| |
| |||||||
Log-Analyse und Auswertung: Werde "PUP.Optional.Conduit.A" nicht los.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
25.11.2013, 16:05
| #1 |
 |  Werde "PUP.Optional.Conduit.A" nicht los. Hallo ihr Lieben, ich hab ein Problem mit etwas Maleware. Anfang letzter Woche meldete Avast mir "bösartige Website blockiert", obwohl der PC nur nebenbei lief. Ein anschließender Scan ergab 22 Infizierte Dateien (darunter waren unter anderem Dateien von Windows, Avast selbst, und meinen Internet Explorern). Ich habe daraufhinn soviele wie möglich der betroffenen Dateien gelöscht, Meine Daten gesichert, und PC auf Werkseinstellung zurücksetzen lassen. Als ich heute weiter mein System einrichten und dabei meinen Internet-Explorer updaten wollte, meldete Avast wieder "bösartige Website blockiert". Ein darauffolgender Scan zeigte jedoch nichts ausfälliges. Daraufhin hab ich mir malewarebytes besorgt. Malewarebytes fand "PUP.Optional.Conduit.A" (siehe log). Könnt ihr mir bitte helfen die Schadsoftware loszuwerden? Meine Daten wurden von dem Infizierten System auf einen USB-Stick gesichert. Wie bekomme ich meine Daten sicher von dem USB-Stick herunter? Vielen Dank für eure Zeit. Das FRST-log ist leider zu lang. ich reiche es nach sobald ich es gezipt oder als PDF konvertiert bekomme. Edit: FRST log ist als PDF im Anhang. Malewarebytes: Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.11.25.02 Windows 7 x64 NTFS Internet Explorer 9.0.8112.16421 kai :: KAI-PC [Administrator] Schutz: Aktiviert 25.11.2013 11:58:53 MBAM-log-2013-11-25 (13-32-47).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 334016 Laufzeit: 38 Minute(n), 52 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 1 C:\Users\kai\AppData\Local\Temp\CT3317209 (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. Infizierte Dateien: 3 C:\Users\kai\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A7N7Q6M3\spstub[1].exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\kai\Downloads\Internet_Explorer_10.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\kai\AppData\Local\Temp\CT3317209\ddt.csf (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. (Ende) Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.11.25.02 Windows 7 x64 NTFS Internet Explorer 9.0.8112.16421 kai :: KAI-PC [Administrator] Schutz: Aktiviert 25.11.2013 11:51:25 MBAM-log-2013-11-25 (11-56-23).txt Art des Suchlaufs: Flash-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: Registrierung | Dateisystem | P2P Durchsuchte Objekte: 173400 Laufzeit: 39 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 1 C:\Users\kai\AppData\Local\Temp\CT3317209 (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. Infizierte Dateien: 1 C:\Users\kai\AppData\Local\Temp\CT3317209\ddt.csf (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. (Ende) Defogger: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:17 on 25/11/2013 (kai)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-11-2013
Ran by kai at 2013-11-25 14:20:22
Running from C:\Users\kai\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A7N7Q6M3
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
==================== Installed Programs ======================
Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 1.5.0.7220)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.152)
Adobe Photoshop Elements 8.0 (x32 Version: 8.0)
Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)
Advertising Center (x32 Version: 0.0.0.2)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.95)
Alcor Micro USB Card Reader (x32 Version: 1.9.17.06019)
ATI Catalyst Install Manager (Version: 3.0.758.0)
avast! Free Antivirus (x32 Version: 9.0.2008)
Backup Manager Basic (x32 Version: 2.0.0.68)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)
Bluetooth Win7 Suite (64) (Version: 7.01.000.18)
Broadcom Gigabit NetLink Controller (Version: 14.2.4.2)
Build-a-lot 2 (x32 Version: 2.2.0.95)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2010.0122.858.16002)
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0122.858.16002)
Catalyst Control Center Graphics Full New (x32 Version: 2010.0122.858.16002)
Catalyst Control Center Graphics Light (x32 Version: 2010.0122.858.16002)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0122.858.16002)
Catalyst Control Center InstallProxy (x32 Version: 2010.0122.858.16002)
Catalyst Control Center Localization All (x32 Version: 2010.0122.858.16002)
CCC Help Chinese Standard (x32 Version: 2010.0122.0857.16002)
CCC Help Chinese Traditional (x32 Version: 2010.0122.0857.16002)
CCC Help Czech (x32 Version: 2010.0122.0857.16002)
CCC Help Danish (x32 Version: 2010.0122.0857.16002)
CCC Help Dutch (x32 Version: 2010.0122.0857.16002)
CCC Help English (x32 Version: 2010.0122.0857.16002)
CCC Help Finnish (x32 Version: 2010.0122.0857.16002)
CCC Help French (x32 Version: 2010.0122.0857.16002)
CCC Help German (x32 Version: 2010.0122.0857.16002)
CCC Help Greek (x32 Version: 2010.0122.0857.16002)
CCC Help Hungarian (x32 Version: 2010.0122.0857.16002)
CCC Help Italian (x32 Version: 2010.0122.0857.16002)
CCC Help Japanese (x32 Version: 2010.0122.0857.16002)
CCC Help Korean (x32 Version: 2010.0122.0857.16002)
CCC Help Norwegian (x32 Version: 2010.0122.0857.16002)
CCC Help Polish (x32 Version: 2010.0122.0857.16002)
CCC Help Portuguese (x32 Version: 2010.0122.0857.16002)
CCC Help Russian (x32 Version: 2010.0122.0857.16002)
CCC Help Spanish (x32 Version: 2010.0122.0857.16002)
CCC Help Swedish (x32 Version: 2010.0122.0857.16002)
CCC Help Thai (x32 Version: 2010.0122.0857.16002)
CCC Help Turkish (x32 Version: 2010.0122.0857.16002)
ccc-core-static (x32 Version: 2010.0122.858.16002)
ccc-utility64 (Version: 2010.0122.858.16002)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95)
eBay Worldwide (x32 Version: 2.1.0901)
Farm Frenzy (x32 Version: 2.2.0.95)
FATE (x32 Version: 2.2.0.95)
Final Drive Nitro (x32 Version: 2.2.0.95)
Google Chrome (x32 Version: 31.0.1650.57)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)
Google Update Helper (x32 Version: 1.3.21.165)
Identity Card (x32 Version: 1.00.3003)
ImagXpress (x32 Version: 7.0.74.0)
Insaniquarium Deluxe (x32 Version: 2.2.0.95)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.95)
John Deere Drive Green (x32 Version: 2.2.0.95)
Junk Mail filter update (x32 Version: 14.0.8117.416)
Launch Manager (x32 Version: 4.0.14)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (x32 Version: 4.0.50401.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nero 9 Essentials (x32)
Nero ControlCenter (x32 Version: 9.0.0.1)
Nero DiscSpeed (x32 Version: 5.4.13.100)
Nero DiscSpeed Help (x32 Version: 5.4.4.100)
Nero DriveSpeed (x32 Version: 4.4.12.100)
Nero DriveSpeed Help (x32 Version: 4.4.4.100)
Nero Express Help (x32 Version: 9.4.37.100)
Nero InfoTool (x32 Version: 6.4.12.100)
Nero InfoTool Help (x32 Version: 6.4.4.100)
Nero Installer (x32 Version: 4.4.9.0)
Nero Online Upgrade (x32 Version: 1.3.0.0)
Nero StartSmart (x32 Version: 9.4.37.100)
Nero StartSmart Help (x32 Version: 9.4.27.100)
Nero StartSmart OEM (x32 Version: 9.4.10.100)
NeroExpress (x32 Version: 9.4.37.100)
neroxml (x32 Version: 1.0.0)
Norton Internet Security (x32 Version: 18.7.0.13)
Norton Online Backup (x32 Version: 2.1.17869)
Packard Bell Game Console (x32)
Packard Bell Games (x32 Version: 1.0.1.3)
Packard Bell InfoCentre (x32 Version: 3.02.3000)
Packard Bell MyBackup (x32 Version: 2.0.0.68)
Packard Bell Power Management (x32 Version: 5.00.3005)
Packard Bell Recovery Management (x32 Version: 4.05.3013)
Packard Bell Registration (x32 Version: 1.03.3003)
Packard Bell ScreenSaver (x32 Version: 1.1.0915.2010)
Packard Bell Social Networks (x32 Version: 1.0.1901)
Packard Bell Updater (x32 Version: 1.02.3001)
Penguins! (x32 Version: 2.2.0.95)
Plants vs. Zombies (x32 Version: 2.2.0.95)
Polar Bowler (x32 Version: 2.2.0.95)
Polar Golfer (x32 Version: 2.2.0.95)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6167)
Secure Download Manager (x32 Version: 3.1.30)
Synaptics Pointing Device Driver (Version: 14.0.6.0)
Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.6)
Video Web Camera (x32 Version: 2.0.4.6)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.95)
Welcome Center (x32 Version: 1.02.3004)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8117.0416)
Windows Live Communications Platform (x32 Version: 14.0.8117.416)
Windows Live Essentials (x32 Version: 14.0.8117.0416)
Windows Live Essentials (x32 Version: 14.0.8117.416)
Windows Live Fotogalerie (x32 Version: 14.0.8117.416)
Windows Live Mail (x32 Version: 14.0.8117.0416)
Windows Live Messenger (x32 Version: 14.0.8117.0416)
Windows Live Movie Maker (x32 Version: 14.0.8117.0416)
Windows Live Sync (x32 Version: 14.0.8117.416)
Windows Live Writer (x32 Version: 14.0.8117.0416)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
Zuma Deluxe (x32 Version: 2.2.0.95)
Zuma's Revenge (x32 Version: 2.2.0.95)
==================== Restore Points =========================
24-11-2013 18:50:17 Installed Java 7 Update 45
24-11-2013 20:16:50 Secure Download Manager wird installiert
24-11-2013 22:02:30 Windows Update
25-11-2013 07:12:43 Windows Update
25-11-2013 10:24:05 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {42496D37-9052-4C41-9FDC-A42507BC722D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-24] (AVAST Software)
Task: {74E95002-7669-42D4-A094-CDE375D6FC43} - System32\Tasks\Symantec\Norton Error Processor 18.7.0.13 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\symerr.exe [2012-01-28] (Symantec Corporation)
Task: {99366D91-6C12-4FA7-B73A-FF06474BD366} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Packard Bell\Packard Bell Recovery Management\NotificationCenter\Notification.exe [2010-06-24] (Acer)
Task: {AB23A6EE-176E-4674-8EA8-FDBDF85CC259} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.0.13 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\symerr.exe [2012-01-28] (Symantec Corporation)
Task: {BCC3506F-F59D-4C50-8285-52C5437B64B0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-24] (Google Inc.)
Task: {C9D2DC56-F0F7-49BB-A893-19320F272C75} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-24] (Google Inc.)
Task: {E539DC62-FB0C-4128-AD6B-AE5E5586E894} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {EC76D112-1987-49DB-ABD9-24836203A69E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-24] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2010-01-07 14:42 - 2010-01-07 14:42 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-11-24 16:40 - 2013-11-24 16:40 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-11-25 12:38 - 2013-11-25 11:06 - 02147840 _____ () C:\Program Files\AVAST Software\Avast\defs\13112500\algo.dll
2010-06-28 23:20 - 2010-06-28 23:20 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\sqlite3.dll
2010-06-28 23:12 - 2010-06-28 23:12 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\ACE.dll
2013-11-25 01:20 - 2009-05-20 23:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll
2013-11-24 19:40 - 2013-11-24 19:40 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-11-25 09:00 - 2013-11-14 12:28 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libglesv2.dll
2013-11-25 09:00 - 2013-11-14 12:28 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libegl.dll
2013-11-25 09:00 - 2013-11-14 12:29 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll
2013-11-25 09:00 - 2013-11-14 12:29 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
2013-11-25 09:00 - 2013-11-14 12:28 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ffmpegsumo.dll
2013-11-25 11:23 - 2013-11-25 11:23 - 00011264 _____ () C:\Users\kai\AppData\Local\Temp\nst908.tmp\System.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/25/2013 09:39:34 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (11/25/2013 09:38:44 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (11/25/2013 08:05:39 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: UNS.exe, Version: 6.0.40.1213, Zeitstempel: 0x4b8ee429
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x71426a64
ID des fehlerhaften Prozesses: 0xbd4
Startzeit der fehlerhaften Anwendung: 0xUNS.exe0
Pfad der fehlerhaften Anwendung: UNS.exe1
Pfad des fehlerhaften Moduls: UNS.exe2
Berichtskennung: UNS.exe3
Error: (11/25/2013 08:05:39 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: UpdaterService.exe, Version: 1.0.0.8, Zeitstempel: 0x4b614046
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x71426a64
ID des fehlerhaften Prozesses: 0x84c
Startzeit der fehlerhaften Anwendung: 0xUpdaterService.exe0
Pfad der fehlerhaften Anwendung: UpdaterService.exe1
Pfad des fehlerhaften Moduls: UpdaterService.exe2
Berichtskennung: UpdaterService.exe3
Error: (11/25/2013 08:05:39 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ccSvcHst.exe, Version: 10.1.1.16, Zeitstempel: 0x4daa1893
Name des fehlerhaften Moduls: kernel32.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x50e6605d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x713a9775
ID des fehlerhaften Prozesses: 0xb50
Startzeit der fehlerhaften Anwendung: 0xccSvcHst.exe0
Pfad der fehlerhaften Anwendung: ccSvcHst.exe1
Pfad des fehlerhaften Moduls: ccSvcHst.exe2
Berichtskennung: ccSvcHst.exe3
Error: (11/24/2013 11:44:20 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: MSXML 4.0 SP2 (KB973688) -- Error 1935. An error occured during the installation of assembly component {7B2B4EA5-1028-B7E6-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9876.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"
Error: (11/24/2013 11:36:31 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: MSXML 4.0 SP2 (KB954430) -- Error 1935. An error occured during the installation of assembly component {7B30B69B-0E6C-B7E0-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9870.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"
Error: (11/24/2013 06:06:33 PM) (Source: Microsoft-Windows-RestartManager) (User: kai-PC)
Description: Die Anwendung oder der Dienst "Internet Explorer" konnte nicht heruntergefahren werden.
Error: (11/24/2013 06:06:33 PM) (Source: Microsoft-Windows-RestartManager) (User: kai-PC)
Description: Die Anwendung oder der Dienst "Internet Explorer" konnte nicht heruntergefahren werden.
Error: (11/24/2013 06:06:33 PM) (Source: Microsoft-Windows-RestartManager) (User: kai-PC)
Description: Die Anwendung oder der Dienst "Bing Bar" konnte nicht heruntergefahren werden.
System errors:
=============
Error: (11/25/2013 08:09:59 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler beendet:
%%16405
Error: (11/25/2013 08:07:46 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 25.11.2013 um 08:05:29 unerwartet heruntergefahren.
Error: (11/25/2013 08:05:39 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Norton Internet Security" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/25/2013 08:05:38 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/25/2013 08:05:38 AM) (Source: Service Control Manager) (User: )
Description: Dienst "NTI IScheduleSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/25/2013 08:05:38 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intel(R) Management and Security Application Local Management Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/25/2013 08:05:38 AM) (Source: Service Control Manager) (User: )
Description: Dienst "GREGService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/25/2013 08:05:38 AM) (Source: Service Control Manager) (User: )
Description: Dienst "Dritek WMI Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/25/2013 08:05:38 AM) (Source: Service Control Manager) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/25/2013 08:05:38 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Druckwarteschlange" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Microsoft Office Sessions:
=========================
Error: (11/25/2013 09:39:34 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8
Error: (11/25/2013 09:38:44 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
Error: (11/25/2013 08:05:39 AM) (Source: Application Error)(User: )
Description: UNS.exe6.0.40.12134b8ee429unknown0.0.0.000000000c000000571426a64bd401cee9aca932fab9C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exeunknownfd2e0acb-559f-11e3-b7da-70f1a1f9af97
Error: (11/25/2013 08:05:39 AM) (Source: Application Error)(User: )
Description: UpdaterService.exe1.0.0.84b614046unknown0.0.0.000000000c000000571426a6484c01cee9ac5165187eC:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exeunknownfd24ac5a-559f-11e3-b7da-70f1a1f9af97
Error: (11/25/2013 08:05:39 AM) (Source: Application Error)(User: )
Description: ccSvcHst.exe10.1.1.164daa1893kernel32.dll_unloaded0.0.0.050e6605dc0000005713a9775b5001cee9ac60e78fc7C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exekernel32.dllfd24854a-559f-11e3-b7da-70f1a1f9af97
Error: (11/24/2013 11:44:20 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: MSXML 4.0 SP2 (KB973688) -- Error 1935. An error occured during the installation of assembly component {7B2B4EA5-1028-B7E6-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9876.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (11/24/2013 11:36:31 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: MSXML 4.0 SP2 (KB954430) -- Error 1935. An error occured during the installation of assembly component {7B30B69B-0E6C-B7E0-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9870.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (11/24/2013 06:06:33 PM) (Source: Microsoft-Windows-RestartManager)(User: kai-PC)
Description: 1C:\Program Files (x86)\Internet Explorer\iexplore.exeInternet Explorer0211742440
Error: (11/24/2013 06:06:33 PM) (Source: Microsoft-Windows-RestartManager)(User: kai-PC)
Description: 1C:\Program Files (x86)\Internet Explorer\iexplore.exeInternet Explorer0211740800
Error: (11/24/2013 06:06:33 PM) (Source: Microsoft-Windows-RestartManager)(User: kai-PC)
Description: 1C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\mswinext.exeBing Bar0211733640
==================== Memory info ===========================
Percentage of memory in use: 56%
Total physical RAM: 3956.5 MB
Available physical RAM: 1724.62 MB
Total Pagefile: 7911.13 MB
Available Pagefile: 5030.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB
==================== Drives ================================
Drive c: (Packard Bell) (Fixed) (Total:685.84 GB) (Free:617.09 GB) NTFS
Drive d: (EPSON) (CDROM) (Total:0.24 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: DCB6DCB6)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=686 GB) - (Type=07 NTFS)
==================== End Of Log ============================
gmer: Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-11-25 14:36:08
Windows 6.1.7600 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD75 rev.01.0 698,64GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\kai\AppData\Local\Temp\uwtdqpow.sys
---- User code sections - GMER 2.1 ----
.text C:\Windows\system32\services.exe[684] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Windows\system32\svchost.exe[856] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Windows\System32\svchost.exe[384] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Windows\System32\svchost.exe[516] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Windows\system32\svchost.exe[512] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Windows\system32\svchost.exe[1100] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Windows\system32\svchost.exe[1224] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Windows\system32\svchost.exe[1484] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exe[1876] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Windows\system32\SearchIndexer.exe[2516] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Windows\system32\svchost.exe[2948] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exe[3504] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1172] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Program Files (x86)\Launch Manager\LManager.exe[2368] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Program Files\AVAST Software\Avast\AvastUI.exe[836] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3920] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[2132] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Windows\system32\wuauclt.exe[3164] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Windows\SysWOW64\rundll32.exe[2920] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Windows\explorer.exe[5888] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe[5832] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[3032] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[3032] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077b91465 2 bytes [B9, 77]
.text C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[3032] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000077b914bb 2 bytes [B9, 77]
.text ... * 2
.text C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe[4560] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Windows\system32\taskhost.exe[5128] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_152_ActiveX.exe[5352] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
.text C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_152_ActiveX.exe[5352] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077b91465 2 bytes [B9, 77]
.text C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_152_ActiveX.exe[5352] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000077b914bb 2 bytes [B9, 77]
.text ... * 2
.text C:\Windows\system32\taskmgr.exe[4352] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189 000000007756f1fd 1 byte [62]
.text C:\Users\kai\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GL1YSKVA\gmer_2.1.19163.exe[6824] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112 0000000076e2b0c5 1 byte [62]
---- Processes - GMER 2.1 ----
Library C:\Users\kai\AppData\Local\Temp\nst908.tmp\System.dll (*** suspicious ***) @ C:\Users\kai\AppData\Local\Temp\~nsu.tmp\Au_.exe [6128] 0000000010000000
---- Services - GMER 2.1 ----
Service C:\Windows\system32\drivers\aswFsBlk.sys (*** hidden *** ) [AUTO] aswFsBlk <-- ROOTKIT !!!
Service C:\Windows\system32\drivers\aswMonFlt.sys (*** hidden *** ) [AUTO] aswMonFlt <-- ROOTKIT !!!
Service C:\Windows\system32\drivers\aswRdr2.sys (*** hidden *** ) [SYSTEM] aswRdr <-- ROOTKIT !!!
Service C:\Windows\system32\drivers\aswRvrt.sys (*** hidden *** ) [BOOT] aswRvrt <-- ROOTKIT !!!
Service C:\Windows\system32\drivers\aswSnx.sys (*** hidden *** ) [SYSTEM] aswSnx <-- ROOTKIT !!!
Service C:\Windows\system32\drivers\aswSP.sys (*** hidden *** ) [SYSTEM] aswSP <-- ROOTKIT !!!
Service C:\Windows\system32\drivers\aswTdi.sys (*** hidden *** ) [SYSTEM] aswTdi <-- ROOTKIT !!!
Service C:\Windows\system32\drivers\aswVmm.sys (*** hidden *** ) [BOOT] aswVmm <-- ROOTKIT !!!
Service C:\Program Files\AVAST Software\Avast\AvastSvc.exe (*** hidden *** ) [AUTO] avast! Antivirus <-- ROOTKIT !!!
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk@Type 2
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk@Start 2
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk@Tag 3
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk@ImagePath \??\C:\Windows\system32\drivers\aswFsBlk.sys
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk@DisplayName aswFsBlk
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk@Group FSFilter Activity Monitor
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk@DependOnService FltMgr?
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk@Description Avast! Mini-filter Driver
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk\Instances
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk\Instances@DefaultInstance aswFsBlk Instance
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk\Instances\aswFsBlk Instance
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk\Instances\aswFsBlk Instance@Altitude 388400
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk\Instances\aswFsBlk Instance@Flags 0
Reg HKLM\SYSTEM\CurrentControlSet\services\aswFsBlk
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt@Type 2
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt@Start 2
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt@ImagePath \??\C:\Windows\system32\drivers\aswMonFlt.sys
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt@DisplayName aswMonFlt
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt@Group FSFilter Anti-Virus
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt@DependOnService FltMgr?
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt@Description avast! mini-filter driver (aswMonFlt)
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt\Instances
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt\Instances@DefaultInstance aswMonFlt Instance
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt\Instances\aswMonFlt Instance
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt\Instances\aswMonFlt Instance@Altitude 320700
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt\Instances\aswMonFlt Instance@Flags 0
Reg HKLM\SYSTEM\CurrentControlSet\services\aswMonFlt
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr@Type 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr@Start 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr@ImagePath \??\C:\Windows\system32\drivers\aswRdr2.sys
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr@DisplayName aswRdr
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr@Group PNP_TDI
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr@DependOnService tcpip?
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr@Description avast! WFP Redirect driver
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr\Parameters
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr\Parameters@MSIgnoreLSPDefault
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr\Parameters@WSIgnoreLSPDefault nl_lsp.dll,imon.dll,xfire_lsp.dll,mslsp.dll,mssplsp.dll,cwhook.dll,spi.dll,bmnet.dll,winsflt.dll
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRdr
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRvrt@Type 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRvrt@Start 0
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRvrt@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRvrt@DisplayName avast! Revert
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRvrt\Parameters
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRvrt\Parameters@BootCounter 4
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRvrt\Parameters@TickCounter 16769
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRvrt\Parameters@SystemRoot \Device\Harddisk0\Partition3\Windows
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRvrt\Parameters@ImproperShutdown 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswRvrt
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx@Type 2
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx@Start 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx@ImagePath \??\C:\Windows\system32\drivers\aswSnx.sys
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx@DisplayName aswSnx
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx@Group FSFilter Virtualization
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx@DependOnService FltMgr?
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx@Description avast! virtualization driver (aswSnx)
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx\Instances
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx\Instances@DefaultInstance aswSnx Instance
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx\Instances\aswSnx Instance
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx\Instances\aswSnx Instance@Altitude 137600
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx\Instances\aswSnx Instance@Flags 0
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx\Parameters
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx\Parameters@ProgramFolder \??\C:\Program Files\AVAST Software\Avast
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx\Parameters@DataFolder \??\C:\ProgramData\AVAST Software\Avast
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSnx
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP@Type 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP@Start 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP@ImagePath \??\C:\Windows\system32\drivers\aswSP.sys
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP@DisplayName aswSP
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP@Description avast! Self Protection
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP\Parameters
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP\Parameters@BehavShield 0
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP\Parameters@ProgramFolder \??\C:\Program Files\AVAST Software\Avast
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP\Parameters@DataFolder \??\C:\ProgramData\AVAST Software\Avast
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP\Parameters@ProgramFilesFolder \??\C:\Program Files
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP\Parameters@GadgetFolder \??\C:\Program Files\Windows Sidebar\Shared Gadgets\aswSidebar.gadget
Reg HKLM\SYSTEM\CurrentControlSet\services\aswSP
Reg HKLM\SYSTEM\CurrentControlSet\services\aswTdi@Type 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswTdi@Start 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswTdi@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswTdi@Tag 10
Reg HKLM\SYSTEM\CurrentControlSet\services\aswTdi@ImagePath \??\C:\Windows\system32\drivers\aswTdi.sys
Reg HKLM\SYSTEM\CurrentControlSet\services\aswTdi@DisplayName aswTdi
Reg HKLM\SYSTEM\CurrentControlSet\services\aswTdi@Group PNP_TDI
Reg HKLM\SYSTEM\CurrentControlSet\services\aswTdi@DependOnService tcpip?
Reg HKLM\SYSTEM\CurrentControlSet\services\aswTdi@Description aswTdi
Reg HKLM\SYSTEM\CurrentControlSet\services\aswTdi
Reg HKLM\SYSTEM\CurrentControlSet\services\aswVmm@Type 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswVmm@Start 0
Reg HKLM\SYSTEM\CurrentControlSet\services\aswVmm@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\aswVmm@DisplayName avast! VM Monitor
Reg HKLM\SYSTEM\CurrentControlSet\services\aswVmm@Description avast! VM Monitor
Reg HKLM\SYSTEM\CurrentControlSet\services\aswVmm\Parameters
Reg HKLM\SYSTEM\CurrentControlSet\services\aswVmm
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus@Type 288
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus@Start 2
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus@ImagePath "C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus@DisplayName avast! Antivirus
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus@Group ShellSvcGroup
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus@DependOnService aswMonFlt?RpcSS?
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus@WOW64 1
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus@ObjectName LocalSystem
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus@ServiceSidType 1
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus@Description Verwaltet und implementiert die avast! Antivirus Dienste auf diesem Computer. Dies beinhaltet den Echtzeit-Schutz, den Virus Container sowie die Zeitplan.
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus\Parameters
Reg HKLM\SYSTEM\CurrentControlSet\services\avast! Antivirus
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\18f46a3892cb
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk@Type 2
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk@Start 2
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk@ErrorControl 1
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk@Tag 3
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk@ImagePath \??\C:\Windows\system32\drivers\aswFsBlk.sys
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk@DisplayName aswFsBlk
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk@Group FSFilter Activity Monitor
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk@DependOnService FltMgr?
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk@Description Avast! Mini-filter Driver
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk\Instances (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk\Instances@DefaultInstance aswFsBlk Instance
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk\Instances\aswFsBlk Instance (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk\Instances\aswFsBlk Instance@Altitude 388400
Reg HKLM\SYSTEM\ControlSet002\services\aswFsBlk\Instances\aswFsBlk Instance@Flags 0
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt@Type 2
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt@Start 2
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt@ErrorControl 1
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt@ImagePath \??\C:\Windows\system32\drivers\aswMonFlt.sys
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt@DisplayName aswMonFlt
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt@Group FSFilter Anti-Virus
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt@DependOnService FltMgr?
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt@Description avast! mini-filter driver (aswMonFlt)
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt\Instances (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt\Instances@DefaultInstance aswMonFlt Instance
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt\Instances\aswMonFlt Instance (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt\Instances\aswMonFlt Instance@Altitude 320700
Reg HKLM\SYSTEM\ControlSet002\services\aswMonFlt\Instances\aswMonFlt Instance@Flags 0
Reg HKLM\SYSTEM\ControlSet002\services\aswRdr@Type 1
Reg HKLM\SYSTEM\ControlSet002\services\aswRdr@Start 1
Reg HKLM\SYSTEM\ControlSet002\services\aswRdr@ErrorControl 1
Reg HKLM\SYSTEM\ControlSet002\services\aswRdr@ImagePath \??\C:\Windows\system32\drivers\aswRdr2.sys
Reg HKLM\SYSTEM\ControlSet002\services\aswRdr@DisplayName aswRdr
Reg HKLM\SYSTEM\ControlSet002\services\aswRdr@Group PNP_TDI
Reg HKLM\SYSTEM\ControlSet002\services\aswRdr@DependOnService tcpip?
Reg HKLM\SYSTEM\ControlSet002\services\aswRdr@Description avast! WFP Redirect driver
Reg HKLM\SYSTEM\ControlSet002\services\aswRdr\Parameters (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\aswRdr\Parameters@MSIgnoreLSPDefault
Reg HKLM\SYSTEM\ControlSet002\services\aswRdr\Parameters@WSIgnoreLSPDefault nl_lsp.dll,imon.dll,xfire_lsp.dll,mslsp.dll,mssplsp.dll,cwhook.dll,spi.dll,bmnet.dll,winsflt.dll
Reg HKLM\SYSTEM\ControlSet002\services\aswRvrt@Type 1
Reg HKLM\SYSTEM\ControlSet002\services\aswRvrt@Start 0
Reg HKLM\SYSTEM\ControlSet002\services\aswRvrt@ErrorControl 1
Reg HKLM\SYSTEM\ControlSet002\services\aswRvrt@DisplayName avast! Revert
Reg HKLM\SYSTEM\ControlSet002\services\aswRvrt\Parameters (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\aswRvrt\Parameters@BootCounter 4
Reg HKLM\SYSTEM\ControlSet002\services\aswRvrt\Parameters@TickCounter 16769
Reg HKLM\SYSTEM\ControlSet002\services\aswRvrt\Parameters@SystemRoot \Device\Harddisk0\Partition3\Windows
Reg HKLM\SYSTEM\ControlSet002\services\aswRvrt\Parameters@ImproperShutdown 1
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx@Type 2
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx@Start 1
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx@ErrorControl 1
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx@ImagePath \??\C:\Windows\system32\drivers\aswSnx.sys
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx@DisplayName aswSnx
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx@Group FSFilter Virtualization
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx@DependOnService FltMgr?
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx@Description avast! virtualization driver (aswSnx)
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx\Instances (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx\Instances@DefaultInstance aswSnx Instance
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx\Instances\aswSnx Instance (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx\Instances\aswSnx Instance@Altitude 137600
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx\Instances\aswSnx Instance@Flags 0
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx\Parameters (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx\Parameters@ProgramFolder \??\C:\Program Files\AVAST Software\Avast
Reg HKLM\SYSTEM\ControlSet002\services\aswSnx\Parameters@DataFolder \??\C:\ProgramData\AVAST Software\Avast
Reg HKLM\SYSTEM\ControlSet002\services\aswSP@Type 1
Reg HKLM\SYSTEM\ControlSet002\services\aswSP@Start 1
Reg HKLM\SYSTEM\ControlSet002\services\aswSP@ErrorControl 1
Reg HKLM\SYSTEM\ControlSet002\services\aswSP@ImagePath \??\C:\Windows\system32\drivers\aswSP.sys
Reg HKLM\SYSTEM\ControlSet002\services\aswSP@DisplayName aswSP
Reg HKLM\SYSTEM\ControlSet002\services\aswSP@Description avast! Self Protection
Reg HKLM\SYSTEM\ControlSet002\services\aswSP\Parameters (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\aswSP\Parameters@BehavShield 0
Reg HKLM\SYSTEM\ControlSet002\services\aswSP\Parameters@ProgramFolder \??\C:\Program Files\AVAST Software\Avast
Reg HKLM\SYSTEM\ControlSet002\services\aswSP\Parameters@DataFolder \??\C:\ProgramData\AVAST Software\Avast
Reg HKLM\SYSTEM\ControlSet002\services\aswSP\Parameters@ProgramFilesFolder \??\C:\Program Files
Reg HKLM\SYSTEM\ControlSet002\services\aswSP\Parameters@GadgetFolder \??\C:\Program Files\Windows Sidebar\Shared Gadgets\aswSidebar.gadget
Reg HKLM\SYSTEM\ControlSet002\services\aswTdi@Type 1
Reg HKLM\SYSTEM\ControlSet002\services\aswTdi@Start 1
Reg HKLM\SYSTEM\ControlSet002\services\aswTdi@ErrorControl 1
Reg HKLM\SYSTEM\ControlSet002\services\aswTdi@Tag 10
Reg HKLM\SYSTEM\ControlSet002\services\aswTdi@ImagePath \??\C:\Windows\system32\drivers\aswTdi.sys
Reg HKLM\SYSTEM\ControlSet002\services\aswTdi@DisplayName aswTdi
Reg HKLM\SYSTEM\ControlSet002\services\aswTdi@Group PNP_TDI
Reg HKLM\SYSTEM\ControlSet002\services\aswTdi@DependOnService tcpip?
Reg HKLM\SYSTEM\ControlSet002\services\aswTdi@Description aswTdi
Reg HKLM\SYSTEM\ControlSet002\services\aswVmm@Type 1
Reg HKLM\SYSTEM\ControlSet002\services\aswVmm@Start 0
Reg HKLM\SYSTEM\ControlSet002\services\aswVmm@ErrorControl 1
Reg HKLM\SYSTEM\ControlSet002\services\aswVmm@DisplayName avast! VM Monitor
Reg HKLM\SYSTEM\ControlSet002\services\aswVmm@Description avast! VM Monitor
Reg HKLM\SYSTEM\ControlSet002\services\aswVmm\Parameters (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus@Type 288
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus@Start 2
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus@ErrorControl 1
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus@ImagePath "C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus@DisplayName avast! Antivirus
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus@Group ShellSvcGroup
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus@DependOnService aswMonFlt?RpcSS?
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus@WOW64 1
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus@ObjectName LocalSystem
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus@ServiceSidType 1
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus@Description Verwaltet und implementiert die avast! Antivirus Dienste auf diesem Computer. Dies beinhaltet den Echtzeit-Schutz, den Virus Container sowie die Zeitplan.
Reg HKLM\SYSTEM\ControlSet002\services\avast! Antivirus\Parameters (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\18f46a3892cb (not active ControlSet)
---- EOF - GMER 2.1 ----
Geändert von karl_karlson (25.11.2013 um 16:42 Uhr) |
|
25.11.2013, 17:11
| #2 |
| /// Malwareteam   | Werde "PUP.Optional.Conduit.A" nicht los. Ich habe dein Thema in Arbeit und melde mich so schnell als möglich mit weiteren Anweisungen. Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst. Ich bedanke mich für deine Geduld 
__________________ |
|
25.11.2013, 17:52
| #3 |
| /// Malwareteam | Werde "PUP.Optional.Conduit.A" nicht los. Hallo karl_karlson,
__________________Meine Name ist Jonas und ich werde dir bei deiner Bereinigung helfen. Diese kann mit viel Arbeit für dich verbunden sein. Bevor wir anfangen können, lies bitte die Bereinigungsregeln und Hinweise:  Regeln zum Ablauf der Bereinigung
Hinweise
Bitte poste das FRST-Log in deiner nächsten Antwort. Mit einer PDF-Datei als Anhang kann ich nicht arbeiten. Wenn die Datei zu groß ist, teile diese bitte in mehrere Antworten: http://www.trojaner-board.de/137229-...code-tags.html.
__________________ |
|
25.11.2013, 20:32
| #4 |
| | Werde "PUP.Optional.Conduit.A" nicht los. Hallo Jonas, vielen Dank für deine Hilfe. Ich hab noch eine kurze Frage vorneweg: Operieren wir im abgesicherten oder normalen Modus? Hier ist das FRST log: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-11-2013 Ran by kai (administrator) on KAI-PC on 25-11-2013 14:19:32 Running from C:\Users\kai\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A7N7Q6M3 Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\ccsvchst.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe (Acer Group) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe (AMD) C:\Windows\System32\atieclxx.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\ccsvchst.exe (Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe (Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe () C:\Program Files (x86)\Video Web Camera\VideoWebCamera.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\Users\kai\AppData\Local\Temp\~nsu.tmp\Au_.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Adobe Systems Incorporated) C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_152_ActiveX.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\Users\kai\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\360VBQGZ\Defogger.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324608 2010-06-10] (Alcor Micro Corp.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-29] (Realtek Semiconductor) HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [585376 2010-05-25] (Atheros Commnucations) HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [354464 2010-05-25] (Atheros Commnucations) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated) HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-11-24] (Google Inc.) HKCU\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\kai\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [263936 2010-06-28] (NewTech Infosystems, Inc.) HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-01-22] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-11] (Dritek System Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-24] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [154144 2010-07-29] () HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [154144 2010-07-29] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://packardbell.msn.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://packardbell.msn.com StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg64.dll (Google Inc.) BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\coieplg.dll (Symantec Corporation) BHO-x32: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\ips\ipsbho.dll (Symantec Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\coieplg.dll (Symantec Corporation) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Tcpip\..\Interfaces\{1E910E37-9175-44F6-8D18-F453FB4635A4}: [NameServer]213.211.192.34 Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.com/" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Java Deployment Toolkit 7.0.450.18) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Java(TM) Platform SE 7 U45) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Extension: (Google Docs) - C:\Users\kai\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\kai\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\kai\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\kai\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (avast! Online Security) - C:\Users\kai\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2005.45_0 CHR Extension: (Google Wallet) - C:\Users\kai\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\kai\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-24] (AVAST Software) R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [868896 2010-06-11] (Acer Incorporated) S3 GameConsoleService; C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe [246520 2010-04-04] (WildTangent, Inc.) R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\18.7.1.3\ccSvcHst.exe [130008 2011-04-17] (Symantec Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [255744 2010-06-28] (NewTech Infosystems, Inc.) R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group) ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-24] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-24] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-24] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-24] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-24] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-24] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-24] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-24] () R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20131114.001\BHDrvx64.sys [1524824 2013-11-14] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-24] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-24] (Symantec Corporation) R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20131122.001\IDSvia64.sys [521816 2013-11-22] (Symantec Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20131124.019\ENG64.SYS [126040 2013-11-25] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20131124.019\EX64.SYS [2099288 2013-11-25] (Symantec Corporation) R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1207000.00D\SRTSP64.SYS [744568 2011-03-31] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1207010.003\SRTSPX64.SYS [40568 2011-03-31] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\NISx64\1207010.003\SYMDS64.SYS [450680 2011-01-27] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\NISx64\1207010.003\SYMEFA64.SYS [912504 2011-03-15] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2013-11-24] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NISx64\1207010.003\Ironx64.SYS [171128 2011-01-27] (Symantec Corporation) R3 SymNetS; C:\Windows\System32\Drivers\NISx64\1207000.00D\SYMNETS.SYS [386168 2011-04-21] (Symantec Corporation) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] () ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-25 14:19 - 2013-11-25 14:19 - 00000000 ____D C:\FRST 2013-11-25 14:17 - 2013-11-25 14:17 - 00000468 _____ C:\Users\kai\Desktop\defogger_disable.log 2013-11-25 14:17 - 2013-11-25 14:17 - 00000000 _____ C:\Users\kai\defogger_reenable 2013-11-25 11:50 - 2013-11-25 11:50 - 00000000 ____D C:\Users\kai\AppData\Roaming\Malwarebytes 2013-11-25 11:49 - 2013-11-25 11:49 - 00001121 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-25 11:49 - 2013-11-25 11:49 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-25 11:49 - 2013-11-25 11:49 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-25 11:49 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-11-25 11:48 - 2013-11-25 11:49 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\kai\Downloads\mbam-setup-1.75.0.1300 (1).exe 2013-11-25 11:48 - 2013-11-25 11:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\kai\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-25 11:24 - 2013-11-25 11:26 - 00000000 ____D C:\Windows\system32\MRT 2013-11-25 11:24 - 2013-11-07 16:00 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-25 11:18 - 2013-11-25 14:19 - 00000000 ____D C:\Users\kai\AppData\Roaming\newnext.me 2013-11-25 11:18 - 2013-11-25 11:23 - 00000000 ____D C:\Users\kai\AppData\Local\Mobogenie 2013-11-25 11:18 - 2013-11-25 11:18 - 00000000 ____D C:\Users\kai\Documents\Mobogenie 2013-11-25 11:18 - 2013-11-25 11:18 - 00000000 ____D C:\Users\kai\AppData\Local\genienext 2013-11-25 11:18 - 2013-11-25 11:18 - 00000000 ____D C:\Users\kai\AppData\Local\cache 2013-11-25 11:18 - 2013-11-25 11:18 - 00000000 ____D C:\Users\kai\.android 2013-11-25 11:18 - 2013-11-25 11:18 - 00000000 _____ C:\Users\kai\daemonprocess.txt 2013-11-25 11:17 - 2013-11-25 11:23 - 00000000 ____D C:\Program Files (x86)\MyPC Backup 2013-11-25 11:17 - 2013-11-25 11:18 - 00001353 _____ C:\Windows\IE10_main.log 2013-11-25 11:15 - 2013-11-25 11:17 - 00846864 _____ (Microsoft Corporation) C:\Users\kai\Downloads\MainOffer.exe 2013-11-25 11:14 - 2013-11-25 11:14 - 01126048 _____ (Conduit) C:\Users\kai\Downloads\Internet_Explorer_10.exe 2013-11-25 11:13 - 2013-11-25 11:13 - 02077392 _____ (Microsoft Corporation) C:\Users\kai\Downloads\IE11-Windows6.1.exe 2013-11-25 11:06 - 2013-11-25 11:06 - 00000000 ____D C:\Users\kai\Desktop\Visual Studio 2013 Premium 32-bit (German) 2013-11-25 08:41 - 2013-11-25 08:41 - 00000000 ____D C:\Users\kai\Downloads\Microsoft XNA Game Studio 4.0 (English) 2013-11-25 08:39 - 2013-11-25 08:39 - 00000000 ____D C:\Users\kai\Desktop\Visual Studio 2013 Premium 32-bit - Web Installer (German) 2013-11-25 08:37 - 2013-11-25 08:37 - 00000000 _____ C:\Users\kai\Desktop\SecureDownloadManager.log 2013-11-25 08:17 - 2013-11-25 08:17 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0 2013-11-25 08:15 - 2013-11-25 08:15 - 17773056 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 12268544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 10884096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 09702400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-25 08:15 - 2013-11-25 08:15 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-25 08:15 - 2013-11-25 08:15 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-25 08:15 - 2013-11-25 08:15 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-25 08:15 - 2013-11-25 08:15 - 02303488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 02136064 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01797632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01785344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01492992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-25 08:15 - 2013-11-25 08:15 - 01427456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-25 08:15 - 2013-11-25 08:15 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01344000 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01126912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01102336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-25 08:15 - 2013-11-25 08:15 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-25 08:15 - 2013-11-25 08:15 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-25 08:15 - 2013-11-25 08:15 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-25 08:15 - 2013-11-25 08:15 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-25 08:13 - 2013-11-25 08:13 - 00000000 ____D C:\Windows\System32\Tasks\Symantec 2013-11-25 08:10 - 2013-11-25 08:10 - 00003528 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask 2013-11-25 08:10 - 2013-11-25 08:10 - 00001762 _____ C:\Users\Public\Desktop\Browserwahl.lnk 2013-11-25 01:29 - 2013-11-25 01:28 - 00295922 _____ C:\Windows\system32\perfi007.dat 2013-11-25 01:29 - 2013-11-25 01:28 - 00038104 _____ C:\Windows\system32\perfd007.dat 2013-11-25 01:29 - 2013-11-24 18:32 - 00643866 _____ C:\Windows\system32\perfh007.dat 2013-11-25 01:29 - 2013-11-24 18:32 - 00126394 _____ C:\Windows\system32\perfc007.dat 2013-11-25 01:28 - 2013-11-25 01:28 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer 2013-11-25 01:28 - 2013-11-25 01:28 - 00000000 ____D C:\Windows\SysWOW64\de 2013-11-25 01:28 - 2013-11-25 01:28 - 00000000 ____D C:\Windows\SysWOW64\0407 2013-11-25 01:28 - 2013-11-25 01:28 - 00000000 ____D C:\Windows\system32\de 2013-11-25 01:28 - 2013-11-25 01:28 - 00000000 ____D C:\Windows\system32\0407 2013-11-25 01:23 - 2013-11-25 01:23 - 00000000 ____D C:\Windows\NAPP_Dism_Log 2013-11-25 01:23 - 2013-11-24 17:10 - 00002843 _____ C:\Windows\Patch.log 2013-11-25 01:21 - 2013-11-25 01:23 - 00007691 _____ C:\Windows\WisGAPas.log 2013-11-25 01:21 - 2013-11-25 01:21 - 00000926 _____ C:\Windows\MOD01SET74DE0N0003.XML 2013-11-25 01:21 - 2013-11-24 16:55 - 00000267 _____ C:\Windows\LaunApp.ini 2013-11-25 01:21 - 2010-09-24 08:49 - 00000441 __RSH C:\Patch.rev 2013-11-25 01:20 - 2013-11-25 01:20 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2013-11-25 01:20 - 2013-11-25 01:20 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll 2013-11-25 01:20 - 2013-11-25 01:20 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-11-25 01:20 - 2013-11-25 01:20 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2013-11-25 01:20 - 2013-11-25 01:20 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-11-25 01:20 - 2013-11-25 01:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-11-25 01:20 - 2010-05-12 03:11 - 02229608 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys 2013-11-25 01:20 - 2010-01-26 00:09 - 00349776 _____ (Dritek System Inc.) C:\Windows\UNINSTLMv4.EXE 2013-11-25 01:20 - 2009-09-18 05:12 - 00292912 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys 2013-11-25 01:20 - 2009-09-18 05:09 - 00396072 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll 2013-11-25 01:20 - 2009-09-18 05:09 - 00263464 _____ (Synaptics Incorporated) C:\Windows\system32\SynCtrl.dll 2013-11-25 01:20 - 2009-09-18 05:09 - 00206120 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCtrl.dll 2013-11-25 01:20 - 2009-09-18 05:09 - 00205608 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll 2013-11-25 01:20 - 2009-09-18 05:09 - 00169256 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCOM.dll 2013-11-25 01:20 - 2009-09-18 05:09 - 00147752 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCo4.dll 2013-11-25 01:20 - 2009-09-18 05:09 - 00107816 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynTPCOM.dll 2013-11-25 01:20 - 2009-07-06 08:55 - 00000000 _____ C:\Windows\SysWOW64\Drivers\1025_Acer_Packard Bell_EasyNote LM85.mrk 2013-11-25 01:20 - 2009-07-06 08:55 - 00000000 _____ C:\Windows\system32\Drivers\1025_Acer_Packard Bell_EasyNote LM85.mrk 2013-11-25 01:19 - 2013-11-25 01:19 - 00000000 ____D C:\Windows\Lan 2013-11-25 01:19 - 2013-11-24 17:10 - 00000201 _____ C:\Windows\USER.XML 2013-11-25 01:19 - 2010-06-02 00:14 - 00527400 _____ (Wistron Corp.) C:\Windows\WGRegx64.exe 2013-11-25 01:19 - 2010-01-22 18:13 - 06233088 _____ (ATI Technologies Inc.) C:\Windows\system32\Drivers\atipmdag.sys 2013-11-25 01:19 - 2010-01-22 18:13 - 06233088 _____ (ATI Technologies Inc.) C:\Windows\system32\Drivers\atikmdag.sys 2013-11-25 01:19 - 2010-01-22 18:01 - 00450048 _____ (AMD) C:\Windows\system32\atieclxx.exe 2013-11-25 01:19 - 2010-01-22 18:01 - 00446464 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIDEMGX.dll 2013-11-25 01:19 - 2010-01-22 18:01 - 00202752 _____ (AMD) C:\Windows\system32\atiesrxx.exe 2013-11-25 01:19 - 2010-01-22 18:00 - 17567744 _____ (ATI Technologies Inc.) C:\Windows\system32\atio6axx.dll 2013-11-25 01:19 - 2010-01-22 17:59 - 00421376 _____ (ATI Technologies, Inc.) C:\Windows\system32\atipdl64.dll 2013-11-25 01:19 - 2010-01-22 17:59 - 00356352 _____ (ATI Technologies, Inc.) C:\Windows\SysWOW64\atipdlxx.dll 2013-11-25 01:19 - 2010-01-22 17:59 - 00120320 _____ (AMD) C:\Windows\system32\atitmm64.dll 2013-11-25 01:19 - 2010-01-22 17:59 - 00012288 _____ (AMD) C:\Windows\system32\atimuixx.dll 2013-11-25 01:19 - 2010-01-22 17:58 - 00059392 _____ (ATI Technologies, Inc.) C:\Windows\system32\atiedu64.dll 2013-11-25 01:19 - 2010-01-22 17:58 - 00043520 _____ (ATI Technologies, Inc.) C:\Windows\SysWOW64\ati2edxx.dll 2013-11-25 01:19 - 2010-01-22 17:56 - 03060224 _____ (ATI Technologies Inc. ) C:\Windows\SysWOW64\atidxx32.dll 2013-11-25 01:19 - 2010-01-22 17:48 - 03671040 _____ (ATI Technologies Inc. ) C:\Windows\system32\atidxx64.dll 2013-11-25 01:19 - 2010-01-22 17:48 - 00400384 _____ (ATI Technologies Inc. ) C:\Windows\SysWOW64\aticfx32.dll 2013-11-25 01:19 - 2010-01-22 17:47 - 00434176 _____ (ATI Technologies Inc. ) C:\Windows\system32\aticfx64.dll 2013-11-25 01:19 - 2010-01-22 17:42 - 13388288 _____ (ATI Technologies Inc.) C:\Windows\SysWOW64\atioglxx.dll 2013-11-25 01:19 - 2010-01-22 17:39 - 03602432 _____ (ATI Technologies Inc. ) C:\Windows\SysWOW64\atiumdag.dll 2013-11-25 01:19 - 2010-01-22 17:33 - 04668928 _____ (ATI Technologies Inc. ) C:\Windows\system32\atiumd64.dll 2013-11-25 01:19 - 2010-01-22 17:29 - 00055296 _____ (AMD) C:\Windows\system32\coinst.dll 2013-11-25 01:19 - 2010-01-22 17:27 - 02617856 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll 2013-11-25 01:19 - 2010-01-22 17:24 - 00409184 _____ C:\Windows\system32\atiumd6a.cap 2013-11-25 01:19 - 2010-01-22 17:21 - 02913280 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll 2013-11-25 01:19 - 2010-01-22 17:20 - 04748288 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll 2013-11-25 01:19 - 2010-01-22 17:20 - 00409184 _____ C:\Windows\SysWOW64\atiumdva.cap 2013-11-25 01:19 - 2010-01-22 17:20 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll 2013-11-25 01:19 - 2010-01-22 17:20 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll 2013-11-25 01:19 - 2010-01-22 17:20 - 00043008 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll 2013-11-25 01:19 - 2010-01-22 17:20 - 00039936 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll 2013-11-25 01:19 - 2010-01-22 17:19 - 03641344 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll 2013-11-25 01:19 - 2010-01-22 17:09 - 00053248 _____ (ATI Technologies Inc.) C:\Windows\system32\Drivers\ati2erec.dll 2013-11-25 01:19 - 2010-01-22 17:09 - 00053248 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll 2013-11-25 01:19 - 2010-01-22 17:09 - 00053248 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll 2013-11-25 01:19 - 2010-01-22 17:09 - 00052224 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll 2013-11-25 01:19 - 2010-01-22 17:09 - 00052224 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll 2013-11-25 01:19 - 2010-01-22 17:08 - 00316928 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll 2013-11-25 01:19 - 2010-01-22 17:08 - 00229376 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll 2013-11-25 01:19 - 2010-01-22 17:08 - 00016896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll 2013-11-25 01:19 - 2010-01-22 17:08 - 00015360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll 2013-11-25 01:19 - 2010-01-22 17:08 - 00014848 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll 2013-11-25 01:19 - 2010-01-22 17:08 - 00012800 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll 2013-11-25 01:19 - 2010-01-22 17:08 - 00012800 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll 2013-11-25 01:19 - 2010-01-22 17:07 - 00161280 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys 2013-11-25 01:19 - 2010-01-22 17:07 - 00035840 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll 2013-11-25 01:19 - 2010-01-22 17:07 - 00028160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll 2013-11-25 01:19 - 2010-01-22 17:07 - 00027136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll 2013-11-25 01:19 - 2010-01-22 17:07 - 00020480 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll 2013-11-25 01:19 - 2010-01-22 17:06 - 00026112 _____ C:\Windows\system32\atitmp64.dll 2013-11-25 01:19 - 2009-11-20 08:52 - 00019462 _____ C:\Windows\atiogl.xml 2013-11-25 01:19 - 2009-11-18 19:11 - 00197624 _____ C:\Windows\system32\atiicdxx.dat 2013-11-25 01:19 - 2009-10-26 23:06 - 00001035 _____ C:\Windows\SysWOW64\atipblag.dat 2013-11-25 01:19 - 2009-10-26 23:06 - 00001035 _____ C:\Windows\system32\atipblag.dat 2013-11-25 01:19 - 2009-10-26 21:39 - 00151936 _____ (Intel Corporation) C:\Windows\system32\Drivers\Impcd.sys 2013-11-25 01:19 - 2009-09-30 18:34 - 00121872 _____ (ATI Technologies, Inc.) C:\Windows\system32\Drivers\AtiHdmi.sys 2013-11-25 01:19 - 2009-05-12 02:35 - 00118784 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atibtmon.exe 2013-11-25 01:19 - 2009-02-18 22:55 - 00332288 _____ C:\Windows\system32\ATIODE.exe 2013-11-25 01:19 - 2009-02-04 01:52 - 00051200 _____ C:\Windows\system32\ATIODCLI.exe 2013-11-25 01:18 - 2013-11-25 01:31 - 00001654 _____ C:\Windows\WPatchProgress.ini 2013-11-25 01:18 - 2013-11-25 01:21 - 00234416 _____ C:\Windows\CapsuleDll.log 2013-11-25 01:18 - 2010-04-14 07:08 - 00176928 _____ (Wistron Corp.) C:\Windows\PatchFul.exe 2013-11-25 01:18 - 2010-03-01 03:23 - 00484128 _____ (Wistron Corp.) C:\Windows\WisMvImg.exe 2013-11-25 01:18 - 2009-10-27 19:46 - 00342560 _____ (Acer Inc.) C:\Windows\ParseModule_X64.exe 2013-11-25 01:18 - 2009-10-27 19:46 - 00231968 _____ (Acer Inc.) C:\Windows\ParseModule_X86.exe 2013-11-25 01:18 - 2009-10-09 19:21 - 00388384 _____ (Wistron Corp.) C:\Windows\WisGAPasx64.exe 2013-11-25 01:18 - 2009-10-09 19:08 - 00326432 _____ (Wistron Corp.) C:\Windows\WisGAPas.exe 2013-11-25 01:18 - 2009-10-09 03:24 - 00255264 _____ (Wistron Corp.) C:\Windows\WISI2BAT.EXE 2013-11-25 00:01 - 2010-09-14 07:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2013-11-25 00:01 - 2010-09-14 07:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll 2013-11-24 23:44 - 2013-11-25 08:18 - 00296212 _____ C:\Windows\msxml4-KB973688-enu.LOG 2013-11-24 23:40 - 2012-07-26 05:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-11-24 23:40 - 2012-07-26 05:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2013-11-24 23:40 - 2012-07-26 03:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2013-11-24 23:40 - 2012-06-02 15:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2013-11-24 23:34 - 2013-11-25 08:17 - 00296494 _____ C:\Windows\msxml4-KB954430-enu.LOG 2013-11-24 23:28 - 2009-11-25 12:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2013-11-24 23:28 - 2009-11-25 12:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2013-11-24 23:28 - 2009-11-25 12:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2013-11-24 23:28 - 2009-11-25 12:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2013-11-24 23:28 - 2009-11-25 12:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll 2013-11-24 23:28 - 2009-11-25 12:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe 2013-11-24 23:28 - 2009-11-25 12:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2013-11-24 23:28 - 2009-11-25 12:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll 2013-11-24 23:28 - 2009-11-25 12:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll 2013-11-24 23:28 - 2009-11-25 12:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2013-11-24 23:27 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2013-11-24 23:26 - 2013-11-25 08:16 - 00007206 _____ C:\Windows\IE9_main.log 2013-11-24 23:16 - 2012-12-16 17:52 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-11-24 23:16 - 2012-12-16 15:40 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-11-24 23:16 - 2012-12-16 15:25 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-11-24 23:16 - 2012-12-16 15:25 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-11-24 23:13 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2013-11-24 23:13 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2013-11-24 23:13 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2013-11-24 23:13 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2013-11-24 23:13 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2013-11-24 23:13 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2013-11-24 23:13 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2013-11-24 23:13 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2013-11-24 23:06 - 2012-03-01 07:54 - 00022896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2013-11-24 23:06 - 2012-03-01 07:40 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-11-24 23:06 - 2012-03-01 07:35 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2013-11-24 23:06 - 2012-03-01 06:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-11-24 23:06 - 2012-03-01 06:40 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2013-11-24 21:20 - 2013-11-24 21:20 - 00000000 ____D C:\Users\kai\Desktop\Microsoft XNA Game Studio 4.0 (English) 2013-11-24 21:17 - 2013-11-24 21:17 - 00003125 _____ C:\Users\kai\Desktop\Secure Download Manager.lnk 2013-11-24 21:17 - 2013-11-24 21:17 - 00000183 _____ C:\Users\kai\Desktop\100245465996.sdx 2013-11-24 21:17 - 2013-11-24 21:17 - 00000000 ____D C:\Users\kai\AppData\Roaming\e-academy Inc 2013-11-24 21:17 - 2013-11-24 21:17 - 00000000 ____D C:\Users\kai\AppData\Local\e-academy Inc 2013-11-24 21:17 - 2013-11-24 21:17 - 00000000 _____ C:\Users\kai\Downloads\SecureDownloadManager.log 2013-11-24 21:16 - 2013-11-24 21:16 - 00719360 _____ C:\Users\kai\Downloads\SDM_DE.msi 2013-11-24 19:51 - 2013-11-24 19:51 - 00000000 ____D C:\ProgramData\Sun 2013-11-24 19:51 - 2013-11-24 19:51 - 00000000 ____D C:\ProgramData\Oracle 2013-11-24 19:50 - 2013-11-24 19:50 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-11-24 19:50 - 2013-11-24 19:50 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-11-24 19:50 - 2013-11-24 19:50 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-11-24 19:50 - 2013-11-24 19:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-11-24 19:50 - 2013-11-24 19:50 - 00000000 ____D C:\Program Files (x86)\Java 2013-11-24 19:41 - 2013-11-24 19:41 - 00000000 ____D C:\Users\kai\AppData\Roaming\AVAST Software 2013-11-24 19:40 - 2013-11-24 19:40 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-11-24 19:40 - 2013-11-24 19:40 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-11-24 19:40 - 2013-11-24 19:40 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-11-24 19:40 - 2013-11-24 19:40 - 00001978 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-11-24 19:34 - 2013-11-24 19:34 - 00000000 ____D C:\Program Files\AVAST Software 2013-11-24 19:32 - 2013-11-24 19:32 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-24 19:26 - 2013-11-25 13:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-24 19:26 - 2013-11-24 19:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-11-24 19:26 - 2013-11-24 19:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-24 19:26 - 2013-11-24 19:26 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-11-24 19:25 - 2013-11-24 19:25 - 00000000 ____D C:\Windows\system32\Macromed |
|
25.11.2013, 20:33
| #5 |
| | Werde "PUP.Optional.Conduit.A" nicht los. 2. Teil FRST Log Code:
ATTFilter 2013-11-24 19:01 - 2012-11-09 06:34 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2013-11-24 19:01 - 2012-11-09 05:49 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-11-24 19:01 - 2012-03-03 07:29 - 01837568 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-11-24 19:01 - 2012-03-03 07:29 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-11-24 19:01 - 2012-03-03 07:29 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-11-24 19:01 - 2012-03-03 07:29 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-11-24 19:01 - 2012-03-03 07:29 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-11-24 19:01 - 2012-03-03 06:40 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2013-11-24 19:01 - 2012-03-03 06:40 - 01074176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-11-24 19:01 - 2012-03-03 06:40 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2013-11-24 19:01 - 2012-03-03 06:40 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2013-11-24 19:01 - 2012-03-03 06:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2013-11-24 19:01 - 2011-06-16 06:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2013-11-24 19:01 - 2011-06-16 05:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2013-11-24 19:01 - 2011-06-15 10:58 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2013-11-24 19:01 - 2011-06-15 10:58 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2013-11-24 19:01 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2013-11-24 19:01 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2013-11-24 19:01 - 2011-06-15 10:04 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2013-11-24 19:01 - 2011-06-15 10:04 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2013-11-24 19:01 - 2011-06-15 10:04 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2013-11-24 19:01 - 2011-06-15 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2013-11-24 19:01 - 2011-06-15 10:04 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2013-11-24 19:01 - 2011-04-27 03:57 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2013-11-24 19:00 - 2013-02-12 16:42 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-11-24 19:00 - 2013-02-12 16:37 - 03138048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-11-24 19:00 - 2013-02-12 16:31 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2013-11-24 19:00 - 2013-02-12 16:13 - 02691072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2013-11-24 19:00 - 2013-02-12 16:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2013-11-24 19:00 - 2013-02-12 14:59 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2013-11-24 19:00 - 2012-11-09 06:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-11-24 19:00 - 2012-11-09 05:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-11-24 19:00 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2013-11-24 19:00 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2013-11-24 19:00 - 2010-12-23 07:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2013-11-24 19:00 - 2010-12-23 07:07 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2013-11-24 19:00 - 2010-12-23 07:02 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2013-11-24 19:00 - 2010-12-23 06:28 - 00850432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll 2013-11-24 19:00 - 2010-12-23 06:28 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll 2013-11-24 19:00 - 2010-12-23 06:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax 2013-11-24 19:00 - 2010-08-26 06:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2013-11-24 19:00 - 2010-08-26 05:39 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll 2013-11-24 18:59 - 2013-03-01 04:32 - 03150848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-11-24 18:59 - 2012-01-04 10:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2013-11-24 18:59 - 2012-01-04 10:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2013-11-24 18:59 - 2011-11-17 08:12 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2013-11-24 18:59 - 2011-11-17 06:39 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2013-11-24 18:59 - 2011-10-26 06:22 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2013-11-24 18:59 - 2011-10-26 06:22 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2013-11-24 18:59 - 2011-10-26 05:28 - 01328640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2013-11-24 18:59 - 2011-10-26 05:28 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2013-11-24 18:59 - 2011-07-09 03:44 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2013-11-24 18:59 - 2011-05-04 06:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2013-11-24 18:59 - 2011-05-04 06:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2013-11-24 18:59 - 2011-05-04 06:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2013-11-24 18:59 - 2011-05-04 06:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2013-11-24 18:59 - 2011-05-04 06:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2013-11-24 18:59 - 2011-05-04 06:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2013-11-24 18:59 - 2011-05-04 06:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2013-11-24 18:59 - 2011-05-04 06:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2013-11-24 18:59 - 2011-05-04 06:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2013-11-24 18:59 - 2011-05-04 05:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2013-11-24 18:59 - 2011-05-04 05:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2013-11-24 18:59 - 2011-05-04 05:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2013-11-24 18:59 - 2011-05-04 05:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2013-11-24 18:59 - 2011-05-04 05:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2013-11-24 18:59 - 2011-05-04 05:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2013-11-24 18:59 - 2011-05-04 05:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2013-11-24 18:59 - 2011-05-04 05:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2013-11-24 18:59 - 2011-05-04 05:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2013-11-24 18:59 - 2011-05-04 03:51 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2013-11-24 18:59 - 2011-05-04 03:51 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2013-11-24 18:59 - 2010-11-02 06:18 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2013-11-24 18:59 - 2010-11-02 06:17 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2013-11-24 18:59 - 2010-11-02 06:17 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2013-11-24 18:59 - 2010-11-02 06:16 - 01114624 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2013-11-24 18:59 - 2010-11-02 06:10 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2013-11-24 18:59 - 2010-11-02 06:10 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2013-11-24 18:59 - 2010-11-02 05:40 - 00496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll 2013-11-24 18:59 - 2010-11-02 05:40 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll 2013-11-24 18:59 - 2010-11-02 05:34 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe 2013-11-24 18:59 - 2010-11-02 05:34 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe 2013-11-24 18:59 - 2010-06-29 06:39 - 02085376 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2013-11-24 18:59 - 2010-06-29 06:02 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2013-11-24 18:59 - 2010-05-05 08:37 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2013-11-24 18:59 - 2010-05-05 07:46 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2013-11-24 18:58 - 2013-04-12 15:36 - 01653096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2013-11-24 18:58 - 2012-01-03 07:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2013-11-24 18:58 - 2012-01-03 06:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2013-11-24 18:58 - 2011-03-12 13:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2013-11-24 18:58 - 2011-03-12 12:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2013-11-24 18:58 - 2011-02-24 07:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2013-11-24 18:58 - 2011-02-24 06:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-11-24 18:58 - 2010-12-21 07:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2013-11-24 18:58 - 2010-12-21 07:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-11-24 18:58 - 2010-12-21 07:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll 2013-11-24 18:58 - 2010-12-21 07:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2013-11-24 18:58 - 2010-12-21 07:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2013-11-24 18:58 - 2010-12-21 07:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2013-11-24 18:58 - 2010-12-21 07:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-11-24 18:58 - 2010-12-21 06:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2013-11-24 18:58 - 2010-12-21 06:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-11-24 18:58 - 2010-12-21 06:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll 2013-11-24 18:58 - 2010-12-21 06:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll 2013-11-24 18:58 - 2010-12-21 06:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll 2013-11-24 18:58 - 2010-12-21 06:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-11-24 18:58 - 2010-08-21 07:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-11-24 18:58 - 2010-08-21 06:33 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-11-24 18:58 - 2010-08-04 08:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll 2013-11-24 18:57 - 2013-02-12 15:02 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2013-11-24 18:57 - 2012-11-02 06:30 - 02001408 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2013-11-24 18:57 - 2012-11-02 06:30 - 01880064 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2013-11-24 18:57 - 2012-11-02 05:50 - 01388544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2013-11-24 18:57 - 2012-11-02 05:50 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2013-11-24 18:57 - 2012-08-02 18:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-11-24 18:57 - 2012-08-02 18:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2013-11-24 18:57 - 2012-06-09 06:30 - 14165504 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-11-24 18:57 - 2012-06-09 05:46 - 12868608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2013-11-24 18:57 - 2012-06-02 06:38 - 00152432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-24 18:57 - 2012-06-02 06:38 - 00095088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-24 18:57 - 2012-06-02 06:37 - 00459216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-24 18:57 - 2012-06-02 06:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-24 18:57 - 2012-06-02 05:48 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-24 18:57 - 2012-06-02 05:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-24 18:57 - 2012-06-02 05:42 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-24 18:57 - 2012-05-02 06:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2013-11-24 18:57 - 2012-04-26 06:34 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2013-11-24 18:57 - 2012-04-26 06:34 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2013-11-24 18:57 - 2012-04-26 06:28 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2013-11-24 18:57 - 2011-11-17 08:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-24 18:57 - 2011-11-17 08:11 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-24 18:57 - 2011-11-17 08:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-24 18:57 - 2011-11-17 08:08 - 01446912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-24 18:57 - 2011-11-17 08:05 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-24 18:57 - 2011-04-22 21:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2013-11-24 18:57 - 2011-03-11 07:19 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2013-11-24 18:57 - 2011-03-11 07:19 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2013-11-24 18:57 - 2011-03-11 06:40 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll 2013-11-24 18:57 - 2011-03-11 06:40 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll 2013-11-24 18:57 - 2011-03-03 07:17 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2013-11-24 18:57 - 2011-03-03 07:17 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2013-11-24 18:57 - 2011-03-03 07:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2013-11-24 18:57 - 2011-03-03 06:29 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2013-11-24 18:57 - 2011-03-03 06:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe 2013-11-24 18:57 - 2011-01-26 07:53 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-11-24 18:57 - 2011-01-26 07:53 - 00265088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2013-11-24 18:57 - 2011-01-26 07:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2013-11-24 18:57 - 2010-11-02 06:18 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2013-11-24 18:57 - 2010-11-02 06:12 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-11-24 18:57 - 2010-11-02 05:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll 2013-11-24 18:57 - 2010-08-21 07:29 - 00558592 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2013-11-24 18:57 - 2010-07-29 07:30 - 00082944 _____ (Radius Inc.) C:\Windows\SysWOW64\iccvid.dll 2013-11-24 18:57 - 2010-06-26 06:31 - 01863680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2013-11-24 18:57 - 2010-06-26 06:14 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2013-11-24 18:57 - 2010-06-19 07:53 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll 2013-11-24 18:57 - 2010-06-19 07:23 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll 2013-11-24 18:57 - 2010-05-23 11:15 - 01619456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-11-24 18:57 - 2010-05-23 11:11 - 03181568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2013-11-24 18:57 - 2010-05-23 11:11 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2013-11-24 18:57 - 2010-05-23 09:37 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-11-24 18:57 - 2010-05-23 09:35 - 04068864 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2013-11-24 18:57 - 2010-05-23 09:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2013-11-24 18:57 - 2010-05-23 09:35 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2013-11-24 18:56 - 2013-01-04 06:41 - 01893224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-11-24 18:56 - 2013-01-04 06:40 - 00287576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2013-11-24 18:56 - 2013-01-04 06:37 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2013-11-24 18:56 - 2013-01-04 06:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-11-24 18:56 - 2013-01-04 06:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2013-11-24 18:56 - 2013-01-04 06:36 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2013-11-24 18:56 - 2013-01-04 06:33 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2013-11-24 18:56 - 2013-01-04 06:30 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2013-11-24 18:56 - 2013-01-04 06:30 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2013-11-24 18:56 - 2013-01-04 06:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:51 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2013-11-24 18:56 - 2013-01-04 05:51 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2013-11-24 18:56 - 2013-01-04 05:51 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 04:19 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2013-11-24 18:56 - 2013-01-04 03:48 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-11-24 18:56 - 2013-01-04 03:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-11-24 18:56 - 2013-01-04 03:48 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-11-24 18:56 - 2013-01-04 03:48 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-11-24 18:56 - 2013-01-04 03:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 03:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 03:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2013-11-24 18:56 - 2013-01-04 03:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2013-11-24 18:56 - 2012-12-07 06:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2013-11-24 18:56 - 2012-12-07 06:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2013-11-24 18:56 - 2012-12-07 06:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2013-11-24 18:56 - 2012-12-07 05:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2013-11-24 18:56 - 2012-12-07 04:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2013-11-24 18:56 - 2012-12-07 04:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2013-11-24 18:56 - 2012-12-07 04:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2013-11-24 18:56 - 2012-11-22 11:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2013-11-24 18:56 - 2012-11-22 10:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2013-11-24 18:56 - 2012-11-20 06:55 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-24 18:56 - 2012-11-20 06:10 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-24 18:56 - 2012-11-02 06:27 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2013-11-24 18:56 - 2012-11-02 05:48 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2013-11-24 18:56 - 2012-09-06 18:38 - 00295792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2013-11-24 18:56 - 2012-08-24 19:05 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-11-24 18:56 - 2012-08-24 18:10 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-11-24 18:56 - 2012-04-28 04:50 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2013-11-24 18:56 - 2011-08-17 06:32 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2013-11-24 18:56 - 2011-08-17 06:27 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2013-11-24 18:56 - 2011-08-17 06:27 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2013-11-24 18:56 - 2011-08-17 06:27 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2013-11-24 18:56 - 2011-08-17 06:27 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2013-11-24 18:56 - 2011-08-17 05:26 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2013-11-24 18:56 - 2011-08-17 05:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSNP.ax 2013-11-24 18:56 - 2011-08-17 05:22 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2013-11-24 18:56 - 2011-08-17 05:22 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mpeg2Data.ax 2013-11-24 18:56 - 2011-08-17 05:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSDvbNP.ax 2013-11-24 18:56 - 2011-04-29 04:13 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2013-11-24 18:56 - 2011-04-29 04:12 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2013-11-24 18:56 - 2011-04-29 04:12 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2013-11-24 18:56 - 2010-08-21 07:38 - 01024512 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2013-11-24 18:56 - 2010-08-21 06:36 - 00738816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll 2013-11-24 18:55 - 2012-11-30 00:21 - 00420032 _____ C:\Windows\SysWOW64\locale.nls 2013-11-24 18:55 - 2012-11-30 00:19 - 00420032 _____ C:\Windows\system32\locale.nls 2013-11-24 18:55 - 2012-08-11 01:53 - 00714752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2013-11-24 18:55 - 2012-08-11 00:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2013-11-24 18:55 - 2012-04-07 13:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2013-11-24 18:55 - 2012-04-07 12:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2013-11-24 18:55 - 2012-03-17 08:55 - 00075632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2013-11-24 18:55 - 2011-12-28 04:59 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-24 18:54 - 2012-09-25 23:39 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2013-11-24 18:54 - 2012-09-25 22:55 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2013-11-24 18:54 - 2011-05-24 12:21 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2013-11-24 18:54 - 2011-05-24 11:34 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2013-11-24 18:54 - 2011-05-24 11:34 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2013-11-24 18:54 - 2011-05-24 11:34 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2013-11-24 18:54 - 2011-05-24 11:32 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2013-11-24 18:54 - 2011-02-05 13:41 - 00640896 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2013-11-24 18:54 - 2011-02-05 13:41 - 00556928 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2013-11-24 18:54 - 2011-02-05 13:41 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2013-11-24 18:54 - 2011-02-05 13:41 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2013-11-24 18:54 - 2011-02-05 13:41 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2013-11-24 18:54 - 2011-02-05 13:39 - 00603976 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2013-11-24 18:54 - 2011-02-05 13:39 - 00518160 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2013-11-24 18:54 - 2010-12-18 07:08 - 01097216 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2013-11-24 18:54 - 2010-12-18 06:26 - 01034240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2013-11-24 18:54 - 2010-08-31 05:32 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll 2013-11-24 18:54 - 2010-08-31 05:32 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll 2013-11-24 18:53 - 2013-11-25 11:14 - 00002974 _____ C:\Windows\IE11_main.log 2013-11-24 18:53 - 2013-03-19 07:19 - 05497688 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-11-24 18:53 - 2013-03-19 06:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2013-11-24 18:53 - 2013-03-19 06:06 - 03958120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-11-24 18:53 - 2013-03-19 06:06 - 03902312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-11-24 18:53 - 2013-03-19 05:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2013-11-24 18:53 - 2013-03-19 04:19 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2013-11-24 18:53 - 2013-01-24 06:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2013-11-24 18:53 - 2012-07-04 23:04 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2013-11-24 18:53 - 2012-07-04 23:01 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2013-11-24 18:53 - 2012-07-04 23:01 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2013-11-24 18:53 - 2012-07-04 22:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2013-11-24 18:53 - 2012-07-04 22:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2013-11-24 18:53 - 2012-05-14 06:20 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2013-11-24 18:53 - 2012-05-05 09:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2013-11-24 18:53 - 2012-05-05 08:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2013-11-24 18:53 - 2011-12-16 09:42 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2013-11-24 18:53 - 2011-12-16 08:59 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2013-11-24 18:53 - 2011-10-15 07:25 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2013-11-24 18:53 - 2011-10-15 06:48 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2013-11-24 18:53 - 2011-08-27 06:40 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2013-11-24 18:53 - 2011-08-27 06:40 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2013-11-24 18:53 - 2011-08-27 05:43 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2013-11-24 18:53 - 2011-08-27 05:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2013-11-24 18:53 - 2011-05-03 06:21 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2013-11-24 18:53 - 2011-05-03 05:50 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2013-11-24 18:53 - 2011-02-23 06:15 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2013-11-24 18:53 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2013-11-24 18:53 - 2011-02-18 06:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2013-11-24 18:53 - 2011-02-12 07:14 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2013-11-24 18:53 - 2010-10-16 06:23 - 00112000 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2013-11-24 18:53 - 2010-09-01 06:21 - 14627840 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-11-24 18:53 - 2010-09-01 06:12 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-11-24 18:53 - 2010-09-01 05:29 - 11406848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-11-24 18:53 - 2010-09-01 05:23 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-11-24 18:50 - 2012-06-02 06:25 - 01462784 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-24 18:50 - 2012-06-02 06:25 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-11-24 18:50 - 2012-06-02 06:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-11-24 18:50 - 2012-06-02 05:45 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-24 18:50 - 2012-06-02 05:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-11-24 18:50 - 2012-06-02 05:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-11-24 18:50 - 2011-11-17 08:14 - 01739160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-11-24 18:50 - 2011-11-17 06:41 - 01292592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-11-24 18:50 - 2010-10-16 06:17 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2013-11-24 18:50 - 2010-10-16 05:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll 2013-11-24 18:50 - 2010-08-27 07:14 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2013-11-24 18:50 - 2010-08-27 06:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll 2013-11-24 18:49 - 2011-11-19 16:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2013-11-24 18:49 - 2011-11-19 15:06 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2013-11-24 18:46 - 2013-11-24 18:46 - 00000000 ____D C:\Users\kai\AppData\Roaming\Google 2013-11-24 18:45 - 2013-11-25 13:38 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-24 18:45 - 2013-11-25 09:01 - 00002187 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-11-24 18:45 - 2013-11-25 08:31 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-24 18:45 - 2013-11-24 19:41 - 00000000 ____D C:\Users\kai\AppData\Local\Google 2013-11-24 18:45 - 2013-11-24 19:33 - 00004100 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-11-24 18:45 - 2013-11-24 19:33 - 00003848 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-11-24 18:45 - 2013-11-24 18:45 - 00000000 ____D C:\ProgramData\Google 2013-11-24 18:45 - 2013-11-24 18:45 - 00000000 ____D C:\Program Files\Google 2013-11-24 18:45 - 2013-11-24 18:45 - 00000000 ____D C:\Program Files (x86)\Google 2013-11-24 18:44 - 2013-11-24 18:44 - 00002031 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-11-24 18:34 - 2013-11-24 19:27 - 00000000 ____D C:\Users\kai\AppData\Local\Adobe 2013-11-24 18:26 - 2013-11-25 08:07 - 00004980 _____ C:\Windows\PFRO.log 2013-11-24 18:10 - 2012-02-15 07:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2013-11-24 18:10 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2013-11-24 18:10 - 2012-02-15 05:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2013-11-24 18:06 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2013-11-24 18:06 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2013-11-24 18:06 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2013-11-24 18:06 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2013-11-24 18:06 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2013-11-24 18:06 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2013-11-24 18:06 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2013-11-24 18:06 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2013-11-24 18:06 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2013-11-24 17:46 - 2013-11-24 17:46 - 00000000 ____D C:\Users\kai\Desktop\Visual Studio 2010 Premium (x86) - DVD (German) 2013-11-24 17:44 - 2013-11-24 17:44 - 00000000 ____D C:\Users\kai\Desktop\Visio 2010 with Service Pack 1 (x86 and x64) - DVD (German) 2013-11-24 17:31 - 2013-11-24 21:26 - 00000000 ____D C:\Users\kai\Desktop\Back_UP_231113 2013-11-24 17:26 - 2013-11-24 17:26 - 00000000 ____D C:\Users\kai\AppData\Roaming\Adobe 2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 ____D C:\Users\kai\AppData\Roaming\WildTangent 2013-11-24 17:10 - 2013-11-25 08:32 - 00000043 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini 2013-11-24 17:10 - 2013-11-25 08:31 - 00001417 _____ C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2013-11-24 17:10 - 2013-11-24 18:24 - 00174200 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 2013-11-24 17:10 - 2013-11-24 18:24 - 00007488 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT 2013-11-24 17:10 - 2013-11-24 18:24 - 00000000 ____D C:\Program Files\Symantec 2013-11-24 17:10 - 2013-11-24 17:10 - 00002609 _____ C:\Users\Public\Desktop\eBay.lnk 2013-11-24 17:10 - 2013-11-24 17:10 - 00000000 ____D C:\Users\kai\AppData\Roaming\Macromedia 2013-11-24 17:10 - 2013-11-24 17:10 - 00000000 ____D C:\Users\kai\AppData\Roaming\ATI 2013-11-24 17:10 - 2013-11-24 17:10 - 00000000 ____D C:\Users\kai\AppData\Local\ATI 2013-11-24 17:10 - 2013-11-24 17:10 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared 2013-11-24 17:10 - 2013-11-24 17:10 - 00000000 ____D C:\Program Files (x86)\OEM 2013-11-24 17:09 - 2013-11-25 14:17 - 00000000 ____D C:\Users\kai 2013-11-24 17:09 - 2013-11-25 11:23 - 00000000 ___RD C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-24 17:09 - 2013-11-25 08:31 - 00001451 _____ C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-24 17:09 - 2013-11-25 08:11 - 00059096 _____ C:\Users\kai\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-24 17:09 - 2013-11-25 08:10 - 00000000 ___RD C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-11-24 17:09 - 2013-11-24 17:10 - 00000737 _____ C:\Windows\WisGRegOffer.log 2013-11-24 17:09 - 2013-11-24 17:09 - 00001958 _____ C:\Users\Public\Desktop\PB Zubehör Shop.lnk 2013-11-24 17:09 - 2013-11-24 17:09 - 00000122 _____ C:\Windows\WLangUpt.log 2013-11-24 17:09 - 2013-11-24 17:09 - 00000020 ___SH C:\Users\kai\ntuser.ini 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Vorlagen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Startmenü 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Netzwerkumgebung 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Lokale Einstellungen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Eigene Dateien 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Druckumgebung 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Documents\Eigene Musik 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Documents\Eigene Bilder 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\AppData\Local\Verlauf 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\AppData\Local\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Programme 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\ProgramData\Favoriten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 __SHD C:\Recovery 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 ____D C:\Users\Public\Symantec 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 ____D C:\Users\kai\AppData\Local\VirtualStore 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 ____D C:\Program Files\PB Accessory Store 2013-11-24 17:09 - 2010-09-08 05:43 - 00000000 ___RD C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-11-24 17:09 - 2010-09-08 05:43 - 00000000 ___RD C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-11-24 16:55 - 2013-11-24 16:55 - 00001225 _____ C:\Users\Public\Desktop\Adobe Photoshop Elements 8.0.lnk 2013-11-24 16:55 - 2008-06-16 03:00 - 00055024 ____N (Sonic Solutions) C:\Windows\system32\Drivers\PxHlpa64.sys 2013-11-24 16:52 - 2013-11-24 16:52 - 00000345 _____ C:\Windows\system32\oem_Get_OS_Language.log 2013-11-24 16:52 - 2013-11-24 16:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2013-11-24 16:51 - 2013-11-24 16:51 - 00031400 _____ C:\Windows\DirectX.log 2013-11-24 16:51 - 2013-11-24 16:51 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2013-11-24 16:51 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2013-11-24 16:51 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2013-11-24 16:50 - 2013-11-24 16:50 - 00000000 ____D C:\Program Files (x86)\Windows Live SkyDrive 2013-11-24 16:49 - 2013-11-24 16:51 - 00000000 ____D C:\Program Files (x86)\Windows Live 2013-11-24 16:49 - 2013-11-24 16:49 - 00000000 ____D C:\Windows\PCHEALTH 2013-11-24 16:47 - 2013-11-24 16:47 - 00000000 ____D C:\Program Files (x86)\Cyberlink 2013-11-24 16:46 - 2013-11-24 16:47 - 00000000 ____D C:\Program Files (x86)\Social Networks 2013-11-24 16:46 - 2013-11-24 16:46 - 00000000 ____D C:\Program Files (x86)\Video Web Camera 2013-11-24 16:45 - 2013-11-24 16:45 - 00004702 _____ C:\Windows\DPINST.LOG 2013-11-24 16:45 - 2013-11-24 16:45 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute 2013-11-24 16:45 - 2013-11-24 16:45 - 00000184 _____ C:\Windows\LMv4.UNI 2013-11-24 16:45 - 2013-11-24 16:45 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2013-11-24 16:45 - 2013-11-24 16:45 - 00000000 ____D C:\Program Files\Synaptics 2013-11-24 16:45 - 2013-11-24 16:45 - 00000000 ____D C:\Program Files\Intel 2013-11-24 16:45 - 2013-11-24 16:45 - 00000000 ____D C:\Program Files (x86)\Launch Manager 2013-11-24 16:44 - 2013-11-24 16:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf 2013-11-24 16:44 - 2010-05-25 15:26 - 00264040 _____ (Atheros) C:\Windows\system32\Drivers\btfilter.sys 2013-11-24 16:44 - 2010-05-20 13:42 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll 2013-11-24 16:44 - 2010-05-20 13:42 - 00294760 _____ (Atheros) C:\Windows\system32\Drivers\btath_a2dp.sys 2013-11-24 16:44 - 2010-05-20 13:42 - 00202792 _____ (Atheros) C:\Windows\system32\Drivers\btath_hcrp.sys 2013-11-24 16:44 - 2010-05-20 13:42 - 00156392 _____ (Atheros) C:\Windows\system32\Drivers\btath_rcp.sys 2013-11-24 16:44 - 2010-05-20 13:42 - 00052584 _____ (Atheros) C:\Windows\system32\Drivers\btath_lwflt.sys 2013-11-24 16:44 - 2010-05-20 13:42 - 00038248 _____ (Atheros) C:\Windows\system32\Drivers\btath_flt.sys 2013-11-24 16:44 - 2010-05-20 13:42 - 00032296 _____ (Atheros) C:\Windows\system32\Drivers\btath_bus.sys 2013-11-24 16:43 - 2013-11-24 16:43 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite 2013-11-24 16:41 - 2013-11-24 16:41 - 00002142 _____ C:\RHDSetup.log 2013-11-24 16:41 - 2013-11-24 16:41 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-11-24 16:41 - 2013-11-24 16:41 - 00000000 ____D C:\Windows\Options 2013-11-24 16:41 - 2013-11-24 16:41 - 00000000 ____D C:\Program Files\Realtek 2013-11-24 16:41 - 2013-11-24 16:41 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-11-24 16:41 - 2010-07-29 03:26 - 02445672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2013-11-24 16:41 - 2010-07-29 03:26 - 02032232 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2013-11-24 16:41 - 2010-07-29 03:26 - 01146984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2013-11-24 16:41 - 2010-07-29 03:26 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2013-11-24 16:41 - 2010-07-29 03:26 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2013-11-24 16:41 - 2010-07-29 03:25 - 02618984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2013-11-24 16:41 - 2010-07-29 03:25 - 01213544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2013-11-24 16:41 - 2010-07-29 03:25 - 00476264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2013-11-24 16:41 - 2010-07-29 03:25 - 00372328 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2013-11-24 16:41 - 2010-07-29 03:25 - 00076904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll 2013-11-24 16:41 - 2010-07-27 22:54 - 01251944 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2013-11-24 16:41 - 2010-07-23 01:48 - 00220496 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFNHK64.dll 2013-11-24 16:41 - 2010-07-23 01:48 - 00081232 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFCOM64.dll 2013-11-24 16:41 - 2010-07-23 01:48 - 00078160 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFAPO64.dll 2013-11-24 16:41 - 2010-07-23 01:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2013-11-24 16:41 - 2010-07-23 01:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2013-11-24 16:41 - 2010-07-06 20:48 - 01756160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll 2013-11-24 16:41 - 2010-07-01 22:44 - 00124128 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2013-11-24 16:41 - 2010-07-01 22:44 - 00124128 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2013-11-24 16:41 - 2010-07-01 22:44 - 00123104 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2013-11-24 16:41 - 2010-06-28 02:14 - 00334848 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2013-11-24 16:41 - 2010-06-10 22:44 - 00037468 _____ C:\Windows\system32\Drivers\RtPCEE3.DAT 2013-11-24 16:41 - 2010-05-07 02:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2013-11-24 16:41 - 2010-05-07 01:43 - 02601816 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll 2013-11-24 16:41 - 2010-04-27 22:50 - 00330656 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2013-11-24 16:41 - 2010-04-15 02:56 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2013-11-24 16:41 - 2010-03-22 22:21 - 00247560 _____ C:\Windows\system32\Drivers\RTConvEQ.dat 2013-11-24 16:41 - 2010-03-22 22:21 - 00001448 _____ C:\Windows\system32\Drivers\RtHdatEx.dat 2013-11-24 16:41 - 2010-03-02 01:42 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX0.dat 2013-11-24 16:41 - 2010-02-12 00:45 - 00000176 _____ C:\Windows\system32\Drivers\RTHDAEQ1.dat 2013-11-24 16:41 - 2010-01-30 00:43 - 00000016 _____ C:\Windows\system32\Drivers\rtkhdaud.dat 2013-11-24 16:41 - 2010-01-27 06:52 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX3.dat 2013-11-24 16:41 - 2010-01-05 22:41 - 01325328 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2013-11-24 16:41 - 2010-01-05 22:41 - 00489744 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2013-11-24 16:41 - 2010-01-05 22:41 - 00474896 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2013-11-24 16:41 - 2010-01-05 22:40 - 01178384 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2013-11-24 16:41 - 2010-01-05 22:40 - 01110800 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2013-11-24 16:41 - 2010-01-05 22:40 - 00504592 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2013-11-24 16:41 - 2010-01-05 22:40 - 00315152 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2013-11-24 16:41 - 2010-01-05 22:40 - 00268560 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2013-11-24 16:41 - 2010-01-05 22:40 - 00265488 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2013-11-24 16:41 - 2009-12-16 03:26 - 00372936 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2013-11-24 16:41 - 2009-12-16 03:26 - 00201928 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2013-11-24 16:41 - 2009-12-16 03:26 - 00099016 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2013-11-24 16:41 - 2009-12-16 03:26 - 00076488 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2013-11-24 16:41 - 2009-12-11 18:55 - 00307920 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2013-11-24 16:41 - 2009-12-11 18:55 - 00307920 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2013-11-24 16:41 - 2009-12-04 00:28 - 00064000 ____N (LSI Corporation) C:\Windows\SysWOW64\agrsmdel.exe 2013-11-24 16:41 - 2009-12-04 00:28 - 00027648 ____N (LSI Corporation) C:\Windows\SysWOW64\agrsco64.dll 2013-11-24 16:41 - 2009-11-24 18:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2013-11-24 16:41 - 2009-11-24 18:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2013-11-24 16:41 - 2009-11-24 18:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2013-11-24 16:41 - 2009-11-24 18:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2013-11-24 16:41 - 2009-11-19 03:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll 2013-11-24 16:41 - 2009-11-18 03:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2013-11-24 16:41 - 2008-08-21 22:43 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX2.dat 2013-11-24 16:41 - 2005-06-27 14:29 - 00000520 _____ C:\Windows\system32\Drivers\RTEQEX1.dat 2013-11-24 16:40 - 2013-11-25 13:33 - 01951034 _____ C:\Windows\WindowsUpdate.log 2013-11-24 16:40 - 2013-11-24 16:40 - 00000000 ____D C:\ProgramData\ATI 2013-11-24 16:40 - 2013-11-24 16:40 - 00000000 ____D C:\Program Files\Broadcom 2013-11-24 16:39 - 2013-11-24 16:40 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-11-24 16:39 - 2013-11-24 16:39 - 00000000 ____D C:\Program Files\ATI 2013-11-24 16:38 - 2013-11-24 17:09 - 00000246 _____ C:\Windows\PatchFul.log 2013-11-24 16:38 - 2009-09-17 12:54 - 00056344 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys 2013-11-24 16:37 - 2013-11-24 16:37 - 00000000 _____ C:\Windows\ativpsrm.bin ==================== One Month Modified Files and Folders ======= 2013-11-25 14:19 - 2013-11-25 14:19 - 00000000 ____D C:\FRST 2013-11-25 14:19 - 2013-11-25 11:18 - 00000000 ____D C:\Users\kai\AppData\Roaming\newnext.me 2013-11-25 14:17 - 2013-11-25 14:17 - 00000468 _____ C:\Users\kai\Desktop\defogger_disable.log 2013-11-25 14:17 - 2013-11-25 14:17 - 00000000 _____ C:\Users\kai\defogger_reenable 2013-11-25 14:17 - 2013-11-24 17:09 - 00000000 ____D C:\Users\kai 2013-11-25 13:54 - 2013-11-24 19:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-25 13:38 - 2013-11-24 18:45 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-25 13:33 - 2013-11-24 16:40 - 01951034 _____ C:\Windows\WindowsUpdate.log 2013-11-25 11:50 - 2013-11-25 11:50 - 00000000 ____D C:\Users\kai\AppData\Roaming\Malwarebytes 2013-11-25 11:49 - 2013-11-25 11:49 - 00001121 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-25 11:49 - 2013-11-25 11:49 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-25 11:49 - 2013-11-25 11:49 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-25 11:49 - 2013-11-25 11:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\kai\Downloads\mbam-setup-1.75.0.1300 (1).exe 2013-11-25 11:48 - 2013-11-25 11:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\kai\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-25 11:26 - 2013-11-25 11:24 - 00000000 ____D C:\Windows\system32\MRT 2013-11-25 11:23 - 2013-11-25 11:18 - 00000000 ____D C:\Users\kai\AppData\Local\Mobogenie 2013-11-25 11:23 - 2013-11-25 11:17 - 00000000 ____D C:\Program Files (x86)\MyPC Backup 2013-11-25 11:23 - 2013-11-24 17:09 - 00000000 ___RD C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-25 11:18 - 2013-11-25 11:18 - 00000000 ____D C:\Users\kai\Documents\Mobogenie 2013-11-25 11:18 - 2013-11-25 11:18 - 00000000 ____D C:\Users\kai\AppData\Local\genienext 2013-11-25 11:18 - 2013-11-25 11:18 - 00000000 ____D C:\Users\kai\AppData\Local\cache 2013-11-25 11:18 - 2013-11-25 11:18 - 00000000 ____D C:\Users\kai\.android 2013-11-25 11:18 - 2013-11-25 11:18 - 00000000 _____ C:\Users\kai\daemonprocess.txt 2013-11-25 11:18 - 2013-11-25 11:17 - 00001353 _____ C:\Windows\IE10_main.log 2013-11-25 11:17 - 2013-11-25 11:15 - 00846864 _____ (Microsoft Corporation) C:\Users\kai\Downloads\MainOffer.exe 2013-11-25 11:14 - 2013-11-25 11:14 - 01126048 _____ (Conduit) C:\Users\kai\Downloads\Internet_Explorer_10.exe 2013-11-25 11:14 - 2013-11-24 18:53 - 00002974 _____ C:\Windows\IE11_main.log 2013-11-25 11:13 - 2013-11-25 11:13 - 02077392 _____ (Microsoft Corporation) C:\Users\kai\Downloads\IE11-Windows6.1.exe 2013-11-25 11:06 - 2013-11-25 11:06 - 00000000 ____D C:\Users\kai\Desktop\Visual Studio 2013 Premium 32-bit (German) 2013-11-25 09:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-25 09:13 - 2010-09-08 04:06 - 00000000 ____D C:\Windows\system32\Drivers\NISx64 2013-11-25 09:01 - 2013-11-24 18:45 - 00002187 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-11-25 08:41 - 2013-11-25 08:41 - 00000000 ____D C:\Users\kai\Downloads\Microsoft XNA Game Studio 4.0 (English) 2013-11-25 08:39 - 2013-11-25 08:39 - 00000000 ____D C:\Users\kai\Desktop\Visual Studio 2013 Premium 32-bit - Web Installer (German) 2013-11-25 08:37 - 2013-11-25 08:37 - 00000000 _____ C:\Users\kai\Desktop\SecureDownloadManager.log 2013-11-25 08:37 - 2009-07-14 05:45 - 00017376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-25 08:37 - 2009-07-14 05:45 - 00017376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-25 08:32 - 2013-11-24 17:10 - 00000043 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini 2013-11-25 08:31 - 2013-11-24 18:45 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-25 08:31 - 2013-11-24 17:10 - 00001417 _____ C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2013-11-25 08:31 - 2013-11-24 17:09 - 00001451 _____ C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-25 08:30 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-25 08:30 - 2009-07-14 05:51 - 00051986 _____ C:\Windows\setupact.log 2013-11-25 08:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-25 08:18 - 2013-11-24 23:44 - 00296212 _____ C:\Windows\msxml4-KB973688-enu.LOG 2013-11-25 08:17 - 2013-11-25 08:17 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0 2013-11-25 08:17 - 2013-11-24 23:34 - 00296494 _____ C:\Windows\msxml4-KB954430-enu.LOG 2013-11-25 08:16 - 2013-11-24 23:26 - 00007206 _____ C:\Windows\IE9_main.log 2013-11-25 08:15 - 2013-11-25 08:15 - 17773056 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 12268544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 10884096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 09702400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-25 08:15 - 2013-11-25 08:15 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-25 08:15 - 2013-11-25 08:15 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-25 08:15 - 2013-11-25 08:15 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-25 08:15 - 2013-11-25 08:15 - 02303488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 02136064 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01797632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01785344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01492992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-25 08:15 - 2013-11-25 08:15 - 01427456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-25 08:15 - 2013-11-25 08:15 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01344000 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01126912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 01102336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-25 08:15 - 2013-11-25 08:15 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-25 08:15 - 2013-11-25 08:15 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-25 08:15 - 2013-11-25 08:15 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-25 08:15 - 2013-11-25 08:15 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-25 08:15 - 2013-11-25 08:15 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-25 08:15 - 2013-11-25 08:15 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-25 08:13 - 2013-11-25 08:13 - 00000000 ____D C:\Windows\System32\Tasks\Symantec 2013-11-25 08:11 - 2013-11-24 17:09 - 00059096 _____ C:\Users\kai\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-25 08:10 - 2013-11-25 08:10 - 00003528 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask 2013-11-25 08:10 - 2013-11-25 08:10 - 00001762 _____ C:\Users\Public\Desktop\Browserwahl.lnk 2013-11-25 08:10 - 2013-11-24 17:09 - 00000000 ___RD C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-11-25 08:07 - 2013-11-24 18:26 - 00004980 _____ C:\Windows\PFRO.log 2013-11-25 08:07 - 2009-07-14 05:45 - 00272576 _____ C:\Windows\system32\FNTCACHE.DAT 2013-11-25 08:04 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System 2013-11-25 08:03 - 2010-09-08 04:25 - 00000000 ____D C:\Program Files\Windows Journal 2013-11-25 08:02 - 2010-09-08 04:07 - 00002501 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk 2013-11-25 01:32 - 2009-07-14 06:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG 2013-11-25 01:32 - 2009-07-14 06:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2013-11-25 01:31 - 2013-11-25 01:18 - 00001654 _____ C:\Windows\WPatchProgress.ini 2013-11-25 01:31 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\SysWOW64\winrm 2013-11-25 01:31 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\SysWOW64\WCN 2013-11-25 01:31 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\SysWOW64\sysprep 2013-11-25 01:31 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\SysWOW64\slmgr 2013-11-25 01:31 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\system32\winrm 2013-11-25 01:31 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\system32\WCN 2013-11-25 01:31 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\system32\slmgr 2013-11-25 01:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\oobe 2013-11-25 01:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\MUI 2013-11-25 01:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\MUI 2013-11-25 01:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Dism 2013-11-25 01:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\servicing 2013-11-25 01:31 - 2009-03-12 10:30 - 00000000 ____D C:\Windows\LP 2013-11-25 01:28 - 2013-11-25 01:29 - 00295922 _____ C:\Windows\system32\perfi007.dat 2013-11-25 01:28 - 2013-11-25 01:29 - 00038104 _____ C:\Windows\system32\perfd007.dat 2013-11-25 01:28 - 2013-11-25 01:28 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer 2013-11-25 01:28 - 2013-11-25 01:28 - 00000000 ____D C:\Windows\SysWOW64\de 2013-11-25 01:28 - 2013-11-25 01:28 - 00000000 ____D C:\Windows\SysWOW64\0407 2013-11-25 01:28 - 2013-11-25 01:28 - 00000000 ____D C:\Windows\system32\de 2013-11-25 01:28 - 2013-11-25 01:28 - 00000000 ____D C:\Windows\system32\0407 2013-11-25 01:28 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts 2013-11-25 01:28 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts 2013-11-25 01:28 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\DigitalLocker 2013-11-25 01:28 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2013-11-25 01:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Sidebar 2013-11-25 01:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-11-25 01:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-11-25 01:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker 2013-11-25 01:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar 2013-11-25 01:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2013-11-25 01:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-11-25 01:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Setup 2013-11-25 01:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz 2013-11-25 01:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Dism 2013-11-25 01:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\com 2013-11-25 01:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Setup 2013-11-25 01:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\oobe 2013-11-25 01:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\migwiz 2013-11-25 01:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\com 2013-11-25 01:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\IME 2013-11-25 01:23 - 2013-11-25 01:23 - 00000000 ____D C:\Windows\NAPP_Dism_Log 2013-11-25 01:23 - 2013-11-25 01:21 - 00007691 _____ C:\Windows\WisGAPas.log 2013-11-25 01:21 - 2013-11-25 01:21 - 00000926 _____ C:\Windows\MOD01SET74DE0N0003.XML 2013-11-25 01:21 - 2013-11-25 01:18 - 00234416 _____ C:\Windows\CapsuleDll.log 2013-11-25 01:20 - 2013-11-25 01:20 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2013-11-25 01:20 - 2013-11-25 01:20 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll 2013-11-25 01:20 - 2013-11-25 01:20 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-11-25 01:20 - 2013-11-25 01:20 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2013-11-25 01:20 - 2013-11-25 01:20 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-11-25 01:20 - 2013-11-25 01:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-11-25 01:19 - 2013-11-25 01:19 - 00000000 ____D C:\Windows\Lan 2013-11-25 01:19 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games 2013-11-24 21:26 - 2013-11-24 17:31 - 00000000 ____D C:\Users\kai\Desktop\Back_UP_231113 2013-11-24 21:20 - 2013-11-24 21:20 - 00000000 ____D C:\Users\kai\Desktop\Microsoft XNA Game Studio 4.0 (English) 2013-11-24 21:17 - 2013-11-24 21:17 - 00003125 _____ C:\Users\kai\Desktop\Secure Download Manager.lnk 2013-11-24 21:17 - 2013-11-24 21:17 - 00000183 _____ C:\Users\kai\Desktop\100245465996.sdx 2013-11-24 21:17 - 2013-11-24 21:17 - 00000000 ____D C:\Users\kai\AppData\Roaming\e-academy Inc 2013-11-24 21:17 - 2013-11-24 21:17 - 00000000 ____D C:\Users\kai\AppData\Local\e-academy Inc 2013-11-24 21:17 - 2013-11-24 21:17 - 00000000 _____ C:\Users\kai\Downloads\SecureDownloadManager.log 2013-11-24 21:16 - 2013-11-24 21:16 - 00719360 _____ C:\Users\kai\Downloads\SDM_DE.msi 2013-11-24 19:51 - 2013-11-24 19:51 - 00000000 ____D C:\ProgramData\Sun 2013-11-24 19:51 - 2013-11-24 19:51 - 00000000 ____D C:\ProgramData\Oracle 2013-11-24 19:50 - 2013-11-24 19:50 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-11-24 19:50 - 2013-11-24 19:50 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-11-24 19:50 - 2013-11-24 19:50 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-11-24 19:50 - 2013-11-24 19:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-11-24 19:50 - 2013-11-24 19:50 - 00000000 ____D C:\Program Files (x86)\Java 2013-11-24 19:41 - 2013-11-24 19:41 - 00000000 ____D C:\Users\kai\AppData\Roaming\AVAST Software 2013-11-24 19:41 - 2013-11-24 18:45 - 00000000 ____D C:\Users\kai\AppData\Local\Google 2013-11-24 19:40 - 2013-11-24 19:40 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-11-24 19:40 - 2013-11-24 19:40 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-11-24 19:40 - 2013-11-24 19:40 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-11-24 19:40 - 2013-11-24 19:40 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-11-24 19:40 - 2013-11-24 19:40 - 00001978 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-11-24 19:34 - 2013-11-24 19:34 - 00000000 ____D C:\Program Files\AVAST Software 2013-11-24 19:33 - 2013-11-24 18:45 - 00004100 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-11-24 19:33 - 2013-11-24 18:45 - 00003848 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-11-24 19:32 - 2013-11-24 19:32 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-24 19:27 - 2013-11-24 18:34 - 00000000 ____D C:\Users\kai\AppData\Local\Adobe 2013-11-24 19:26 - 2013-11-24 19:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-11-24 19:26 - 2013-11-24 19:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-24 19:26 - 2013-11-24 19:26 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-11-24 19:25 - 2013-11-24 19:25 - 00000000 ____D C:\Windows\system32\Macromed 2013-11-24 18:46 - 2013-11-24 18:46 - 00000000 ____D C:\Users\kai\AppData\Roaming\Google 2013-11-24 18:45 - 2013-11-24 18:45 - 00000000 ____D C:\ProgramData\Google 2013-11-24 18:45 - 2013-11-24 18:45 - 00000000 ____D C:\Program Files\Google 2013-11-24 18:45 - 2013-11-24 18:45 - 00000000 ____D C:\Program Files (x86)\Google 2013-11-24 18:44 - 2013-11-24 18:44 - 00002031 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-11-24 18:44 - 2010-09-08 04:05 - 00000000 ____D C:\ProgramData\Adobe 2013-11-24 18:44 - 2010-09-08 04:05 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-11-24 18:32 - 2013-11-25 01:29 - 00643866 _____ C:\Windows\system32\perfh007.dat 2013-11-24 18:32 - 2013-11-25 01:29 - 00126394 _____ C:\Windows\system32\perfc007.dat 2013-11-24 18:32 - 2009-07-14 06:13 - 01472002 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-24 18:24 - 2013-11-24 17:10 - 00174200 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 2013-11-24 18:24 - 2013-11-24 17:10 - 00007488 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT 2013-11-24 18:24 - 2013-11-24 17:10 - 00000000 ____D C:\Program Files\Symantec 2013-11-24 18:06 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\restore 2013-11-24 17:46 - 2013-11-24 17:46 - 00000000 ____D C:\Users\kai\Desktop\Visual Studio 2010 Premium (x86) - DVD (German) 2013-11-24 17:44 - 2013-11-24 17:44 - 00000000 ____D C:\Users\kai\Desktop\Visio 2010 with Service Pack 1 (x86 and x64) - DVD (German) 2013-11-24 17:26 - 2013-11-24 17:26 - 00000000 ____D C:\Users\kai\AppData\Roaming\Adobe 2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 ____D C:\Users\kai\AppData\Roaming\WildTangent 2013-11-24 17:10 - 2013-11-25 01:23 - 00002843 _____ C:\Windows\Patch.log 2013-11-24 17:10 - 2013-11-25 01:19 - 00000201 _____ C:\Windows\USER.XML 2013-11-24 17:10 - 2013-11-24 17:10 - 00002609 _____ C:\Users\Public\Desktop\eBay.lnk 2013-11-24 17:10 - 2013-11-24 17:10 - 00000000 ____D C:\Users\kai\AppData\Roaming\Macromedia 2013-11-24 17:10 - 2013-11-24 17:10 - 00000000 ____D C:\Users\kai\AppData\Roaming\ATI 2013-11-24 17:10 - 2013-11-24 17:10 - 00000000 ____D C:\Users\kai\AppData\Local\ATI 2013-11-24 17:10 - 2013-11-24 17:10 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared 2013-11-24 17:10 - 2013-11-24 17:10 - 00000000 ____D C:\Program Files (x86)\OEM 2013-11-24 17:10 - 2013-11-24 17:09 - 00000737 _____ C:\Windows\WisGRegOffer.log 2013-11-24 17:10 - 2010-09-08 04:22 - 00000000 ____D C:\ProgramData\oem 2013-11-24 17:10 - 2010-09-08 04:06 - 00000000 ____D C:\ProgramData\Norton 2013-11-24 17:10 - 2010-09-08 03:30 - 00782049 _____ C:\Windows\launApp.log 2013-11-24 17:10 - 2009-07-27 21:26 - 00000000 ___DC C:\elements 2013-11-24 17:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help 2013-11-24 17:09 - 2013-11-24 17:09 - 00001958 _____ C:\Users\Public\Desktop\PB Zubehör Shop.lnk 2013-11-24 17:09 - 2013-11-24 17:09 - 00000122 _____ C:\Windows\WLangUpt.log 2013-11-24 17:09 - 2013-11-24 17:09 - 00000020 ___SH C:\Users\kai\ntuser.ini 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Vorlagen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Startmenü 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Netzwerkumgebung 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Lokale Einstellungen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Eigene Dateien 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Druckumgebung 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Documents\Eigene Musik 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Documents\Eigene Bilder 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\AppData\Local\Verlauf 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\AppData\Local\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\kai\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Programme 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\ProgramData\Favoriten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 __SHD C:\Recovery 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 ____D C:\Users\Public\Symantec 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 ____D C:\Users\kai\AppData\Local\VirtualStore 2013-11-24 17:09 - 2013-11-24 17:09 - 00000000 ____D C:\Program Files\PB Accessory Store 2013-11-24 17:09 - 2013-11-24 16:38 - 00000246 _____ C:\Windows\PatchFul.log 2013-11-24 17:09 - 2010-09-08 04:17 - 00000000 ___HD C:\OEM 2013-11-24 17:09 - 2010-09-08 04:16 - 00157711 _____ C:\Windows\PLaunch.log 2013-11-24 17:09 - 2010-09-08 04:16 - 00000222 __RSH C:\Preload.rev 2013-11-24 17:09 - 2010-09-08 04:16 - 00000168 _____ C:\Windows\WisLangCode.ini 2013-11-24 17:09 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default 2013-11-24 17:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Recovery 2013-11-24 17:09 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT 2013-11-24 17:04 - 2010-09-08 04:16 - 00000213 _____ C:\Windows\Factory.xml 2013-11-24 17:03 - 2009-07-27 21:41 - 00000000 ____D C:\Windows\Panther 2013-11-24 17:03 - 2009-07-14 05:46 - 00004059 _____ C:\Windows\DtcInstall.log 2013-11-24 17:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep 2013-11-24 16:55 - 2013-11-25 01:21 - 00000267 _____ C:\Windows\LaunApp.ini 2013-11-24 16:55 - 2013-11-24 16:55 - 00001225 _____ C:\Users\Public\Desktop\Adobe Photoshop Elements 8.0.lnk 2013-11-24 16:52 - 2013-11-24 16:52 - 00000345 _____ C:\Windows\system32\oem_Get_OS_Language.log 2013-11-24 16:52 - 2013-11-24 16:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2013-11-24 16:51 - 2013-11-24 16:51 - 00031400 _____ C:\Windows\DirectX.log 2013-11-24 16:51 - 2013-11-24 16:51 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2013-11-24 16:51 - 2013-11-24 16:49 - 00000000 ____D C:\Program Files (x86)\Windows Live 2013-11-24 16:50 - 2013-11-24 16:50 - 00000000 ____D C:\Program Files (x86)\Windows Live SkyDrive 2013-11-24 16:49 - 2013-11-24 16:49 - 00000000 ____D C:\Windows\PCHEALTH 2013-11-24 16:49 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-11-24 16:48 - 2009-10-05 22:35 - 00000000 ____D C:\Windows\DeployWinRE2 2013-11-24 16:47 - 2013-11-24 16:47 - 00000000 ____D C:\Program Files (x86)\Cyberlink 2013-11-24 16:47 - 2013-11-24 16:46 - 00000000 ____D C:\Program Files (x86)\Social Networks 2013-11-24 16:47 - 2010-09-08 04:11 - 00000000 ____D C:\Program Files\Packard Bell 2013-11-24 16:47 - 2010-09-08 04:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-11-24 16:46 - 2013-11-24 16:46 - 00000000 ____D C:\Program Files (x86)\Video Web Camera 2013-11-24 16:46 - 2010-09-08 04:09 - 00000000 ____D C:\Program Files (x86)\Packard Bell 2013-11-24 16:45 - 2013-11-24 16:45 - 00004702 _____ C:\Windows\DPINST.LOG 2013-11-24 16:45 - 2013-11-24 16:45 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute 2013-11-24 16:45 - 2013-11-24 16:45 - 00000184 _____ C:\Windows\LMv4.UNI 2013-11-24 16:45 - 2013-11-24 16:45 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2013-11-24 16:45 - 2013-11-24 16:45 - 00000000 ____D C:\Program Files\Synaptics 2013-11-24 16:45 - 2013-11-24 16:45 - 00000000 ____D C:\Program Files\Intel 2013-11-24 16:45 - 2013-11-24 16:45 - 00000000 ____D C:\Program Files (x86)\Launch Manager 2013-11-24 16:44 - 2013-11-24 16:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf 2013-11-24 16:44 - 2010-05-21 12:26 - 00246804 _____ C:\Windows\system32\Drivers\AtherosBt.bin 2013-11-24 16:43 - 2013-11-24 16:43 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite 2013-11-24 16:41 - 2013-11-24 16:41 - 00002142 _____ C:\RHDSetup.log 2013-11-24 16:41 - 2013-11-24 16:41 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-11-24 16:41 - 2013-11-24 16:41 - 00000000 ____D C:\Windows\Options 2013-11-24 16:41 - 2013-11-24 16:41 - 00000000 ____D C:\Program Files\Realtek 2013-11-24 16:41 - 2013-11-24 16:41 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-11-24 16:40 - 2013-11-24 16:40 - 00000000 ____D C:\ProgramData\ATI 2013-11-24 16:40 - 2013-11-24 16:40 - 00000000 ____D C:\Program Files\Broadcom 2013-11-24 16:40 - 2013-11-24 16:39 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-11-24 16:40 - 2010-09-08 04:01 - 00000000 ____D C:\Program Files (x86)\Intel 2013-11-24 16:39 - 2013-11-24 16:39 - 00000000 ____D C:\Program Files\ATI 2013-11-24 16:37 - 2013-11-24 16:37 - 00000000 _____ C:\Windows\ativpsrm.bin 2013-11-24 16:35 - 2009-07-27 20:43 - 00005767 _____ C:\Windows\TSSysprep.log 2013-11-07 16:00 - 2013-11-25 11:24 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe Some content of TEMP: ==================== C:\Users\kai\AppData\Local\Temp\BackupSetup.exe C:\Users\kai\AppData\Local\Temp\MSN75ED.exe C:\Users\kai\AppData\Local\Temp\vcredist_x64.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-24 16:42 ==================== End Of Log ============================ |
|
25.11.2013, 23:30
| #6 | |
| /// Malwareteam | Werde "PUP.Optional.Conduit.A" nicht los.Zitat:
Mehrere Anti-Virus-ProgrammeCode:
ATTFilter avast! Free Antivirus
Norton Internet Security
Schritt 1 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 2 Lade dir  TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
Schritt 3 Starte noch einmal FRST.
Poste folgende Logfiles in deiner nächsten Antwort:
__________________ --> Werde "PUP.Optional.Conduit.A" nicht los. |
|
| Themen zu Werde "PUP.Optional.Conduit.A" nicht los. |
| .com, acrobat update, antivirus, blockiert, branding, dateien gelöscht, device driver, error, fehler, flash player, help, helper, installation, internet, internet explorer, maleware, msiinstaller, object, problem, programm, pup.optional.conduit.a, registry, richtlinie, rootkit, rundll, scan, security, server, svchost.exe, symantec, system, taskhost.exe, vista, windows, wuauclt.exe |
Hybrid-Darstellung
