 12:41 - 00000000 ____D C:\Users\Lasko\Downloads\AdobeFlashPlayer 2013-09-12 17:10 - 2013-09-12 17:10 - 00002703 _____ C:\Users\Lasko\Desktop\Microsoft Office Project 2007.lnk 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Windows\PCHEALTH 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Program Files\Microsoft Works 2013-09-12 17:07 - 2013-09-12 17:07 - 00000000 ___RD C:\MSOCache 2013-09-12 11:23 - 2013-09-12 11:23 - 00001074 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Malwarebytes 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-12 11:23 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-09-12 11:18 - 2013-09-21 08:40 - 00000000 ____D C:\Users\Lasko\Downloads\Malwarebytes 2013-09-12 10:22 - 2013-09-12 10:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Virtual PC 2013-09-11 17:08 - 2013-09-11 17:08 - 00002675 _____ C:\Users\Lasko\Desktop\Nero CoverDesigner.lnk 2013-09-11 17:08 - 2013-09-11 17:08 - 00000000 ____D C:\Users\Lasko\Documents\Nero 2013-09-11 16:50 - 2013-09-13 17:11 - 00000000 ____D C:\Users\Lasko\Downloads\CD-DVD-Brenner 2013-09-11 16:27 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\PersBackup5 2013-09-11 16:27 - 2013-09-11 16:27 - 00001045 _____ C:\Users\Public\Desktop\Personal Backup 5.lnk 2013-09-11 14:55 - 2013-09-11 14:55 - 00000000 ____D C:\Users\Lasko\Documents\default 2013-09-11 14:50 - 2013-09-11 14:50 - 00000000 ____D C:\Users\Lasko\AppData\Local\ashampoo 2013-09-11 14:19 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-11 14:19 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-11 14:19 - 2013-08-10 05:59 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-09-11 14:19 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-11 14:19 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-09-11 14:19 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-11 14:19 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-09-11 14:18 - 2013-09-11 14:18 - 00278934 _____ C:\Windows\msxml4-KB954430-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00289664 _____ C:\Windows\msxml4-KB973688-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00000000 ____D C:\Program Files\MSXML 4.0 2013-09-11 14:15 - 2013-08-08 03:03 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-09-11 14:15 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2013-09-11 14:15 - 2013-08-02 03:49 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2013-09-11 14:15 - 2013-08-02 03:49 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2013-09-11 14:15 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-09-11 14:15 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-09-11 14:15 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-09-11 14:15 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2013-09-10 19:23 - 2013-09-10 19:23 - 00002175 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Google 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Program Files\Google 2013-09-10 17:25 - 2013-09-10 17:25 - 00001921 _____ C:\Users\Lasko\Desktop\SpeedCommander - Verknüpfung.lnk 2013-09-10 14:49 - 2013-09-10 14:49 - 00000000 ____D C:\Users\Lasko\Documents\Updater 2013-09-10 14:22 - 2013-09-10 14:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nero 2013-09-10 14:16 - 2013-09-11 17:04 - 00000000 ____D C:\ProgramData\Nero 2013-09-10 14:16 - 2013-09-11 17:04 - 00000000 ____D C:\Program Files\Common Files\Nero 2013-09-10 14:16 - 2013-09-10 14:16 - 00002696 _____ C:\Users\Public\Desktop\Nero StartSmart.lnk 2013-09-10 10:43 - 2013-09-10 10:44 - 00000000 ____D C:\Users\Lasko\Scan 2013-09-10 10:12 - 2013-09-10 10:12 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Brother 2013-09-10 10:05 - 2013-09-10 10:05 - 00000425 _____ C:\Windows\BRWMARK.INI 2013-09-10 10:05 - 2013-09-10 10:05 - 00000027 _____ C:\Windows\BRPP2KA.INI 2013-09-10 10:04 - 2013-09-10 10:04 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\InstallShield 2013-09-10 10:04 - 2008-06-17 15:33 - 00167936 ____N (brother) C:\Windows\system32\NSSearch.dll 2013-09-10 10:04 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2.dll 2013-09-10 10:04 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2L.dll 2013-09-10 10:04 - 2007-12-13 22:16 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2S.dll 2013-09-10 10:04 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\system32\BroSNMP.dll 2013-09-10 09:50 - 2005-12-09 04:52 - 00000060 ____R C:\Program Files\BRINST.INI 2013-09-09 20:23 - 2013-09-09 20:23 - 00054784 _____ (Macrovision) C:\Windows\system32\Drivers\CDAC11BA.EXE 2013-09-09 20:23 - 2013-09-09 20:23 - 00012464 _____ (Macrovision Europe Ltd) C:\Windows\system32\Drivers\CDAC15BA.SYS 2013-09-09 20:23 - 2013-09-09 20:23 - 00000000 ____D C:\Program Files\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00002071 _____ C:\Users\Public\Desktop\AutoCAD 2004 Deu.lnk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Windows\system32\1031 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Users\Lasko\AppData\Local\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Microsoft Office 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\AnswerWorks 4.0 2013-09-09 20:21 - 2013-09-09 20:26 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Autodesk 2013-09-09 20:21 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2013-09-09 20:21 - 2013-09-09 20:21 - 00000000 ____D C:\ProgramData\Autodesk 2013-09-09 18:36 - 2013-09-09 18:36 - 00002675 _____ C:\Users\Lasko\Desktop\Microsoft Word.lnk 2013-09-09 18:34 - 2013-09-18 15:01 - 00000494 _____ C:\Windows\ODBC.INI 2013-09-09 18:33 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Common Files\Designer 2013-09-09 18:33 - 2013-09-09 18:33 - 00002715 _____ C:\Users\Lasko\Desktop\Microsoft Excel.lnk 2013-09-09 18:21 - 2013-09-18 14:05 - 00000000 ___RD C:\Users\Lasko\Virtual Machines 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-TW 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-CN 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\th-TH 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\sv-SE 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ru-RU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-PT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-BR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pl-PL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nl-NL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nb-NO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ko-KR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ja-JP 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\it-IT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\hu-HU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\he-IL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fr-FR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fi-FI 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\el-GR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Program Files\Windows Virtual PC 2013-09-09 18:07 - 2010-11-20 14:30 - 00296064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcvmm.sys 2013-09-09 18:07 - 2010-11-20 14:30 - 00172416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpchbus.sys 2013-09-09 18:07 - 2010-11-20 14:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\vpchbuspipe.dll 2013-09-09 18:07 - 2010-11-20 14:17 - 02171392 _____ (Microsoft Corporation) C:\Windows\system32\VPCWizard.exe 2013-09-09 18:07 - 2010-11-20 14:17 - 01260032 _____ (Microsoft Corporation) C:\Windows\system32\VPCSettings.exe 2013-09-09 18:07 - 2010-11-20 12:50 - 00559616 _____ (Microsoft Corporation) C:\Windows\system32\VMCPropertyHandler.dll 2013-09-09 18:07 - 2010-11-20 12:50 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcusb.sys 2013-09-09 18:07 - 2010-11-20 12:50 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcnfltr.sys 2013-09-09 18:06 - 2010-11-20 14:17 - 03330560 _____ (Microsoft Corporation) C:\Windows\system32\vpc.exe 2013-09-09 18:06 - 2010-11-20 12:52 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\VMWindow.exe 2013-09-09 18:06 - 2010-11-20 12:52 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\vmsal.exe 2013-09-09 16:49 - 2013-09-10 10:05 - 00000050 _____ C:\Windows\system32\bridf08a.dat 2013-09-09 16:48 - 2013-09-10 10:05 - 00000000 ____D C:\Program Files\Brother 2013-09-09 16:48 - 2009-07-21 15:31 - 01534464 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWia09b.dll 2013-09-09 16:48 - 2009-02-24 10:37 - 00053760 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrUsi09a.dll 2013-09-09 16:46 - 2013-09-09 16:46 - 00000000 ____D C:\ProgramData\Brother 2013-09-09 16:39 - 2013-09-17 12:41 - 00000000 ____D C:\Users\Lasko\Downloads\Brother-DCP-6690CW 2013-09-09 16:17 - 2013-09-17 18:28 - 00001053 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk 2013-09-09 16:17 - 2013-09-09 16:17 - 00000000 ____D C:\Program Files\TeamViewer 2013-09-09 11:01 - 2013-09-13 17:20 - 00000000 ____D C:\Users\Lasko\ZIP 2013-09-09 10:57 - 2013-09-09 10:57 - 00000821 _____ C:\Users\Lasko\Desktop\7-Zip File Manager.lnk 2013-09-09 10:56 - 2013-09-09 10:57 - 00000000 ____D C:\Users\Lasko\7-Zip 2013-09-09 08:58 - 2013-09-13 17:11 - 00000000 ____D C:\Users\Lasko\Downloads\WindowsXP-Mode 2013-09-08 17:04 - 2013-09-17 12:43 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\IrfanView 2013-09-08 17:04 - 2013-09-08 17:04 - 00000967 _____ C:\Users\Public\Desktop\IrfanView.lnk 2013-09-08 16:56 - 2013-09-08 16:57 - 00000000 ____D C:\Users\Lasko\Downloads\Bildbetrachter 2013-09-08 16:49 - 2013-09-08 16:49 - 00000972 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-09-08 16:08 - 2012-01-09 18:59 - 00468272 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys 2013-09-08 16:08 - 2012-01-09 18:59 - 00133208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys 2013-09-08 16:08 - 2012-01-09 18:59 - 00011352 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl2.sys 2013-09-08 15:57 - 2013-09-17 13:05 - 00415928 _____ C:\Windows\system32\Drivers\vsconfig.xml 2013-09-08 15:35 - 2013-09-08 15:35 - 96566691 _____ C:\Windows\system32\ŝ듮ᩌd 2013-09-08 15:13 - 2013-09-17 12:43 - 00000000 ____D C:\ProgramData\FLEXnet 2013-09-08 15:13 - 2013-09-13 14:35 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2013-09-08 15:13 - 2013-09-08 15:13 - 00000000 ____D C:\Users\Lasko\Documents\Updater5 2013-09-08 15:11 - 2013-09-17 13:06 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-09-08 15:11 - 2013-09-17 13:04 - 00000000 ____D C:\Program Files\Adobe 2013-09-08 15:11 - 2013-09-17 12:20 - 00000000 ____D C:\ProgramData\Adobe 2013-09-08 14:43 - 2013-09-08 14:43 - 00000000 ____D C:\Users\Lasko\Documents\Steuer-Sparbuch 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Buhl Data Service 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl Data Service 2013-09-08 14:38 - 2013-09-08 14:43 - 00000670 _____ C:\Windows\wiso.ini 2013-09-08 14:38 - 2013-09-08 14:38 - 00001812 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2013.lnk 2013-09-08 14:38 - 2013-09-08 14:38 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl 2013-09-08 14:34 - 2013-09-08 14:39 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH 2013-09-08 13:01 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-09-08 13:01 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-09-08 13:01 - 2010-09-30 08:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-09-08 12:59 - 2013-09-11 14:17 - 00000000 ____D C:\Windows\system32\MRT 2013-09-08 12:59 - 2013-09-11 14:16 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-09-08 12:56 - 2012-03-01 07:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2013-09-08 12:56 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-09-08 12:56 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2013-09-08 12:56 - 2010-02-11 09:10 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2013-09-08 12:17 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-09-08 11:46 - 2013-09-08 11:46 - 00001914 _____ C:\Users\Public\Desktop\Secure Eraser.lnk 2013-09-08 11:46 - 2013-09-08 11:46 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\ASCOMP Software 2013-09-08 11:44 - 2013-08-13 08:38 - 00032328 _____ C:\Windows\Launcher.exe 2013-09-08 11:41 - 2013-09-13 17:11 - 00000000 ____D C:\Users\Lasko\Downloads\SecureEraser 2013-09-08 11:24 - 2013-09-18 10:28 - 00000000 ____D C:\Users\Lasko\Downloads\CCleaner 2013-09-08 10:31 - 2013-09-08 10:31 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-09-08 10:31 - 2013-09-08 10:31 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-09-08 10:31 - 2013-09-08 10:31 - 00745472 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00719360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00629248 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-09-08 10:31 - 2013-09-08 10:31 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00242200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-09-08 10:31 - 2013-09-08 10:31 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-09-08 10:30 - 2013-09-08 10:30 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2013-09-08 10:29 - 2013-09-08 10:29 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-09-08 10:28 - 2013-09-08 10:33 - 00013972 _____ C:\Windows\IE10_main.log 2013-09-08 10:28 - 2013-09-08 10:28 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-09-08 10:11 - 2013-09-21 21:56 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Ditto 2013-09-08 10:00 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-09-08 10:00 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-09-08 10:00 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-09-08 10:00 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-09-08 10:00 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-09-08 10:00 - 2013-04-12 15:45 - 01211752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2013-09-08 09:59 - 2013-02-12 05:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2013-09-08 09:59 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2013-09-08 09:59 - 2011-04-29 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2013-09-08 09:59 - 2011-04-29 04:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2013-09-08 09:59 - 2011-04-29 04:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2013-09-08 09:59 - 2011-04-25 04:18 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-09-08 09:59 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2013-09-08 09:59 - 2011-03-03 07:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2013-09-08 09:59 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2013-09-08 09:58 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-09-08 09:58 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-09-08 09:58 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-09-08 09:58 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2013-09-08 09:58 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2013-09-08 09:58 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2013-09-08 09:58 - 2013-03-19 06:48 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2013-09-08 09:58 - 2013-03-19 04:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2013-09-08 09:58 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-09-08 09:58 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2013-09-08 09:58 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-09-08 09:58 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2013-09-08 09:58 - 2012-06-06 07:05 - 01236992 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2013-09-08 09:58 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2013-09-08 09:58 - 2012-06-02 06:45 - 00134000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-09-08 09:58 - 2012-06-02 06:45 - 00067440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-09-08 09:58 - 2012-06-02 06:40 - 00369336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-09-08 09:58 - 2012-06-02 06:40 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-09-08 09:58 - 2012-04-28 05:17 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2013-09-08 09:58 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2013-09-08 09:58 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2013-09-08 09:58 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2013-09-08 09:58 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2013-09-08 09:58 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2013-09-08 09:58 - 2011-07-09 04:30 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2013-09-08 09:58 - 2011-05-24 12:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2013-09-08 09:58 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2013-09-08 09:58 - 2011-04-27 04:17 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2013-09-08 09:58 - 2011-04-27 04:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2013-09-08 09:58 - 2010-06-26 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2013-09-08 09:57 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-09-08 09:57 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-09-08 09:57 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-09-08 09:57 - 2013-04-10 07:18 - 00728424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-09-08 09:57 - 2013-04-10 07:18 - 00218984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2013-09-08 09:57 - 2013-01-03 07:04 - 00187752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2013-09-08 09:57 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-09-08 09:57 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2013-09-08 09:57 - 2012-08-22 19:16 - 00240496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2013-09-08 09:57 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2013-09-08 09:57 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2013-09-08 09:57 - 2012-07-04 23:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2013-09-08 09:57 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2013-09-08 09:57 - 2012-05-14 06:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2013-09-08 09:57 - 2012-04-26 06:45 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2013-09-08 09:57 - 2012-04-26 06:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2013-09-08 09:57 - 2012-04-26 06:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2013-09-08 09:57 - 2012-03-17 09:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2013-09-08 09:57 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2013-09-08 09:57 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2013-09-08 09:57 - 2011-11-17 07:34 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-09-08 09:57 - 2011-11-17 07:34 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-09-08 09:57 - 2011-11-17 07:34 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-09-08 09:57 - 2011-11-17 07:32 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-09-08 09:57 - 2011-11-17 07:29 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-09-08 09:57 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2013-09-08 09:57 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2013-09-08 09:57 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2013-09-08 09:57 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2013-09-08 09:57 - 2011-02-12 07:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2013-09-08 09:57 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2013-09-08 09:57 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2013-09-08 09:57 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2013-09-08 09:56 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-09-08 09:56 - 2013-06-15 05:40 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2013-09-08 09:56 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-09-08 09:56 - 2013-02-27 07:05 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2013-09-08 09:56 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-09-08 09:56 - 2013-02-27 06:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2013-09-08 09:56 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2013-09-08 09:56 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2013-09-08 09:56 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2013-09-08 09:56 - 2011-02-23 06:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2013-09-08 09:38 - 2013-09-08 09:38 - 00000000 ____D C:\Users\Lasko\Downloads\SpeedProject 2013-09-08 00:41 - 2013-09-08 00:41 - 00000000 ____D C:\Hotfix 2013-09-08 00:41 - 2013-09-07 14:49 - 00000000 ____D C:\Windows\Panther 2013-09-08 00:41 - 2011-02-16 03:57 - 00000025 ___RH C:\Windows\version 2013-09-08 00:41 - 2011-02-16 03:57 - 00000013 ____R C:\Windows\csup.txt 2013-09-08 00:40 - 2013-09-17 13:25 - 00000000 ____D C:\Windows\system32\Drivers\de-DE 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\XPSViewer 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\de 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\0407 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\de-DE 2013-09-07 18:21 - 2013-09-21 11:13 - 00000000 ____D C:\Users\Lasko\Downloads\KeePass 2013-09-07 18:20 - 2013-09-20 15:57 - 00000000 ____D C:\Users\Lasko\Programme 2013-09-07 17:38 - 2013-09-21 18:13 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\KeePass 2013-09-07 17:30 - 2013-09-07 17:40 - 00000000 ____D C:\Program Files\KeePass Password Safe 2 2013-09-07 17:30 - 2013-09-07 17:30 - 00001068 _____ C:\Users\Lasko\Desktop\KeePass 2.lnk 2013-09-07 17:08 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\Business Objects 2013-09-07 17:07 - 2013-09-21 10:38 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-09-07 17:01 - 2013-09-07 16:57 - 00002629 _____ C:\Users\Public\Desktop\Corel PHOTO-PAINT X6.lnk 2013-09-07 17:01 - 2013-09-07 16:57 - 00002613 _____ C:\Users\Public\Desktop\CorelDRAW X6.lnk 2013-09-07 17:00 - 2013-09-07 17:00 - 00000000 ____D C:\Program Files\Common Files\Protexis 2013-09-07 16:57 - 2013-09-07 16:57 - 00000000 ____D C:\Users\Public\Documents\Corel 2013-09-07 16:46 - 2013-09-21 10:49 - 00127328 _____ C:\Users\Lasko\AppData\Local\GDIPFONTCACHEV1.DAT 2013-09-07 16:43 - 2013-09-07 16:46 - 00000000 ____D C:\ProgramData\Protexis 2013-09-07 16:43 - 2013-09-07 16:44 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Corel 2013-09-07 16:39 - 2013-09-07 18:27 - 00000000 ____D C:\Users\Lasko\Documents\Corel 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\Documents\Visual Studio 2008 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Microsoft Help 2013-09-07 16:38 - 2013-09-12 17:10 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-09-07 16:38 - 2013-09-07 17:00 - 00000000 ____D C:\ProgramData\Corel 2013-09-07 16:38 - 2013-09-07 16:40 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft SDKs 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Common Files\Corel 2013-09-07 16:35 - 2013-09-07 16:35 - 00000000 ____D C:\Program Files\Corel 2013-09-07 16:31 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-09-07 16:29 - 2013-09-07 17:01 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X6 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Macromedia 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Macromedia 2013-09-07 16:10 - 2013-09-07 16:10 - 00002032 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Local\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-09-07 16:07 - 2013-09-07 16:08 - 19681592 _____ (Mozilla) C:\Users\Lasko\Downloads\Thunderbird Setup 17.0.8.exe 2013-09-07 16:03 - 2013-09-17 12:41 - 00000000 ____D C:\ProgramData\Avira 2013-09-07 15:58 - 2013-09-21 21:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-07 15:58 - 2013-09-13 12:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-09-07 15:58 - 2013-09-13 12:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-09-07 15:58 - 2013-09-07 15:58 - 00000000 ____D C:\Windows\system32\Macromed 2013-09-07 15:26 - 2013-09-07 15:27 - 00000000 ____D C:\Program Files\Windows XP Mode 2013-09-07 15:06 - 2013-08-07 04:22 - 00238872 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-09-07 15:00 - 2012-04-11 18:30 - 00543336 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys 2013-09-07 15:00 - 2012-04-11 18:30 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll 2013-09-07 15:00 - 2012-04-11 18:30 - 00080488 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll 2013-09-07 14:57 - 2013-09-18 10:50 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-07 14:57 - 2013-09-07 16:21 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-09-07 14:57 - 2013-09-07 14:57 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ___HD C:\ProgramData\CanonBJ 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Local\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-07 14:53 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2013-09-07 14:53 - 2012-02-17 06:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2013-09-07 14:53 - 2006-09-12 20:00 - 00197632 _____ (CANON INC.) C:\Windows\system32\CNMLM86.DLL 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\MSDOS.SYS 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\IO.SYS 2013-09-07 14:50 - 2013-09-07 14:50 - 00001409 _____ C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-09-07 14:50 - 2012-06-03 00:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2013-09-07 14:50 - 2012-06-03 00:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2013-09-07 14:50 - 2012-06-03 00:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2013-09-07 14:50 - 2012-06-03 00:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2013-09-07 14:50 - 2012-06-03 00:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2013-09-07 14:50 - 2012-06-03 00:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2013-09-07 14:50 - 2012-06-03 00:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2013-09-07 14:50 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2013-09-07 14:50 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2013-09-07 14:49 - 2013-09-21 21:53 - 01341921 _____ C:\Windows\WindowsUpdate.log 2013-09-07 14:49 - 2013-09-20 15:58 - 00000000 ____D C:\Users\Lasko\AppData\Local\VirtualStore 2013-09-07 14:49 - 2013-09-20 10:10 - 00000000 ____D C:\Users\Lasko 2013-09-07 14:49 - 2013-09-07 14:49 - 00000020 ___SH C:\Users\Lasko\ntuser.ini 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 ____D C:\Recovery 2013-09-07 14:49 - 2009-07-14 06:42 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-09-07 14:49 - 2009-07-14 06:37 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\system32\atiicdxx.dat 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-09-07 14:43 - 2013-09-07 14:45 - 00001355 _____ C:\Windows\TSSysprep.log 2013-09-07 14:43 - 2013-09-07 14:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf |
21.09.2013, 21:13 | #12 |
| C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start Teil 2 FRST Code:
ATTFilter ==================== One Month Modified Files and Folders ======= 2013-09-21 21:58 - 2013-09-21 21:58 - 01089757 _____ (Farbar) C:\Users\Lasko\Desktop\FRST.exe 2013-09-21 21:58 - 2013-09-07 14:49 - 01341921 _____ C:\Windows\WindowsUpdate.log 2013-09-21 21:56 - 2013-09-08 10:11 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Ditto 2013-09-21 21:54 - 2010-11-20 23:48 - 00337972 _____ C:\Windows\PFRO.log 2013-09-21 21:54 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-21 21:54 - 2009-07-14 06:39 - 00032094 _____ C:\Windows\setupact.log 2013-09-21 21:54 - 2009-07-14 06:33 - 00485648 _____ C:\Windows\system32\FNTCACHE.DAT 2013-09-21 21:47 - 2013-09-21 21:45 - 00002515 _____ C:\Users\Lasko\Desktop\FSS.txt 2013-09-21 21:45 - 2013-09-07 15:58 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-21 21:42 - 2013-09-21 21:42 - 00000884 _____ C:\Users\Lasko\Desktop\checkup.txt 2013-09-21 18:16 - 2010-11-20 23:01 - 01673206 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-21 18:13 - 2013-09-07 17:38 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\KeePass 2013-09-21 17:53 - 2013-09-21 17:53 - 00358923 _____ (Farbar) C:\Users\Lasko\Desktop\FSS.exe 2013-09-21 17:53 - 2013-09-19 14:02 - 00000000 ____D C:\Users\Lasko\Downloads\Trojaner-Board 2013-09-21 17:52 - 2013-09-21 17:52 - 00891144 _____ C:\Users\Lasko\Desktop\SecurityCheck.exe 2013-09-21 17:51 - 2013-09-21 11:45 - 02347384 _____ (ESET) C:\Users\Lasko\Desktop\esetsmartinstaller_enu.exe 2013-09-21 12:20 - 2013-09-20 13:45 - 00017365 _____ C:\CMDTEMP.dxf 2013-09-21 11:18 - 2013-09-15 13:45 - 00000000 ____D C:\Users\Lasko\Documents\PersBackup 2013-09-21 11:13 - 2013-09-07 18:21 - 00000000 ____D C:\Users\Lasko\Downloads\KeePass 2013-09-21 10:49 - 2013-09-07 16:46 - 00127328 _____ C:\Users\Lasko\AppData\Local\GDIPFONTCACHEV1.DAT 2013-09-21 10:44 - 2013-09-21 10:39 - 00000000 ____D C:\Program Files\StarMoney 9.0 S-Edition 2013-09-21 10:42 - 2013-09-21 10:42 - 00002110 _____ C:\Users\Public\Desktop\StarMoney 9.0 S-Edition.lnk 2013-09-21 10:42 - 2013-09-21 10:42 - 00000000 ____D C:\ProgramData\StarMoney 9.0 2013-09-21 10:41 - 2009-07-14 06:34 - 00025648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-21 10:41 - 2009-07-14 06:34 - 00025648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-21 10:41 - 2009-07-14 04:04 - 00017486 _____ C:\Windows\system32\Drivers\etc\services 2013-09-21 10:40 - 2013-09-21 10:40 - 00000000 ____D C:\Program Files\Common Files\StarFinanz 2013-09-21 10:38 - 2013-09-07 17:07 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-09-21 09:25 - 2013-09-18 15:04 - 00000000 ____D C:\Users\Lasko\SIBBW 2013-09-21 09:20 - 2013-09-21 09:05 - 00000995 _____ C:\Users\Lasko\Desktop\JRT.txt 2013-09-21 09:02 - 2013-09-21 09:02 - 00000000 ____D C:\Windows\ERUNT 2013-09-21 09:02 - 2013-09-21 08:39 - 00000000 ____D C:\AdwCleaner 2013-09-21 08:57 - 2013-09-21 08:54 - 00006257 _____ C:\Users\Lasko\Desktop\AdwCleaner[S0].txt 2013-09-21 08:40 - 2013-09-12 11:18 - 00000000 ____D C:\Users\Lasko\Downloads\Malwarebytes 2013-09-21 08:28 - 2013-09-21 08:28 - 01029675 _____ (Thisisu) C:\Users\Lasko\Desktop\JRT.exe 2013-09-21 08:27 - 2013-09-21 08:27 - 01039554 _____ C:\Users\Lasko\Desktop\adwcleaner.exe 2013-09-20 17:25 - 2013-09-20 17:13 - 00000000 ____D C:\Qoobox 2013-09-20 17:24 - 2013-09-20 17:12 - 00000000 ____D C:\Windows\erdnt 2013-09-20 17:24 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public 2013-09-20 17:22 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini 2013-09-20 17:07 - 2013-09-20 17:07 - 05128554 ____R (Swearware) C:\Users\Lasko\Desktop\ComboFix.exe 2013-09-20 15:58 - 2013-09-20 15:58 - 00003055 _____ C:\Users\Lasko\Desktop\Karten- und Luftbildverzeichnis 2004.lnk 2013-09-20 15:58 - 2013-09-07 14:49 - 00000000 ____D C:\Users\Lasko\AppData\Local\VirtualStore 2013-09-20 15:57 - 2013-09-20 15:57 - 00003055 _____ C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Karten- und Luftbildverzeichnis 2004.lnk 2013-09-20 15:57 - 2013-09-20 15:57 - 00000000 ____D C:\Program Files\Borland 2013-09-20 15:57 - 2013-09-07 18:20 - 00000000 ____D C:\Users\Lasko\Programme 2013-09-20 14:39 - 2013-09-18 09:05 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro PDF 2013-09-20 13:53 - 2013-09-20 13:53 - 00000798 _____ C:\Users\Lasko\Documents\acadstk.dmp 2013-09-20 10:52 - 2013-09-20 10:45 - 00009969 _____ C:\Users\Lasko\Desktop\Gmer.txt 2013-09-20 10:21 - 2013-09-20 10:21 - 00000000 ____D C:\FRST 2013-09-20 10:10 - 2013-09-20 10:10 - 00000442 _____ C:\Users\Lasko\Desktop\defogger_disable.log 2013-09-20 10:10 - 2013-09-20 10:10 - 00000000 _____ C:\Users\Lasko\defogger_reenable 2013-09-20 10:10 - 2013-09-07 14:49 - 00000000 ____D C:\Users\Lasko 2013-09-19 14:04 - 2013-09-19 14:04 - 00377856 _____ C:\Users\Lasko\Desktop\gmer_2.1.19163.exe 2013-09-19 14:02 - 2013-09-19 14:02 - 00050477 _____ C:\Users\Lasko\Desktop\Defogger.exe 2013-09-19 13:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache 2013-09-19 11:32 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-09-18 17:35 - 2010-11-21 02:46 - 00000000 ____D C:\Windows\ShellNew 2013-09-18 17:35 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Microsoft Games 2013-09-18 17:35 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker 2013-09-18 17:35 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-09-18 15:08 - 2013-09-18 15:06 - 00000000 ____D C:\SIB-Bilder 2013-09-18 15:05 - 2013-09-18 15:05 - 00000000 ____D C:\Users\Lasko\Documents\SIBBW 2013-09-18 15:03 - 2013-09-18 15:00 - 00000000 ____D C:\Program Files\BAUWERKE 2013-09-18 15:02 - 2013-09-18 15:01 - 00009917 _____ C:\Windows\aksdrvsetup.log 2013-09-18 15:01 - 2013-09-18 15:01 - 00001885 _____ C:\Users\Public\Desktop\Bauwerke 1.8 (MSDE).lnk 2013-09-18 15:01 - 2013-09-18 15:01 - 00000167 _____ C:\Windows\ODBCINST.INI 2013-09-18 15:01 - 2013-09-18 15:01 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard 2013-09-18 15:01 - 2013-09-09 18:34 - 00000494 _____ C:\Windows\ODBC.INI 2013-09-18 15:00 - 2013-09-18 15:00 - 00000000 ____D C:\Windows\system32\Help 2013-09-18 15:00 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-09-18 14:59 - 2013-09-18 14:59 - 15651522 _____ C:\Users\Lasko\Downloads\sib_bauwerke_18_sp23_msde_update.exe 2013-09-18 14:58 - 2013-09-18 14:58 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autostart 2013-09-18 14:56 - 2013-09-18 14:56 - 00212992 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-09-18 14:55 - 2013-09-18 14:55 - 00000000 ____D C:\MSSQL$SIBBAUWERKE 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\SafeNet Sentinel 2013-09-18 14:49 - 2013-09-18 14:49 - 00000000 ____D C:\Program Files\Common Files\Aladdin Shared 2013-09-18 14:05 - 2013-09-09 18:21 - 00000000 ___RD C:\Users\Lasko\Virtual Machines 2013-09-18 12:12 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Globalization 2013-09-18 10:50 - 2013-09-07 14:57 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2013-09-18 10:47 - 2013-09-18 10:47 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Adobe 2013-09-18 10:42 - 2013-09-18 10:42 - 00000000 ____D C:\Users\Lasko\Downloads\Unlocker 2013-09-18 10:28 - 2013-09-08 11:24 - 00000000 ____D C:\Users\Lasko\Downloads\CCleaner 2013-09-17 18:39 - 2013-09-17 18:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00001925 _____ C:\Users\Public\Desktop\Nitro Pro 8.lnk 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\ProgramData\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Nitro 2013-09-17 18:38 - 2013-09-17 18:38 - 00000000 ____D C:\Program Files\Common Files\Nitro 2013-09-17 18:37 - 2013-09-17 18:37 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Downloaded Installations 2013-09-17 18:37 - 2013-09-17 18:29 - 00000000 ____D C:\Users\Lasko\Downloads\Nitro.Pro.Enterprise.v 8.5.3.14.x86 2013-09-17 18:28 - 2013-09-09 16:17 - 00001053 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk 2013-09-17 13:25 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\Drivers\de-DE 2013-09-17 13:06 - 2013-09-08 15:11 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-09-17 13:05 - 2013-09-08 15:57 - 00415928 _____ C:\Windows\system32\Drivers\vsconfig.xml 2013-09-17 13:04 - 2013-09-08 15:11 - 00000000 ____D C:\Program Files\Adobe 2013-09-17 12:44 - 2013-09-17 12:44 - 00000000 ____D C:\Users\Lasko\Documents\ForceField Shared Files 2013-09-17 12:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp 2013-09-17 12:43 - 2013-09-14 16:16 - 00000000 ____D C:\Users\Lasko\Downloads\Update-Checker(Filehippo) 2013-09-17 12:43 - 2013-09-13 15:15 - 00000000 ____D C:\Users\Lasko\Avira 2013-09-17 12:43 - 2013-09-11 16:27 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\PersBackup5 2013-09-17 12:43 - 2013-09-08 17:04 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\IrfanView 2013-09-17 12:43 - 2013-09-08 15:13 - 00000000 ____D C:\ProgramData\FLEXnet 2013-09-17 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF 2013-09-17 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration 2013-09-17 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat 2013-09-17 12:41 - 2013-09-13 15:25 - 00000000 ____D C:\Program Files\Avira 2013-09-17 12:41 - 2013-09-09 16:39 - 00000000 ____D C:\Users\Lasko\Downloads\Brother-DCP-6690CW 2013-09-17 12:41 - 2013-09-07 16:03 - 00000000 ____D C:\ProgramData\Avira 2013-09-17 12:20 - 2013-09-08 15:11 - 00000000 ____D C:\ProgramData\Adobe 2013-09-17 09:12 - 2013-09-17 09:12 - 00000000 ____D C:\Users\Lasko\Downloads\ASUS-Treiber 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-09-17 09:02 - 2013-09-17 09:02 - 00000000 ____D C:\Program Files\AskPartnerNetwork 2013-09-17 09:01 - 2013-09-17 09:01 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Avira 2013-09-16 13:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\LiveKernelReports 2013-09-15 19:45 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles 2013-09-15 13:05 - 2009-07-14 04:03 - 49283072 _____ C:\Windows\system32\config\SOFTWARE.bak 2013-09-15 13:05 - 2009-07-14 04:03 - 13369344 _____ C:\Windows\system32\config\SYSTEM.bak 2013-09-15 13:05 - 2009-07-14 04:03 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak 2013-09-15 13:02 - 2009-07-14 04:03 - 00262144 _____ C:\Windows\system32\config\SAM.bak 2013-09-15 13:01 - 2013-09-15 13:01 - 00000000 ____D C:\Windows\system32\config\RCCBakup 2013-09-14 13:59 - 2013-09-14 13:59 - 00000000 ____D C:\Users\Lasko\Word 2013-09-14 11:46 - 2013-09-14 11:46 - 00000000 ____D C:\SoloApp 2013-09-14 11:12 - 2013-09-14 11:12 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-09-14 11:09 - 2013-09-13 15:26 - 00002017 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-09-14 11:07 - 2013-09-13 15:26 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00113024 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00092448 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-09-14 11:07 - 2013-09-13 15:26 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys 2013-09-13 17:20 - 2013-09-09 11:01 - 00000000 ____D C:\Users\Lasko\ZIP 2013-09-13 17:11 - 2013-09-11 16:50 - 00000000 ____D C:\Users\Lasko\Downloads\CD-DVD-Brenner 2013-09-13 17:11 - 2013-09-09 08:58 - 00000000 ____D C:\Users\Lasko\Downloads\WindowsXP-Mode 2013-09-13 17:11 - 2013-09-08 11:41 - 00000000 ____D C:\Users\Lasko\Downloads\SecureEraser 2013-09-13 14:35 - 2013-09-08 15:13 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2013-09-13 12:41 - 2013-09-12 17:36 - 00000000 ____D C:\Users\Lasko\Downloads\AdobeFlashPlayer 2013-09-13 12:41 - 2013-09-07 15:58 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-09-13 12:41 - 2013-09-07 15:58 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-09-12 17:10 - 2013-09-12 17:10 - 00002703 _____ C:\Users\Lasko\Desktop\Microsoft Office Project 2007.lnk 2013-09-12 17:10 - 2013-09-07 16:38 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Windows\PCHEALTH 2013-09-12 17:09 - 2013-09-12 17:09 - 00000000 ____D C:\Program Files\Microsoft Works 2013-09-12 17:07 - 2013-09-12 17:07 - 00000000 ___RD C:\MSOCache 2013-09-12 11:23 - 2013-09-12 11:23 - 00001074 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Malwarebytes 2013-09-12 11:23 - 2013-09-12 11:23 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-12 10:22 - 2013-09-12 10:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Virtual PC 2013-09-11 17:08 - 2013-09-11 17:08 - 00002675 _____ C:\Users\Lasko\Desktop\Nero CoverDesigner.lnk 2013-09-11 17:08 - 2013-09-11 17:08 - 00000000 ____D C:\Users\Lasko\Documents\Nero 2013-09-11 17:04 - 2013-09-10 14:16 - 00000000 ____D C:\ProgramData\Nero 2013-09-11 17:04 - 2013-09-10 14:16 - 00000000 ____D C:\Program Files\Common Files\Nero 2013-09-11 16:27 - 2013-09-11 16:27 - 00001045 _____ C:\Users\Public\Desktop\Personal Backup 5.lnk 2013-09-11 14:55 - 2013-09-11 14:55 - 00000000 ____D C:\Users\Lasko\Documents\default 2013-09-11 14:50 - 2013-09-11 14:50 - 00000000 ____D C:\Users\Lasko\AppData\Local\ashampoo 2013-09-11 14:18 - 2013-09-11 14:18 - 00278934 _____ C:\Windows\msxml4-KB954430-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00289664 _____ C:\Windows\msxml4-KB973688-enu.LOG 2013-09-11 14:17 - 2013-09-11 14:17 - 00000000 ____D C:\Program Files\MSXML 4.0 2013-09-11 14:17 - 2013-09-08 12:59 - 00000000 ____D C:\Windows\system32\MRT 2013-09-11 14:16 - 2013-09-08 12:59 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-09-10 19:23 - 2013-09-10 19:23 - 00002175 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Google 2013-09-10 19:23 - 2013-09-10 19:23 - 00000000 ____D C:\Program Files\Google 2013-09-10 17:25 - 2013-09-10 17:25 - 00001921 _____ C:\Users\Lasko\Desktop\SpeedCommander - Verknüpfung.lnk 2013-09-10 14:49 - 2013-09-10 14:49 - 00000000 ____D C:\Users\Lasko\Documents\Updater 2013-09-10 14:22 - 2013-09-10 14:22 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Nero 2013-09-10 14:16 - 2013-09-10 14:16 - 00002696 _____ C:\Users\Public\Desktop\Nero StartSmart.lnk 2013-09-10 10:44 - 2013-09-10 10:43 - 00000000 ____D C:\Users\Lasko\Scan 2013-09-10 10:12 - 2013-09-10 10:12 - 00000000 ___RD C:\Users\Lasko\AppData\Roaming\Brother 2013-09-10 10:05 - 2013-09-10 10:05 - 00000425 _____ C:\Windows\BRWMARK.INI 2013-09-10 10:05 - 2013-09-10 10:05 - 00000027 _____ C:\Windows\BRPP2KA.INI 2013-09-10 10:05 - 2013-09-09 16:49 - 00000050 _____ C:\Windows\system32\bridf08a.dat 2013-09-10 10:05 - 2013-09-09 16:48 - 00000000 ____D C:\Program Files\Brother 2013-09-10 10:04 - 2013-09-10 10:04 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\InstallShield 2013-09-09 20:26 - 2013-09-09 20:21 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Autodesk 2013-09-09 20:23 - 2013-09-09 20:23 - 00054784 _____ (Macrovision) C:\Windows\system32\Drivers\CDAC11BA.EXE 2013-09-09 20:23 - 2013-09-09 20:23 - 00012464 _____ (Macrovision Europe Ltd) C:\Windows\system32\Drivers\CDAC15BA.SYS 2013-09-09 20:23 - 2013-09-09 20:23 - 00000000 ____D C:\Program Files\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00002071 _____ C:\Users\Public\Desktop\AutoCAD 2004 Deu.lnk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Windows\system32\1031 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Users\Lasko\AppData\Local\Autodesk 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\Microsoft Office 2013-09-09 20:22 - 2013-09-09 20:22 - 00000000 ____D C:\Program Files\AnswerWorks 4.0 2013-09-09 20:22 - 2013-09-09 20:21 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2013-09-09 20:22 - 2013-09-09 18:33 - 00000000 ____D C:\Program Files\Common Files\Designer 2013-09-09 20:21 - 2013-09-09 20:21 - 00000000 ____D C:\ProgramData\Autodesk 2013-09-09 20:21 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Help 2013-09-09 18:36 - 2013-09-09 18:36 - 00002675 _____ C:\Users\Lasko\Desktop\Microsoft Word.lnk 2013-09-09 18:33 - 2013-09-09 18:33 - 00002715 _____ C:\Users\Lasko\Desktop\Microsoft Excel.lnk 2013-09-09 18:33 - 2009-07-14 04:37 - 00000000 __RSD C:\Windows\Media 2013-09-09 18:32 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-TW 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\zh-CN 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\th-TH 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\sv-SE 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ru-RU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-PT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pt-BR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\pl-PL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nl-NL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\nb-NO 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ko-KR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ja-JP 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\it-IT 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\hu-HU 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\he-IL 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fr-FR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\fi-FI 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\el-GR 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA 2013-09-09 18:18 - 2013-09-09 18:18 - 00000000 ____D C:\Program Files\Windows Virtual PC 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-TW 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-CN 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\tr-TR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\th-TH 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\sv-SE 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ru-RU 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ro-RO 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pt-PT 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pt-BR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pl-PL 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\nl-NL 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\nb-NO 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ko-KR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ja-JP 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\it-IT 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\hu-HU 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\he-IL 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\fr-FR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\fi-FI 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\el-GR 2013-09-09 18:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ar-SA 2013-09-09 16:49 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\twain_32 2013-09-09 16:46 - 2013-09-09 16:46 - 00000000 ____D C:\ProgramData\Brother 2013-09-09 16:17 - 2013-09-09 16:17 - 00000000 ____D C:\Program Files\TeamViewer 2013-09-09 10:57 - 2013-09-09 10:57 - 00000821 _____ C:\Users\Lasko\Desktop\7-Zip File Manager.lnk 2013-09-09 10:57 - 2013-09-09 10:56 - 00000000 ____D C:\Users\Lasko\7-Zip 2013-09-08 17:04 - 2013-09-08 17:04 - 00000967 _____ C:\Users\Public\Desktop\IrfanView.lnk 2013-09-08 16:57 - 2013-09-08 16:56 - 00000000 ____D C:\Users\Lasko\Downloads\Bildbetrachter 2013-09-08 16:49 - 2013-09-08 16:49 - 00000972 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-09-08 15:35 - 2013-09-08 15:35 - 96566691 _____ C:\Windows\system32\ŝ듮ᩌd 2013-09-08 15:13 - 2013-09-08 15:13 - 00000000 ____D C:\Users\Lasko\Documents\Updater5 2013-09-08 14:43 - 2013-09-08 14:43 - 00000000 ____D C:\Users\Lasko\Documents\Steuer-Sparbuch 2013-09-08 14:43 - 2013-09-08 14:38 - 00000670 _____ C:\Windows\wiso.ini 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Buhl Data Service 2013-09-08 14:39 - 2013-09-08 14:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl Data Service 2013-09-08 14:39 - 2013-09-08 14:34 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH 2013-09-08 14:38 - 2013-09-08 14:38 - 00001812 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2013.lnk 2013-09-08 14:38 - 2013-09-08 14:38 - 00000000 ____D C:\Users\Lasko\AppData\Local\Buhl 2013-09-08 13:17 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender 2013-09-08 13:17 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System 2013-09-08 11:46 - 2013-09-08 11:46 - 00001914 _____ C:\Users\Public\Desktop\Secure Eraser.lnk 2013-09-08 11:46 - 2013-09-08 11:46 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\ASCOMP Software 2013-09-08 10:35 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-HK 2013-09-08 10:33 - 2013-09-08 10:28 - 00013972 _____ C:\Windows\IE10_main.log 2013-09-08 10:31 - 2013-09-08 10:31 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-09-08 10:31 - 2013-09-08 10:31 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-09-08 10:31 - 2013-09-08 10:31 - 00745472 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00719360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00629248 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-09-08 10:31 - 2013-09-08 10:31 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00242200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-09-08 10:31 - 2013-09-08 10:31 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-09-08 10:31 - 2013-09-08 10:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-09-08 10:31 - 2013-09-08 10:31 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-09-08 10:30 - 2013-09-08 10:30 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2013-09-08 10:29 - 2013-09-08 10:29 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-09-08 10:29 - 2013-09-08 10:29 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-09-08 10:28 - 2013-09-08 10:28 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-09-08 09:38 - 2013-09-08 09:38 - 00000000 ____D C:\Users\Lasko\Downloads\SpeedProject 2013-09-08 00:41 - 2013-09-08 00:41 - 00000000 ____D C:\Hotfix 2013-09-08 00:41 - 2009-07-14 06:57 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG 2013-09-08 00:41 - 2009-07-14 06:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\XPSViewer 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\de 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\system32\0407 2013-09-08 00:40 - 2013-09-08 00:40 - 00000000 ____D C:\Windows\de-DE 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\winrm 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\WCN 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\slmgr 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts 2013-09-08 00:40 - 2010-11-21 02:38 - 00000000 ____D C:\Windows\DigitalLocker 2013-09-08 00:40 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2013-09-08 00:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-09-08 00:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\MUI 2013-09-08 00:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\com 2013-09-08 00:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\IME 2013-09-07 18:27 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\Documents\Corel 2013-09-07 17:40 - 2013-09-07 17:30 - 00000000 ____D C:\Program Files\KeePass Password Safe 2 2013-09-07 17:30 - 2013-09-07 17:30 - 00001068 _____ C:\Users\Lasko\Desktop\KeePass 2.lnk 2013-09-07 17:08 - 2013-09-07 17:08 - 00000000 ____D C:\Program Files\Business Objects 2013-09-07 17:01 - 2013-09-07 16:29 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X6 2013-09-07 17:00 - 2013-09-07 17:00 - 00000000 ____D C:\Program Files\Common Files\Protexis 2013-09-07 17:00 - 2013-09-07 16:38 - 00000000 ____D C:\ProgramData\Corel 2013-09-07 16:57 - 2013-09-07 17:01 - 00002629 _____ C:\Users\Public\Desktop\Corel PHOTO-PAINT X6.lnk 2013-09-07 16:57 - 2013-09-07 17:01 - 00002613 _____ C:\Users\Public\Desktop\CorelDRAW X6.lnk 2013-09-07 16:57 - 2013-09-07 16:57 - 00000000 ____D C:\Users\Public\Documents\Corel 2013-09-07 16:46 - 2013-09-07 16:43 - 00000000 ____D C:\ProgramData\Protexis 2013-09-07 16:44 - 2013-09-07 16:43 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Corel 2013-09-07 16:40 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\Documents\Visual Studio 2008 2013-09-07 16:39 - 2013-09-07 16:39 - 00000000 ____D C:\Users\Lasko\AppData\Local\Microsoft Help 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Microsoft SDKs 2013-09-07 16:38 - 2013-09-07 16:38 - 00000000 ____D C:\Program Files\Common Files\Corel 2013-09-07 16:38 - 2013-09-07 16:31 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-09-07 16:35 - 2013-09-07 16:35 - 00000000 ____D C:\Program Files\Corel 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Macromedia 2013-09-07 16:23 - 2013-09-07 16:23 - 00000000 ____D C:\Users\Lasko\AppData\Local\Macromedia 2013-09-07 16:21 - 2013-09-07 14:57 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-09-07 16:10 - 2013-09-07 16:10 - 00002032 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Users\Lasko\AppData\Local\Thunderbird 2013-09-07 16:10 - 2013-09-07 16:10 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-09-07 16:08 - 2013-09-07 16:07 - 19681592 _____ (Mozilla) C:\Users\Lasko\Downloads\Thunderbird Setup 17.0.8.exe 2013-09-07 15:58 - 2013-09-07 15:58 - 00000000 ____D C:\Windows\system32\Macromed 2013-09-07 15:27 - 2013-09-07 15:26 - 00000000 ____D C:\Program Files\Windows XP Mode 2013-09-07 14:57 - 2013-09-07 14:57 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ___HD C:\ProgramData\CanonBJ 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Roaming\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\Users\Lasko\AppData\Local\Mozilla 2013-09-07 14:57 - 2013-09-07 14:57 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\MSDOS.SYS 2013-09-07 14:51 - 2013-09-07 14:51 - 00000000 __RSH C:\IO.SYS 2013-09-07 14:50 - 2013-09-07 14:50 - 00001409 _____ C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-09-07 14:49 - 2013-09-08 00:41 - 00000000 ____D C:\Windows\Panther 2013-09-07 14:49 - 2013-09-07 14:49 - 00000020 ___SH C:\Users\Lasko\ntuser.ini 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Lasko\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\Programme 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-09-07 14:49 - 2013-09-07 14:49 - 00000000 ____D C:\Recovery 2013-09-07 14:49 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\restore 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Public\Libraries 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Default 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\Recovery 2013-09-07 14:49 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Windows NT 2013-09-07 14:45 - 2013-09-07 14:43 - 00001355 _____ C:\Windows\TSSysprep.log 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\system32\atiicdxx.dat 2013-09-07 14:44 - 2013-09-07 14:44 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-09-07 14:43 - 2013-09-07 14:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2013-09-07 14:43 - 2010-11-21 02:46 - 00000000 ____D C:\Windows\CSC 2013-09-07 14:43 - 2009-07-14 06:34 - 00002790 _____ C:\Windows\DtcInstall.log ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-21 13:03 ==================== End Of Log ============================ Keine Probleme mit RunDLL mehr. Das Fenster öffnet sich nicht mehr. Gibt es noch eine Möglichkeit meinen Desktop von all den Programmen und Logfile zu befreien oder reicht nur löschen? Gruß Lasko Geändert von Lasko (21.09.2013 um 21:22 Uhr) Grund: Textergänzugen |
21.09.2013, 21:30 | #13 |
/// the machine /// TB-Ausbilder | C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start Machen wir jetzt. Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.09.2013, 22:58 | #14 |
| C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start Hi Schrauber, Probleme mit RunDLL sind beseitig. Alle Programme laufen, ausser Avira (Avira Internet Security aktivierte den Email Schutz nicht. Nach Neuinstallation Fehler scheinbar behoben). Nun läuft wieder alles. Ich möchte Dir noch einmal für deine Bemühungen danken. Ich wünsche noch ein schönes Restwochenende und nun Gute Nacht. Es ist spät geworden. Danke noch einmal und Gruß Lasko |
22.09.2013, 13:07 | #15 |
/// the machine /// TB-Ausbilder | C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu C:\Programm Files\HomeTab\TBUpdater.dll erscheint beim Win7 Start |
avira, beim starten, beseitigung, betriebssystem, datei, desktop, falsch, forum, gelöscht, hochfahren, home, hometab\tbupdater.dll, internet, malwareprogramm, meldung, modul, problem, programm, quarantäne, rundll, security, start, starten, system, win, win7, windows |