|
Log-Analyse und Auswertung: win mediaplayer startet nicht! infiziert?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
03.12.2013, 19:21 | #1 |
| win mediaplayer startet nicht! infiziert? ein freundliches Hallo! weil win7 uodate SP1 länger schon nicht installiert werden konnte (unbekannter Fehler) den Fehlercode konnte ich in keinem Forum finden) habe ich mich vor einigen Tagen entschlossen, den Laptop über Samsung Recovery in den Auslieferungszustand zu versetzen (4 Jahre alt) habe den samsung R80 mit vorinstall. win7-home gekauft. (keine Install-CD, daher nur Recovery möglich) danach einige 100 win update incl SP1. WIN7 ist nun am neuesten Stand. alles ok, nur der win-media player lässt sich nicht starten. außerdem ist mir aufgefallen, dass C: im "Besitz" v. trustedinsaller ist und dieser auch in vielen Diensten Vollzugriff besitzt. Ich habe kein gutes Gefühl darum meine Bitte um Hilfe. Mein avast Internetsecurity hat keine Log. oder Quaranräne Eintäge auch der letzte scan war sauber, ebenso die scans mit Malwarebytes Anti-Malware. FRST.exe machte nur log FRST.txt aber keine Addition.txt. hoffentlich habe ich keinen Fehler gemacht ( habe es mehrmals probiert, Ergebnis gleich) mit netten Grüßen - froland Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 22:24 on 03/12/2013 (tom) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... ---------------------- GMER 2.1.19163 - hxxp://www.gmer.net Rootkit quick scan 2013-12-03 22:37:19 Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 SAMSUNG_ rev.2AC1 465,76GB Running: gmer_2.1.19163.exe; Driver: C:\Users\tom\AppData\Local\Temp\uwldipow.sys ---- Disk sectors - GMER 2.1 ---- Disk \Device\Harddisk0\DR0 unknown MBR code ---- Devices - GMER 2.1 ---- AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys AttachedDevice \Driver\tdx \Device\Tcp aswTdi.sys AttachedDevice \Driver\tdx \Device\Udp aswTdi.sys AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys ---- EOF - GMER 2.1 ---- Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-12-2013 Ran by tom (administrator) on TOM-PC on 03-12-2013 22:27:19 Running from C:\Users\tom\Desktop Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe () C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe () C:\Windows\System32\Rezip.exe () C:\Program Files\CyberLink\Shared files\RichVideo.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Glarysoft Ltd) C:\Program Files\Glary Utilities 4\Integrator.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8120864 2009-12-15] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1578280 2009-10-10] (Synaptics Incorporated) HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-27] (AVAST Software) HKCU\...\Run: [GUDelayStartup] - C:\Program Files\Glary Utilities 4\StartupManager.exe [37152 2013-11-19] (Glarysoft Ltd) Startup: C:\Users\tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) BootExecute: autocheck autochk * ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll (Google Inc.) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.) Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Chrome: ======= CHR RestoreOnStartup: "hxxp://www.google.com/" CHR Extension: (Google Docs) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Google Wallet) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx ========================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-27] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [116776 2013-11-27] (AVAST Software) R2 OberonGameConsoleService; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [44312 2009-08-13] () S3 Partner Service; C:\ProgramData\Partner\Partner.exe [332272 2010-03-05] (Google Inc.) R2 Rezip; C:\windows\SYSTEM32\Rezip.exe [311296 2009-03-05] () R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] () ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [35656 2013-11-27] (AVAST Software) R1 aswKbd; C:\windows\system32\drivers\aswKbd.sys [26136 2013-11-27] (AVAST Software) R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [70384 2013-11-27] (AVAST Software) R1 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [259928 2013-11-27] (AVAST Software) R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [79720 2013-11-27] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-11-27] () R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [774392 2013-11-27] (AVAST Software) R1 aswSP; C:\windows\system32\drivers\aswSP.sys [403440 2013-11-27] (AVAST Software) R1 aswTdi; C:\windows\system32\drivers\aswTdi.sys [57672 2013-11-27] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [178304 2013-11-27] () R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [14528 2013-11-18] (Glarysoft Ltd) S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) S3 rtport; C:\windows\system32\drivers\rtport.sys [15656 2010-05-24] (Windows (R) 2003 DDK 3790 provider) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13752 2009-09-29] () R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] () ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-03 22:27 - 2013-12-03 22:27 - 00008625 _____ C:\Users\tom\Desktop\FRST.txt 2013-12-03 22:24 - 2013-12-03 22:24 - 00000442 _____ C:\Users\tom\Desktop\defogger_disable.log 2013-12-03 22:22 - 2013-12-03 22:22 - 00377856 _____ C:\Users\tom\Desktop\gmer_2.1.19163.exe 2013-12-03 22:19 - 2013-12-03 22:19 - 00050477 _____ C:\Users\tom\Desktop\Defogger.exe 2013-12-03 22:18 - 2013-12-03 22:18 - 01092389 _____ (Farbar) C:\Users\tom\Desktop\FRST.exe 2013-12-03 17:12 - 2013-12-03 17:51 - 87529432 _____ (AVAST Software) C:\Users\tom\Downloads\avast_free_antivirus_setup2008.exe 2013-12-03 04:04 - 2013-12-03 04:04 - 00000000 ____D C:\FRST 2013-12-03 04:02 - 2013-12-03 04:02 - 00000000 _____ C:\Users\tom\defogger_reenable 2013-12-03 04:02 - 2013-12-03 04:02 - 00000000 _____ C:\Users\tom\defogger_reenable 2013-12-02 21:04 - 2013-12-02 21:04 - 00000649 _____ C:\Users\tom\Desktop\tom - Verknüpfung.lnk 2013-12-02 21:04 - 2013-12-02 21:04 - 00000355 _____ C:\Users\tom\Desktop\Computer - Verknüpfung.lnk 2013-11-28 23:22 - 2013-12-03 16:58 - 00001019 _____ C:\windows\setupact.log 2013-11-28 23:22 - 2013-11-28 23:22 - 00000000 _____ C:\windows\setuperr.log 2013-11-28 22:05 - 2013-11-28 22:05 - 00000000 ____D C:\Users\tom\AppData\Local\WindowsUpdate 2013-11-28 21:32 - 2013-11-28 21:32 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 2013-11-28 21:27 - 2013-11-28 21:27 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8 2013-11-28 16:46 - 2013-12-03 17:01 - 00002054 _____ C:\Users\tom\Desktop\SafeZone-Browser.lnk 2013-11-28 16:33 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys 2013-11-28 16:33 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys 2013-11-28 16:33 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys 2013-11-28 16:33 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys 2013-11-28 16:33 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys 2013-11-28 16:33 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys 2013-11-28 16:33 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys 2013-11-28 16:16 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll 2013-11-28 16:16 - 2012-02-11 06:37 - 00317440 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe 2013-11-28 16:16 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\windows\explorer.exe 2013-11-28 15:59 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 03419136 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 02284544 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 01988096 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 01247744 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 01158144 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 01080832 _____ (Microsoft Corporation) C:\windows\system32\d3d10.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00906240 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00604160 _____ (Microsoft Corporation) C:\windows\system32\d3d10level9.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00364544 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00293376 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00249856 _____ (Microsoft Corporation) C:\windows\system32\d3d10_1core.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\d3d10core.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00207872 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecsExt.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\UIAnimation.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00161792 _____ (Microsoft Corporation) C:\windows\system32\d3d10_1.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\taskhost.exe 2013-11-28 14:39 - 2013-11-28 14:39 - 00010752 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00009728 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00005632 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00005632 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00002560 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-11-28 14:38 - 2013-11-28 14:38 - 01505280 _____ (Microsoft Corporation) C:\windows\system32\d3d11.dll 2013-11-28 14:36 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL 2013-11-28 14:36 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\windows\system32\certutil.exe 2013-11-28 14:36 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\certenc.dll 2013-11-28 14:35 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll 2013-11-28 14:35 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 01:52 - 00271360 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe 2013-11-28 14:34 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-11-28 14:34 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-11-28 14:34 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys 2013-11-28 14:34 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-11-28 14:34 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys 2013-11-28 14:34 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys 2013-11-28 14:34 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll 2013-11-28 14:34 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll 2013-11-28 14:34 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll 2013-11-28 14:34 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll 2013-11-28 14:34 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys 2013-11-28 14:34 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll 2013-11-28 14:34 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll 2013-11-28 14:34 - 2013-04-10 06:18 - 00218984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys 2013-11-28 14:34 - 2013-03-19 05:53 - 00186368 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll 2013-11-28 14:34 - 2013-03-19 04:33 - 00040960 _____ (Microsoft Corporation) C:\windows\system32\wwanprotdim.dll 2013-11-28 14:34 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore6.dll 2013-11-28 14:34 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc6.dll 2013-11-28 14:34 - 2012-08-22 18:16 - 00712048 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys 2013-11-28 14:34 - 2012-07-04 20:45 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RNDISMP.sys 2013-11-28 14:32 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys 2013-11-28 14:25 - 2013-06-15 04:38 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys 2013-11-28 14:24 - 2013-02-27 06:05 - 00101720 _____ (Microsoft Corporation) C:\windows\system32\consent.exe 2013-11-28 14:24 - 2013-02-27 05:49 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll 2013-11-28 01:25 - 2013-12-02 22:02 - 00055296 ___SH C:\Users\tom\Thumbs.db 2013-11-28 01:25 - 2013-12-02 22:02 - 00055296 ___SH C:\Users\tom\Thumbs.db 2013-11-28 01:25 - 2011-04-14 11:12 - 00003515 _____ C:\Users\tom\bmw_lenkst_rep.vorne.htm 2013-11-28 01:25 - 2011-04-14 11:12 - 00003515 _____ C:\Users\tom\bmw_lenkst_rep.vorne.htm 2013-11-28 01:24 - 2013-11-28 01:24 - 00000000 ____D C:\Users\tom\Witziges 2013-11-28 01:24 - 2013-11-28 01:24 - 00000000 ____D C:\Users\tom\Witziges 2013-11-28 01:23 - 2013-11-28 01:23 - 00000000 ____D C:\Users\tom\Vokabel 2013-11-28 01:23 - 2013-11-28 01:23 - 00000000 ____D C:\Users\tom\Vokabel 2013-11-28 01:18 - 2013-11-28 01:18 - 00000000 ____D C:\Users\tom\Tests 2013-11-28 01:18 - 2013-11-28 01:18 - 00000000 ____D C:\Users\tom\Tests 2013-11-28 01:17 - 2013-12-03 15:58 - 00000000 ____D C:\Users\tom\Sinnestäuschung 2013-11-28 01:17 - 2013-12-03 15:58 - 00000000 ____D C:\Users\tom\Sinnestäuschung 2013-11-28 01:15 - 2013-12-02 21:54 - 00000000 ____D C:\Users\tom\Meine Scans 2013-11-28 01:15 - 2013-12-02 21:54 - 00000000 ____D C:\Users\tom\Meine Scans 2013-11-28 00:02 - 2010-09-10 19:00 - 02497825 _____ (No23) C:\Users\tom\Downloads\No23Recorder2103.exe 2013-11-27 23:40 - 2013-11-28 01:57 - 00000000 ____D C:\Users\tom\AppData\Roaming\Skype 2013-11-27 23:40 - 2013-11-27 23:40 - 00000000 ___RD C:\Program Files\Skype 2013-11-27 23:40 - 2013-11-27 23:40 - 00000000 ____D C:\Program Files\Common Files\Skype 2013-11-27 23:39 - 2013-11-27 23:40 - 00000000 ____D C:\ProgramData\Skype 2013-11-27 23:39 - 2013-11-27 23:40 - 00000000 ____D C:\ProgramData\Skype 2013-11-27 21:07 - 2013-11-28 01:51 - 00000000 ____D C:\ProgramData\GlarySoft 2013-11-27 21:07 - 2013-11-28 01:51 - 00000000 ____D C:\ProgramData\GlarySoft 2013-11-27 20:32 - 2013-11-27 20:32 - 00000000 ____D C:\windows\system32\SPReview 2013-11-27 20:31 - 2013-11-27 20:31 - 00000000 ____D C:\windows\system32\EventProviders 2013-11-27 20:16 - 2010-11-20 13:32 - 05066752 _____ (Microsoft Corporation) C:\windows\system32\AuthFWSnapin.dll 2013-11-27 20:16 - 2010-11-20 13:30 - 00233344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys 2013-11-27 20:16 - 2010-11-20 13:29 - 00520064 _____ (Microsoft Corporation) C:\windows\system32\mcupdate_GenuineIntel.dll 2013-11-27 20:16 - 2010-11-20 13:29 - 00014208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hwpolicy.sys 2013-11-27 20:16 - 2010-11-20 13:24 - 00508904 _____ (Microsoft Corporation) C:\windows\system32\winload.exe 2013-11-27 20:16 - 2010-11-20 11:22 - 00213504 _____ (Microsoft Corporation) C:\windows\system32\rdpdd.dll 2013-11-27 20:16 - 2010-11-05 03:20 - 00146852 _____ C:\windows\system32\systemsf.ebd 2013-11-27 20:16 - 2010-11-05 02:58 - 01130824 _____ (Microsoft Corporation) C:\windows\system32\dfshim.dll 2013-11-27 20:16 - 2010-11-05 02:58 - 00297808 _____ (Microsoft Corporation) C:\windows\system32\mscoree.dll 2013-11-27 20:16 - 2010-11-05 02:58 - 00049488 _____ (Microsoft Corporation) C:\windows\system32\netfxperf.dll 2013-11-27 20:16 - 2010-11-05 02:53 - 00295264 _____ (Microsoft Corporation) C:\windows\system32\PresentationHost.exe 2013-11-27 20:16 - 2010-11-05 02:53 - 00099176 _____ (Microsoft Corporation) C:\windows\system32\PresentationHostProxy.dll 2013-11-27 20:15 - 2010-11-20 13:36 - 01077248 _____ (Microsoft Corporation) C:\windows\system32\Narrator.exe 2013-11-27 20:15 - 2010-11-20 13:36 - 00107008 _____ (Microsoft Corporation) C:\windows\system32\NAPHLPR.DLL 2013-11-27 20:15 - 2010-11-20 13:36 - 00046080 _____ (Microsoft Corporation) C:\windows\system32\NAPCRYPT.DLL 2013-11-27 20:15 - 2010-11-20 13:30 - 00245632 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys 2013-11-27 20:15 - 2010-11-20 13:30 - 00173440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdyboost.sys 2013-11-27 20:15 - 2010-11-20 13:30 - 00160128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vhdmp.sys 2013-11-27 20:15 - 2010-11-20 13:30 - 00153984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys 2013-11-27 20:15 - 2010-11-20 13:30 - 00140160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\scsiport.sys 2013-11-27 20:15 - 2010-11-20 13:30 - 00130432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpio.sys 2013-11-27 20:15 - 2010-11-20 13:30 - 00116096 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msdsm.sys 2013-11-27 20:15 - 2010-11-20 13:30 - 00085376 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sbp2port.sys 2013-11-27 20:15 - 2010-11-20 13:30 - 00078208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys 2013-11-27 20:15 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgr.sys 2013-11-27 20:15 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\termdd.sys 2013-11-27 20:15 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msahci.sys 2013-11-27 20:15 - 2010-11-20 13:29 - 02217856 _____ (Microsoft Corporation) C:\windows\system32\bootres.dll 2013-11-27 20:15 - 2010-11-20 13:29 - 00274304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\acpi.sys 2013-11-27 20:15 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\windows\system32\halmacpi.dll 2013-11-27 20:15 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\windows\system32\hal.dll 2013-11-27 20:15 - 2010-11-20 13:29 - 00137088 _____ (Microsoft Corporation) C:\windows\system32\halacpi.dll 2013-11-27 20:15 - 2010-11-20 13:24 - 00690680 _____ (Microsoft Corporation) C:\windows\system32\ci.dll 2013-11-27 20:15 - 2010-11-20 13:24 - 00442720 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe 2013-11-27 20:15 - 2010-11-20 13:24 - 00271664 _____ (Microsoft Corporation) C:\windows\system32\fveapi.dll 2013-11-27 20:15 - 2010-11-20 13:23 - 00144768 _____ (Microsoft Corporation) C:\windows\system32\basecsp.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 02983424 _____ (Microsoft Corporation) C:\windows\system32\UIRibbon.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 02755072 _____ (Microsoft Corporation) C:\windows\system32\themeui.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 02311168 _____ (Microsoft Corporation) C:\windows\system32\wpdshext.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 02202624 _____ (Microsoft Corporation) C:\windows\system32\SensorsCpl.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 02157568 _____ (Microsoft Corporation) C:\windows\system32\themecpl.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 02146304 _____ (Microsoft Corporation) C:\windows\system32\SyncCenter.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 01624064 _____ (Microsoft Corporation) C:\windows\system32\WMPEncEn.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 01326592 _____ (Microsoft Corporation) C:\windows\system32\wlanpref.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 01227776 _____ (Microsoft Corporation) C:\windows\system32\wdc.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 01063936 _____ (Microsoft Corporation) C:\windows\system32\werconcpl.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 01003008 _____ (Microsoft Corporation) C:\windows\system32\WMNetMgr.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00933376 _____ (Microsoft Corporation) C:\windows\system32\Vault.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00907776 _____ (Microsoft Corporation) C:\windows\system32\sdengin2.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00902656 _____ (Microsoft Corporation) C:\windows\system32\WMADMOD.DLL 2013-11-27 20:15 - 2010-11-20 13:21 - 00782336 _____ (Microsoft Corporation) C:\windows\system32\webservices.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00778240 _____ (Microsoft Corporation) C:\windows\system32\sqlsrv32.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00766464 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00755200 _____ (Microsoft Corporation) C:\windows\system32\sud.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00750080 _____ (Microsoft Corporation) C:\windows\system32\sdcpl.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00739328 _____ (Microsoft Corporation) C:\windows\system32\WMSPDMOD.DLL 2013-11-27 20:15 - 2010-11-20 13:21 - 00738816 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00697344 _____ (Microsoft Corporation) C:\windows\system32\SmiEngine.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00638976 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00616960 _____ (Microsoft Corporation) C:\windows\system32\wmdrmsdk.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00600064 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00577024 _____ (Microsoft Corporation) C:\windows\system32\wpd_ci.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00551424 _____ (Microsoft Corporation) C:\windows\system32\samsrv.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00541184 _____ (Microsoft Corporation) C:\windows\system32\WMVSDECD.DLL 2013-11-27 20:15 - 2010-11-20 13:21 - 00507392 _____ (Microsoft Corporation) C:\windows\system32\wmdrmdev.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00473600 _____ (Microsoft Corporation) C:\windows\system32\riched20.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00463360 _____ (Microsoft Corporation) C:\windows\system32\wiaservc.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00458752 _____ (Microsoft Corporation) C:\windows\system32\WSDApi.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00444928 _____ (Microsoft Corporation) C:\windows\system32\wvc.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00436736 _____ (Microsoft Corporation) C:\windows\system32\wmdrmnet.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00428544 _____ (Microsoft Corporation) C:\windows\system32\shwebsvc.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00428032 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00416768 _____ (Microsoft Corporation) C:\windows\system32\wiadefui.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00411648 _____ (Microsoft Corporation) C:\windows\system32\wlangpui.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00410624 _____ (Microsoft Corporation) C:\windows\system32\systemcpl.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00410112 _____ (Microsoft Corporation) C:\windows\system32\wlanui.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00406528 _____ (Microsoft Corporation) C:\windows\system32\wimgapi.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00380416 _____ (Microsoft Corporation) C:\windows\system32\sxs.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00372224 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00363520 _____ (Microsoft Corporation) C:\windows\system32\StructuredQuery.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\windows\system32\termmgr.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\windows\system32\spwizeng.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00352256 _____ (Microsoft Corporation) C:\windows\system32\wmpeffects.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\windows\system32\wmicmiplugin.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00350720 _____ (Microsoft Corporation) C:\windows\system32\WPDSp.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00346624 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00335872 _____ (Microsoft Corporation) C:\windows\system32\WinSATAPI.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00328192 _____ (Microsoft Corporation) C:\windows\system32\shsvcs.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00327680 _____ (Microsoft Corporation) C:\windows\system32\zipfldr.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00318976 _____ (Microsoft Corporation) C:\windows\system32\raschap.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00316416 _____ (Microsoft Corporation) C:\windows\system32\sharemediacpl.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\sqlcese30.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00307712 _____ (Microsoft Corporation) C:\windows\system32\scesrv.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00305152 _____ (Microsoft Corporation) C:\windows\system32\taskcomp.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00301568 _____ (Microsoft Corporation) C:\windows\system32\srchadmin.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\wmpdxm.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\rasmans.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00276992 _____ (Microsoft Corporation) C:\windows\system32\wcncsvc.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00269824 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00257024 _____ (Microsoft Corporation) C:\windows\system32\srrstr.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\ReAgent.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\scansetting.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\windows\system32\vpnike.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\windows\system32\tapisrv.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00233472 _____ (Microsoft Corporation) C:\windows\system32\taskbarcpl.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00228352 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00222208 _____ (Microsoft Corporation) C:\windows\system32\wavemsp.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\ws2_32.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00202240 _____ (Microsoft Corporation) C:\windows\system32\unattend.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\windows\system32\wpdwcn.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\windows\system32\sysclass.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00196608 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00196096 _____ (Microsoft Corporation) C:\windows\system32\vaultsvc.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00194048 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00193536 _____ (Microsoft Corporation) C:\windows\system32\sppcomapi.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00186368 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00182272 _____ (Microsoft Corporation) C:\windows\system32\wmpsrcwp.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00181760 _____ (Microsoft Corporation) C:\windows\system32\tcpipcfg.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00176640 _____ (Microsoft Corporation) C:\windows\system32\rasppp.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00175616 _____ (Microsoft Corporation) C:\windows\system32\scecli.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00172544 _____ (Microsoft Corporation) C:\windows\system32\spp.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00160256 _____ (Microsoft Corporation) C:\windows\system32\vdsbas.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\syncui.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00156672 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00151040 _____ (Microsoft Corporation) C:\windows\system32\vdsutil.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00146944 _____ (Microsoft Corporation) C:\windows\system32\remotepg.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\twext.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\wmpps.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\recovery.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\XpsRasterService.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00134656 _____ (Microsoft Corporation) C:\windows\system32\WinSCard.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00125952 _____ (Microsoft Corporation) C:\windows\system32\sdrsvc.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00119808 _____ (Microsoft Corporation) C:\windows\system32\umpo.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00118784 _____ (Microsoft Corporation) C:\windows\system32\uxlib.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\sppnp.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\setupcln.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00111104 _____ (Microsoft Corporation) C:\windows\system32\shsetup.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00109568 _____ (Microsoft Corporation) C:\windows\system32\wiavideo.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\t2embed.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\shacct.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\WPDShServiceObj.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00105472 _____ (Microsoft Corporation) C:\windows\system32\wmpshell.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\sppinst.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\srvcli.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp_isv.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\wkssvc.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00082944 _____ (Microsoft Corporation) C:\windows\system32\thumbcache.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00080896 _____ (Microsoft Corporation) C:\windows\system32\QUTIL.DLL 2013-11-27 20:15 - 2010-11-20 13:21 - 00078848 _____ (Microsoft Corporation) C:\windows\system32\UserAccountControlSettings.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\TabSvc.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\regapi.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\rastapi.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\spbcd.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\unimdmat.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\vfwwdm32.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\sppuinotify.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\rdpd3d.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\wsnmp32.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\wscapi.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00051200 _____ (Twain Working Group) C:\windows\twain_32.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\samcli.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\umb.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\wkscli.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\WavDest.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00046080 _____ (Microsoft Corporation) C:\windows\system32\RpcRtRemote.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wtsapi32.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\rtutils.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00036352 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\shimgvw.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\wiarpc.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\windows\system32\wdiasqmmodule.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\windows\system32\utildll.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\vpnikeapi.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\windows\system32\wsdchngr.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\windows\system32\TRAPI.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\windows\system32\rdprefdrvapi.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\shgina.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\spopk.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\sisbkup.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\schedcli.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\syssetup.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\slwga.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\tsbyuv.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\sscore.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\windows\system32\riched32.dll 2013-11-27 20:15 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\windows\system32\rdpcfgex.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 02504192 _____ (Microsoft Corporation) C:\windows\system32\WMVCORE.DLL 2013-11-27 20:15 - 2010-11-20 13:20 - 02494464 _____ (Microsoft Corporation) C:\windows\system32\netshell.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 02130944 _____ (Microsoft Corporation) C:\windows\system32\networkmap.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 01750528 _____ (Microsoft Corporation) C:\windows\system32\pnidui.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 01661440 _____ (Microsoft Corporation) C:\windows\system32\networkexplorer.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 01644032 _____ (Microsoft Corporation) C:\windows\system32\netcenter.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 01508864 _____ (Microsoft Corporation) C:\windows\system32\pla.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 01160192 _____ (Microsoft Corporation) C:\windows\system32\OpcServices.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 01111552 _____ (Microsoft Corporation) C:\windows\system32\onexui.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00988160 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00932352 _____ (Microsoft Corporation) C:\windows\system32\printui.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\OobeFldr.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\NaturalLanguage6.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00600576 _____ (Microsoft Corporation) C:\windows\system32\PerfCenterCPL.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00441856 _____ (Microsoft Corporation) C:\windows\system32\powercpl.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00427520 _____ (Microsoft Corporation) C:\windows\system32\PortableDeviceStatus.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00395264 _____ (Microsoft Corporation) C:\windows\system32\prnfldr.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00346112 _____ (Microsoft Corporation) C:\windows\system32\nshipsec.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00330240 _____ (Microsoft Corporation) C:\windows\system32\QAGENTRT.DLL 2013-11-27 20:15 - 2010-11-20 13:20 - 00324608 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00297472 _____ (Microsoft Corporation) C:\windows\system32\ntprint.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\photowiz.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00283136 _____ (Microsoft Corporation) C:\windows\system32\qdv.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00236544 _____ (Microsoft Corporation) C:\windows\system32\pdh.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00225792 _____ (Microsoft Corporation) C:\windows\system32\netdiagfx.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00218112 _____ (Microsoft Corporation) C:\windows\system32\OnLineIDCpl.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\qasf.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00199168 _____ (Microsoft Corporation) C:\windows\system32\onex.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\qcap.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00183296 _____ (Microsoft Corporation) C:\windows\system32\PortableDeviceSyncProvider.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00175616 _____ (Microsoft Corporation) C:\windows\system32\netplwiz.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00174592 _____ (Microsoft Corporation) C:\windows\system32\ocsetapi.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00171520 _____ (Microsoft Corporation) C:\windows\system32\QAGENT.DLL 2013-11-27 20:15 - 2010-11-20 13:20 - 00167936 _____ (Microsoft Corporation) C:\windows\system32\QSHVHOST.DLL 2013-11-27 20:15 - 2010-11-20 13:20 - 00166400 _____ (Microsoft Corporation) C:\windows\system32\netiohlp.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00165376 _____ (Microsoft Corporation) C:\windows\system32\provsvc.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00161792 _____ (Microsoft Corporation) C:\windows\system32\netjoin.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\mydocs.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00121344 _____ (Microsoft Corporation) C:\windows\system32\sppc.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00120320 _____ (Microsoft Corporation) C:\windows\system32\prntvpt.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\netid.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\prncache.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\QSVRMGMT.DLL 2013-11-27 20:15 - 2010-11-20 13:20 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\olepro32.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00078848 _____ (Microsoft Corporation) C:\windows\system32\nci.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\olethk32.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\QCLIPROV.DLL 2013-11-27 20:15 - 2010-11-20 13:20 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\ntlanman.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\napdsnap.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00060928 _____ (Microsoft Corporation) C:\windows\system32\ncryptui.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\pdhui.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00040960 _____ (Microsoft Corporation) C:\windows\system32\odbcconf.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\PrintIsolationProxy.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\netutils.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\perfts.dll 2013-11-27 20:15 - 2010-11-20 13:20 - 00011776 _____ (Microsoft Corporation) C:\windows\system32\nrpsrv.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 01066496 _____ (Microsoft Corporation) C:\windows\system32\msdtctm.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00856576 _____ (Microsoft Corporation) C:\windows\system32\FirewallControlPanel.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00830464 _____ (Microsoft Corporation) C:\windows\system32\MSMPEG2ENC.DLL 2013-11-27 20:15 - 2010-11-20 13:19 - 00828928 _____ (Microsoft Corporation) C:\windows\system32\fontext.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00727040 _____ (Microsoft Corporation) C:\windows\system32\mcmde.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00592384 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\msscp.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00488448 _____ (Microsoft Corporation) C:\windows\system32\evr.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00481792 _____ (Microsoft Corporation) C:\windows\system32\mscms.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00430080 _____ (Microsoft Corporation) C:\windows\system32\FXSTIFF.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00429056 _____ (Microsoft Corporation) C:\windows\system32\localsec.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\msdri.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00414208 _____ (Microsoft Corporation) C:\windows\system32\mspbda.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00400896 _____ (Microsoft Corporation) C:\windows\system32\ipsmsnap.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00392192 _____ (Microsoft Corporation) C:\windows\system32\imapi2.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00350208 _____ (Microsoft Corporation) C:\windows\system32\IPSECSVC.DLL 2013-11-27 20:15 - 2010-11-20 13:19 - 00337408 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\windows\system32\mtxclu.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00312832 _____ (Microsoft Corporation) C:\windows\system32\hgcpl.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00301568 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00296448 _____ (Microsoft Corporation) C:\windows\system32\mfds.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00271360 _____ (Microsoft Corporation) C:\windows\system32\iprtrmgr.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00268800 _____ (Microsoft Corporation) C:\windows\system32\mprddm.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00266752 _____ (Microsoft Corporation) C:\windows\system32\MediaMetadataHandler.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00265216 _____ (Microsoft Corporation) C:\windows\system32\msnetobj.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\MSAC3ENC.DLL 2013-11-27 20:15 - 2010-11-20 13:19 - 00219648 _____ (Microsoft Corporation) C:\windows\system32\iTVData.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00213504 _____ (Microsoft Corporation) C:\windows\system32\MMDevAPI.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00209920 _____ (Microsoft Corporation) C:\windows\system32\mstask.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00202240 _____ (Microsoft Corporation) C:\windows\system32\input.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00196608 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00194560 _____ (Microsoft Corporation) C:\windows\system32\ListSvc.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00176128 _____ (Microsoft Corporation) C:\windows\system32\msorcl32.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00176128 _____ (Microsoft Corporation) C:\windows\system32\MFPlay.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\iasrad.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00167936 _____ (Microsoft Corporation) C:\windows\system32\msutb.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\windows\system32\mprapi.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\windows\system32\itircl.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00155136 _____ (Microsoft Corporation) C:\windows\system32\hgprint.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00148992 _____ (Microsoft Corporation) C:\windows\system32\ifsutil.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\logoncli.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\inetpp.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00124416 _____ (Microsoft Corporation) C:\windows\system32\fde.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00122880 _____ (Microsoft Corporation) C:\windows\system32\iasrecst.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00120320 _____ (Microsoft Corporation) C:\windows\system32\msvfw32.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\imm32.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00103936 _____ (Microsoft Corporation) C:\windows\system32\IPHLPAPI.DLL 2013-11-27 20:15 - 2010-11-20 13:19 - 00101888 _____ (Microsoft Corporation) C:\windows\system32\migisol.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\fphc.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\windows\system32\fms.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\mciavi32.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00082944 _____ (Radius Inc.) C:\windows\system32\iccvid.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00078848 _____ (Microsoft Corporation) C:\windows\system32\iasacct.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\mapistub.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\mapi32.dll 2013-11-27 20:15 - 2010-11-20 13:19 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\KMSVC.DLL 2013-11-27 20:15 - 2010-11-20 13:17 - 03179520 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 01131008 _____ (Microsoft Corporation) C:\windows\system32\sdclt.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00941568 _____ (Microsoft Corporation) C:\windows\system32\mblctr.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00586752 _____ (Microsoft Corporation) C:\windows\system32\dfrgui.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00523264 _____ (Microsoft Corporation) C:\windows\system32\FXSSVC.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00477696 _____ (Microsoft Corporation) C:\windows\system32\lpksetup.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00453632 _____ (Microsoft Corporation) C:\windows\system32\vds.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00334336 _____ (Microsoft Corporation) C:\windows\system32\wisptis.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00327680 _____ (Microsoft Corporation) C:\windows\system32\wimserv.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00327168 _____ (Microsoft Corporation) C:\windows\system32\nltest.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00325632 _____ (Microsoft Corporation) C:\windows\system32\slui.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\wusa.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00314368 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00303104 _____ (Microsoft Corporation) C:\windows\system32\msinfo32.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00292864 _____ (Microsoft Corporation) C:\windows\system32\WindowsAnytimeUpgradeResults.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00288256 _____ (Microsoft Corporation) C:\windows\system32\eudcedit.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00280064 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00278016 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp_isv.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00276480 _____ (Microsoft Corporation) C:\windows\system32\diskraid.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00270336 _____ (Microsoft Corporation) C:\windows\system32\sethc.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00257536 _____ (Microsoft Corporation) C:\windows\system32\WindowsAnytimeUpgrade.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00254976 _____ (Microsoft Corporation) C:\windows\system32\wsqmcons.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00233984 _____ (Microsoft Corporation) C:\windows\system32\msconfig.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\taskmgr.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\recdisc.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00209920 _____ (Microsoft Corporation) C:\windows\system32\PkgMgr.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00197632 _____ (Microsoft Corporation) C:\windows\system32\ocsetup.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\taskeng.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00182784 _____ (Microsoft Corporation) C:\windows\system32\RelPost.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\schtasks.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00157184 _____ (Microsoft Corporation) C:\windows\system32\perfmon.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00144896 _____ (Microsoft Corporation) C:\windows\system32\iscsicli.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00142336 _____ (Microsoft Corporation) C:\windows\system32\net1.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00133632 _____ (Microsoft Corporation) C:\windows\system32\diskpart.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00132608 _____ (Microsoft Corporation) C:\windows\system32\MdSched.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00113152 _____ (Microsoft Corporation) C:\windows\system32\setupugc.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00103936 _____ (Microsoft Corporation) C:\windows\system32\setupcl.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\mobsync.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00098816 _____ (Microsoft) C:\windows\system32\Robocopy.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\nslookup.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00095232 _____ (Microsoft Corporation) C:\windows\system32\logagent.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\isoburn.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\cmstp.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00082944 _____ (Microsoft Corporation) C:\windows\system32\logman.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00074240 _____ (Microsoft Corporation) C:\windows\system32\tabcal.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\msiexec.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\MuiUnattend.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\w32tm.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\findstr.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\manage-bde.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\lpremove.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\PnPUnattend.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00059904 _____ (Microsoft Corporation) C:\windows\system32\djoin.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00057344 _____ (Microsoft Corporation) C:\windows\system32\repair-bde.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\MultiDigiMon.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\takeown.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\runonce.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\tzutil.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ftp.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\relog.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\unlodctr.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\proquota.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\userinit.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\netiougc.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\netcfg.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\netbtugc.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\ReAgentc.exe 2013-11-27 20:15 - 2010-11-20 13:17 - 00010752 _____ (Microsoft Corporation) C:\windows\system32\LogonUI.exe 2013-11-27 20:15 - 2010-11-20 13:16 - 00905216 _____ (Microsoft Corporation) C:\windows\system32\mmsys.cpl 2013-11-27 20:15 - 2010-11-20 13:16 - 00878592 _____ (Microsoft Corporation) C:\windows\system32\Bubbles.scr 2013-11-27 20:15 - 2010-11-20 13:16 - 00776192 _____ (Microsoft Corporation) C:\windows\system32\calc.exe 2013-11-27 20:15 - 2010-11-20 13:16 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\bthprops.cpl 2013-11-27 20:15 - 2010-11-20 13:16 - 00679424 _____ (Microsoft Corporation) C:\windows\system32\autoconv.exe 2013-11-27 20:15 - 2010-11-20 13:16 - 00668160 _____ (Microsoft Corporation) C:\windows\system32\autochk.exe 2013-11-27 20:15 - 2010-11-20 13:16 - 00658944 _____ (Microsoft Corporation) C:\windows\system32\autofmt.exe 2013-11-27 20:15 - 2010-11-20 13:16 - 00649216 _____ (Microsoft Corporation) C:\windows\system32\appwiz.cpl 2013-11-27 20:15 - 2010-11-20 13:16 - 00600576 _____ (Microsoft Corporation) C:\windows\system32\TabletPC.cpl 2013-11-27 20:15 - 2010-11-20 13:16 - 00516096 _____ (Microsoft Corporation) C:\windows\system32\main.cpl 2013-11-27 20:15 - 2010-11-20 13:16 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\PhotoScreensaver.scr 2013-11-27 20:15 - 2010-11-20 13:16 - 00389632 _____ (Microsoft Corporation) C:\windows\system32\sysmon.ocx 2013-11-27 20:15 - 2010-11-20 13:16 - 00345088 _____ (Microsoft Corporation) C:\windows\system32\intl.cpl 2013-11-27 20:15 - 2010-11-20 13:16 - 00326656 _____ (Microsoft Corporation) C:\windows\system32\sysdm.cpl 2013-11-27 20:15 - 2010-11-20 13:16 - 00320000 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv 2013-11-27 20:15 - 2010-11-20 13:16 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\bcdedit.exe 2013-11-27 20:15 - 2010-11-20 13:16 - 00293888 _____ (Microsoft Corporation) C:\windows\system32\ssText3d.scr 2013-11-27 20:15 - 2010-11-20 13:16 - 00281088 _____ (Microsoft Corporation) C:\windows\system32\unimdm.tsp 2013-11-27 20:15 - 2010-11-20 13:16 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\Mystify.scr 2013-11-27 20:15 - 2010-11-20 13:16 - 00220672 _____ (Microsoft Corporation) C:\windows\system32\Ribbons.scr 2013-11-27 20:15 - 2010-11-20 13:16 - 00193536 _____ (Microsoft Corporation) C:\windows\system32\ksproxy.ax 2013-11-27 20:15 - 2010-11-20 13:16 - 00186368 _____ (Microsoft Corporation) C:\windows\system32\bitsadmin.exe 2013-11-27 20:15 - 2010-11-20 13:16 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\wdmaud.drv 2013-11-27 20:15 - 2010-11-20 13:16 - 00153600 _____ (Microsoft Corporation) C:\windows\system32\VBICodec.ax 2013-11-27 20:15 - 2010-11-20 13:16 - 00146944 _____ (Microsoft Corporation) C:\windows\system32\bcdboot.exe 2013-11-27 20:15 - 2010-11-20 13:16 - 00142336 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl 2013-11-27 20:15 - 2010-11-20 13:16 - 00128000 _____ (Microsoft Corporation) C:\windows\system32\desk.cpl 2013-11-27 20:15 - 2010-11-20 13:16 - 00119808 _____ (Microsoft Corporation) C:\windows\system32\aitagent.exe 2013-11-27 20:15 - 2010-11-20 13:16 - 00107008 _____ (Microsoft Corporation) C:\windows\system32\Kswdmcap.ax 2013-11-27 20:15 - 2010-11-20 13:16 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe 2013-11-27 20:15 - 2010-11-20 13:16 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\kstvtune.ax 2013-11-27 20:15 - 2010-11-20 13:16 - 00068608 _____ (Microsoft Corporation) C:\windows\system32\WSTPager.ax 2013-11-27 20:15 - 2010-11-20 13:16 - 00065024 _____ (Microsoft Corporation) C:\windows\bfsvc.exe 2013-11-27 20:15 - 2010-11-20 13:16 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ksxbar.ax 2013-11-27 20:15 - 2010-11-20 13:16 - 00045568 _____ (Microsoft Corporation) C:\windows\system32\g711codc.ax 2013-11-27 20:15 - 2010-11-20 13:16 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\vbisurf.ax 2013-11-27 20:15 - 2010-11-20 13:07 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\UIRibbonRes.dll 2013-11-27 20:15 - 2010-11-20 13:05 - 00121856 _____ (Microsoft Corporation) C:\windows\system32\RDPENCDD.dll 2013-11-27 20:15 - 2010-11-20 13:00 - 01027584 _____ (Microsoft Corporation) C:\windows\system32\IMJP10.IME 2013-11-27 20:15 - 2010-11-20 13:00 - 00430080 _____ (Microsoft Corporation) C:\windows\system32\imkr80.ime 2013-11-27 20:15 - 2010-11-20 12:54 - 00302592 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll 2013-11-27 20:15 - 2010-11-20 11:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbrpm.sys 2013-11-27 20:15 - 2010-11-20 11:07 - 00118784 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndiswan.sys 2013-11-27 20:15 - 2010-11-20 11:07 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndproxy.sys 2013-11-27 20:15 - 2010-11-20 11:06 - 00117760 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rmcast.sys 2013-11-27 20:15 - 2010-11-20 11:06 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tunnel.sys 2013-11-27 20:15 - 2010-11-20 11:06 - 00046080 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndisuio.sys 2013-11-27 20:15 - 2010-11-20 11:01 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\1394ohci.sys 2013-11-27 20:15 - 2010-11-20 10:59 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidusb.sys 2013-11-27 20:15 - 2010-11-20 10:50 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys 2013-11-27 20:15 - 2010-11-20 10:50 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\CompositeBus.sys 2013-11-27 20:15 - 2010-11-20 10:29 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys 2013-11-27 20:15 - 2010-11-20 09:47 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\acpipmi.sys 2013-11-27 20:15 - 2010-11-20 09:44 - 00242688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdbss.sys 2013-11-27 20:15 - 2010-11-20 09:42 - 00246784 _____ (Microsoft Corporation) C:\windows\system32\Drivers\udfs.sys 2013-11-27 20:15 - 2010-11-20 09:42 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys 2013-11-27 20:15 - 2010-11-20 09:40 - 00513536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys 2013-11-27 20:15 - 2010-11-20 09:39 - 00187904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbt.sys 2013-11-27 20:15 - 2010-11-20 09:39 - 00074752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys 2013-11-27 20:15 - 2010-11-20 09:39 - 00021504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdi.sys 2013-11-27 20:15 - 2010-11-20 09:38 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cdrom.sys 2013-11-27 20:15 - 2010-11-20 06:23 - 00053600 _____ C:\windows\system32\dosx.exe 2013-11-27 20:15 - 2010-11-10 02:45 - 00010429 _____ C:\windows\system32\ScavengeSpace.xml 2013-11-27 20:15 - 2010-11-05 03:11 - 00312168 _____ (Microsoft Corporation) C:\windows\system32\MCEWMDRMNDBootstrap.dll 2013-11-27 20:15 - 2010-11-05 02:58 - 00155472 _____ (Microsoft Corporation) C:\windows\system32\mscorier.dll 2013-11-27 20:15 - 2010-11-05 02:58 - 00080720 _____ (Microsoft Corporation) C:\windows\system32\mscories.dll 2013-11-27 20:14 - 2010-11-20 13:21 - 00363008 _____ (Microsoft Corporation) C:\windows\system32\wbemcomn.dll 2013-11-27 20:14 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\windows\system32\wdscore.dll 2013-11-27 20:14 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\windows\system32\sqmapi.dll 2013-11-27 20:14 - 2010-11-20 13:21 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\wshirda.dll 2013-11-27 20:14 - 2010-11-20 13:21 - 00010752 _____ (Microsoft Corporation) C:\windows\system32\shunimpl.dll 2013-11-27 20:14 - 2010-11-20 13:21 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\msdxm.ocx 2013-11-27 20:14 - 2010-11-20 13:21 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\dxmasf.dll 2013-11-27 20:14 - 2010-11-20 13:20 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\spwmp.dll 2013-11-27 20:14 - 2010-11-20 13:18 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\C_ISCII.DLL 2013-11-27 20:14 - 2010-11-20 13:18 - 00010752 _____ (Microsoft Corporation) C:\windows\system32\browseui.dll 2013-11-27 20:14 - 2010-11-20 13:08 - 12625408 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL 2013-11-27 20:14 - 2010-11-20 13:07 - 00007680 _____ (Microsoft Corporation) C:\windows\system32\spwizres.dll 2013-11-27 20:14 - 2010-11-20 13:06 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\nlsbres.dll 2013-11-27 20:14 - 2010-11-20 13:05 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\pifmgr.dll 2013-11-27 20:14 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDSG.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\kbdlk41a.dll 2013-11-27 20:14 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDCZ1.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDTUQ.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDTUF.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDSF.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDPO.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDNEPR.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDINBEN.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDGR1.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDGKL.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDUS.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDUGHR1.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDTURME.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDTAJIK.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDMON.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDMAORI.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDLT1.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDINTEL.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDINTAM.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDINORI.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDINMAR.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDINKAN.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDINHIN.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDBULG.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDBLR.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL 2013-11-27 20:14 - 2010-11-20 13:00 - 00005632 _____ (Microsoft Corporation) C:\windows\system32\KBDGEO.DLL 2013-11-27 20:14 - 2010-11-20 12:56 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\BlbEvents.dll 2013-11-27 20:14 - 2010-11-20 11:22 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RDPCDD.sys 2013-11-27 20:14 - 2010-11-20 11:21 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\RDPREFDD.dll 2013-11-27 20:14 - 2010-11-20 11:07 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wanarp.sys 2013-11-27 20:14 - 2010-11-20 11:00 - 00304128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\HdAudio.sys 2013-11-27 20:14 - 2010-11-20 11:00 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\umbus.sys 2013-11-27 20:14 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBCAMD2.sys 2013-11-27 20:14 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBCAMD.sys 2013-11-27 20:14 - 2010-11-20 10:59 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys 2013-11-27 20:14 - 2010-11-20 10:50 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\kbdhid.sys 2013-11-27 20:14 - 2010-11-20 10:50 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffp_sd.sys 2013-11-27 20:14 - 2010-11-20 10:24 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\scfilter.sys 2013-11-27 20:14 - 2010-11-20 10:19 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys 2013-11-27 20:14 - 2010-11-05 03:20 - 00105559 _____ C:\windows\system32\RacRules.xml 2013-11-27 20:05 - 2013-11-27 20:05 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-27 20:05 - 2013-11-27 20:05 - 00000000 ____D C:\Users\tom\AppData\Roaming\Malwarebytes 2013-11-27 20:05 - 2013-11-27 20:05 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-27 20:05 - 2013-11-27 20:05 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-27 20:05 - 2013-11-27 20:05 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-11-27 20:05 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2013-11-27 20:00 - 2013-11-27 20:10 - 35095200 _____ (Skype Technologies S.A.) C:\Users\tom\Downloads\Skype611SetupFull.exe 2013-11-27 19:58 - 2013-11-27 20:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\tom\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-27 19:37 - 2012-07-06 20:23 - 00393728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys 2013-11-27 19:37 - 2011-04-28 04:15 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BTHUSB.SYS 2013-11-27 19:37 - 2011-03-11 06:39 - 00148864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys 2013-11-27 19:37 - 2011-03-11 06:39 - 00143744 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvstor.sys 2013-11-27 19:37 - 2011-03-11 06:39 - 00117120 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvraid.sys 2013-11-27 19:37 - 2011-03-11 06:38 - 00332160 _____ (Intel Corporation) C:\windows\system32\Drivers\iaStorV.sys 2013-11-27 19:37 - 2011-03-11 06:38 - 00080256 _____ (Advanced Micro Devices) C:\windows\system32\Drivers\amdsata.sys 2013-11-27 19:37 - 2011-03-11 06:38 - 00022400 _____ (Advanced Micro Devices) C:\windows\system32\Drivers\amdxata.sys 2013-11-27 19:37 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\windows\system32\esent.dll 2013-11-27 19:37 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\windows\system32\fsutil.exe 2013-11-27 19:37 - 2011-03-11 05:01 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS 2013-11-27 19:37 - 2010-11-20 13:17 - 00219648 _____ (Microsoft Corporation) C:\windows\system32\fsquirt.exe 2013-11-27 19:17 - 2013-11-27 19:17 - 00002113 _____ C:\Users\Public\Desktop\avast! SafeZone.lnk 2013-11-27 19:17 - 2013-11-27 19:16 - 00026136 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys 2013-11-27 19:16 - 2013-11-27 19:16 - 00259928 _____ (AVAST Software) C:\windows\system32\Drivers\aswNdisFlt.sys 2013-11-27 18:34 - 2013-11-27 18:34 - 00000000 ____D C:\Users\Public\CyberLink 2013-11-27 18:34 - 2013-11-27 18:34 - 00000000 ____D C:\Users\Public\CyberLink 2013-11-27 18:12 - 2013-11-28 17:17 - 00000000 ____D C:\windows\system32\MRT 2013-11-27 18:12 - 2013-11-28 17:15 - 80340640 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-11-27 18:09 - 2013-11-27 18:09 - 00001409 _____ C:\Users\tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-27 17:56 - 2013-11-27 18:03 - 00000410 _____ C:\windows\Tasks\GlaryOneClickOptimizer 4.job 2013-11-27 17:55 - 2013-12-03 17:01 - 00000316 _____ C:\windows\Tasks\GlaryInitialize 4.job 2013-11-27 17:55 - 2013-12-03 17:01 - 00000000 ____D C:\Program Files\Glary Utilities 4 2013-11-27 17:55 - 2013-11-27 17:55 - 00001038 _____ C:\Users\Public\Desktop\Glary Utilities 4.lnk 2013-11-27 17:55 - 2013-11-27 17:55 - 00000000 ____D C:\Users\tom\AppData\Roaming\GlarySoft 2013-11-27 17:55 - 2013-11-19 04:56 - 00101664 _____ (Glarysoft Ltd) C:\windows\system32\BootDefrag.exe 2013-11-27 17:55 - 2013-11-18 02:18 - 00014528 _____ (Glarysoft Ltd) C:\windows\system32\Drivers\BootDefragDriver.sys 2013-11-27 17:53 - 2013-11-27 17:54 - 12240536 _____ C:\Users\tom\Downloads\glary_up4setup.exe 2013-11-27 17:51 - 2013-11-11 05:50 - 00230048 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe 2013-11-27 17:25 - 2013-11-28 21:20 - 00001222 _____ C:\Users\tom\Desktop\Revo Uninstaller.lnk 2013-11-27 17:25 - 2013-11-27 17:25 - 00000000 ____D C:\Program Files\VS Revo Group 2013-11-27 17:21 - 2013-11-27 17:21 - 00000000 ____D C:\Users\tom\AppData\Roaming\AVAST Software 2013-11-27 17:19 - 2013-11-27 17:19 - 00774392 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00403440 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00269216 _____ (AVAST Software) C:\windows\system32\aswBoot.exe 2013-11-27 17:19 - 2013-11-27 17:19 - 00178304 _____ C:\windows\system32\Drivers\aswVmm.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00079720 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00070384 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00057672 _____ (AVAST Software) C:\windows\system32\Drivers\aswTdi.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00049944 _____ C:\windows\system32\Drivers\aswRvrt.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr 2013-11-27 17:19 - 2013-11-27 17:19 - 00035656 _____ (AVAST Software) C:\windows\system32\Drivers\aswFsBlk.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00000000 ____D C:\Program Files\AVAST Software 2013-11-27 17:18 - 2013-11-27 17:18 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-27 17:18 - 2013-11-27 17:18 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-27 17:14 - 2013-11-27 17:14 - 00000000 ____D C:\Users\tom\AppData\Roaming\Macromedia 2013-11-27 17:11 - 2012-07-26 04:39 - 00047720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfLdr.sys 2013-11-27 17:11 - 2012-07-26 03:46 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\Wdfres.dll 2013-11-27 17:11 - 2012-06-02 15:34 - 00000003 _____ C:\windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2013-11-27 17:10 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe 2013-11-27 17:10 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\windows\system32\WUDFx.dll 2013-11-27 17:10 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll 2013-11-27 17:10 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll 2013-11-27 17:10 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\WUDFCoinstaller.dll 2013-11-27 17:10 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys 2013-11-27 17:10 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys 2013-11-27 17:10 - 2012-06-02 15:57 - 00000003 _____ C:\windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2013-11-27 17:09 - 2012-03-01 06:46 - 00019824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fs_rec.sys 2013-11-27 17:09 - 2012-03-01 06:33 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll 2013-11-27 17:09 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\wmi.dll 2013-11-27 17:03 - 2013-12-03 22:24 - 00001098 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-27 17:03 - 2013-12-03 17:24 - 00001094 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-27 16:59 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll 2013-11-27 16:59 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\windows\system32\gameux.dll 2013-11-27 16:59 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\windows\system32\cero.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\windows\system32\esrb.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\windows\system32\fpb.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\windows\system32\oflc-nz.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\windows\system32\pegibbfc.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\windows\system32\csrr.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\windows\system32\cob-au.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\windows\system32\usk.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\windows\system32\oflc.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\windows\system32\grb.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\windows\system32\pegi-pt.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\windows\system32\pegi-fi.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\windows\system32\pegi.rs 2013-11-27 16:59 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\windows\system32\djctq.rs 2013-11-27 16:59 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\windows\system32\cdosys.dll 2013-11-27 16:58 - 2013-03-19 05:48 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll 2013-11-27 16:58 - 2013-03-19 03:49 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe 2013-11-27 16:58 - 2013-01-03 06:04 - 00187752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS 2013-11-27 16:58 - 2012-11-30 00:17 - 00420064 _____ C:\windows\system32\locale.nls 2013-11-27 16:58 - 2012-08-22 18:16 - 00240496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys 2013-11-27 16:58 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\webio.dll 2013-11-27 16:58 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\windows\system32\sbe.dll 2013-11-27 16:58 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\windows\system32\CPFilters.dll 2013-11-27 16:58 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\mpg2splt.ax 2013-11-27 16:57 - 2013-02-12 04:32 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usb8023.sys 2013-11-27 16:57 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll 2013-11-27 16:57 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\windows\system32\dpnet.dll 2013-11-27 16:57 - 2012-11-01 05:47 - 01389568 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll 2013-11-27 16:57 - 2012-08-11 00:56 - 00542208 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll 2013-11-27 16:57 - 2012-06-06 06:05 - 01236992 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll 2013-11-27 16:57 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\windows\system32\EncDec.dll 2013-11-27 16:57 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\windows\system32\tquery.dll 2013-11-27 16:57 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\windows\system32\mssrch.dll 2013-11-27 16:57 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\windows\system32\mssvp.dll 2013-11-27 16:57 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\windows\system32\mssph.dll 2013-11-27 16:57 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\mssphtb.dll 2013-11-27 16:57 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\msscntrs.dll 2013-11-27 16:57 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\windows\system32\SearchIndexer.exe 2013-11-27 16:57 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\windows\system32\SearchProtocolHost.exe 2013-11-27 16:57 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\SearchFilterHost.exe 2013-11-27 16:57 - 2010-11-20 12:57 - 00002560 _____ (Microsoft Corporation) C:\windows\system32\dpnaddr.dll 2013-11-27 16:57 - 2010-06-26 04:24 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll 2013-11-27 16:56 - 2013-04-12 14:45 - 01211752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys 2013-11-27 16:56 - 2013-01-24 05:47 - 00196328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys 2013-11-27 16:56 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\synceng.dll 2013-11-27 16:56 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\windows\system32\netapi32.dll 2013-11-27 16:56 - 2012-07-04 22:14 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\browser.dll 2013-11-27 16:56 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\browcli.dll 2013-11-27 16:56 - 2012-05-05 08:46 - 00400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll 2013-11-27 16:56 - 2012-05-01 05:44 - 00164352 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll 2013-11-27 16:56 - 2012-04-28 04:17 - 00183808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys 2013-11-27 16:56 - 2012-04-26 05:45 - 00129536 _____ (Microsoft Corporation) C:\windows\system32\rdpcorekmts.dll 2013-11-27 16:56 - 2012-04-26 05:45 - 00058880 _____ (Microsoft Corporation) C:\windows\system32\rdpwsx.dll 2013-11-27 16:56 - 2012-04-26 05:41 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\rdrmemptylst.exe 2013-11-27 16:56 - 2012-04-07 12:26 - 02342400 _____ (Microsoft Corporation) C:\windows\system32\msi.dll 2013-11-27 16:56 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\windows\system32\timedate.cpl 2013-11-27 16:56 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\msvcrt.dll 2013-11-27 16:56 - 2011-11-19 15:01 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\packager.dll 2013-11-27 16:56 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\windows\system32\quartz.dll 2013-11-27 16:56 - 2011-08-27 05:26 - 00571904 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll 2013-11-27 16:56 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\windows\system32\oleacc.dll 2013-11-27 16:56 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\windows\system32\psisdecd.dll 2013-11-27 16:56 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\psisrndr.ax 2013-11-27 16:56 - 2011-07-09 03:30 - 00223744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys 2013-11-27 16:56 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\windows\system32\xmllite.dll 2013-11-27 16:56 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\windows\system32\odbcjt32.dll 2013-11-27 16:56 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\odbctrac.dll 2013-11-27 16:56 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\windows\system32\odbccp32.dll 2013-11-27 16:56 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\odbccu32.dll 2013-11-27 16:56 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\windows\system32\odbccr32.dll 2013-11-27 16:56 - 2011-05-24 11:44 - 00293376 _____ (Microsoft Corporation) C:\windows\system32\umpnpmgr.dll 2013-11-27 16:56 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll 2013-11-27 16:56 - 2011-04-29 03:46 - 00311808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys 2013-11-27 16:56 - 2011-04-29 03:46 - 00310272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys 2013-11-27 16:56 - 2011-04-29 03:46 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys 2013-11-27 16:56 - 2011-04-27 03:17 - 00123904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys 2013-11-27 16:56 - 2011-04-27 03:17 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys 2013-11-27 16:56 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\windows\system32\dnsapi.dll 2013-11-27 16:56 - 2011-03-03 06:38 - 00132608 _____ (Microsoft Corporation) C:\windows\system32\dnsrslvr.dll 2013-11-27 16:56 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\dnscacheugc.exe 2013-11-27 16:56 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\prevhost.exe 2013-11-27 16:56 - 2011-02-12 06:35 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\FXSCOVER.exe 2013-11-27 16:56 - 2010-11-20 13:20 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\profprov.dll 2013-11-27 16:56 - 2010-11-20 13:18 - 00145920 _____ (Microsoft Corporation) C:\windows\system32\cfgmgr32.dll 2013-11-27 16:56 - 2010-11-20 13:17 - 00802304 _____ (Microsoft Corporation) C:\windows\system32\WFS.exe 2013-11-27 16:56 - 2010-11-20 13:17 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe 2013-11-27 16:56 - 2010-11-20 13:16 - 00204288 _____ (Microsoft Corporation) C:\windows\system32\MSNP.ax 2013-11-27 16:56 - 2010-11-20 13:16 - 00072704 _____ (Microsoft Corporation) C:\windows\system32\Mpeg2Data.ax 2013-11-27 16:56 - 2010-11-20 13:16 - 00059904 _____ (Microsoft Corporation) C:\windows\system32\MSDvbNP.ax 2013-11-27 16:55 - 2012-05-14 05:33 - 00769024 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll 2013-11-27 16:55 - 2012-03-17 08:27 - 00056176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\partmgr.sys 2013-11-27 16:55 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\windows\system32\ntshrui.dll 2013-11-27 16:49 - 2011-02-23 05:47 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bowser.sys 2013-11-27 16:47 - 2011-04-22 20:14 - 00027008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys 2013-11-27 16:47 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe 2013-11-27 16:47 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\windows\system32\mfc42u.dll 2013-11-27 16:47 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\windows\system32\mfc42.dll 2013-11-27 16:45 - 2010-11-20 12:56 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\cdd.dll 2013-11-27 16:40 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\windows\system32\rdpcore.dll 2013-11-27 16:40 - 2012-02-17 05:13 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdtcp.sys 2013-11-27 16:40 - 2010-11-20 11:21 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdpipe.sys 2013-11-27 16:39 - 2013-11-28 00:52 - 00000000 ____D C:\Users\tom\AppData\Local\Google 2013-11-27 16:39 - 2013-11-27 16:39 - 00000000 ____D C:\Users\tom\AppData\Roaming\Google 2013-11-27 16:38 - 2013-11-27 16:47 - 00000000 ____D C:\Users\tom\AppData\Roaming\Adobe 2013-11-27 16:35 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll 2013-11-27 16:35 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll 2013-11-27 16:35 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe 2013-11-27 16:35 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll 2013-11-27 16:35 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll 2013-11-27 16:35 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll 2013-11-27 16:35 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll 2013-11-27 16:35 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll 2013-11-27 16:35 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe 2013-11-27 16:29 - 2013-11-27 16:29 - 00000000 ____D C:\Users\tom\AppData\Roaming\InstallShield ==================== One Month Modified Files and Folders ======= 2013-12-03 22:27 - 2013-12-03 22:27 - 00008625 _____ C:\Users\tom\Desktop\FRST.txt 2013-12-03 22:24 - 2013-12-03 22:24 - 00000442 _____ C:\Users\tom\Desktop\defogger_disable.log 2013-12-03 22:24 - 2013-11-27 17:03 - 00001098 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-03 22:22 - 2013-12-03 22:22 - 00377856 _____ C:\Users\tom\Desktop\gmer_2.1.19163.exe 2013-12-03 22:19 - 2013-12-03 22:19 - 00050477 _____ C:\Users\tom\Desktop\Defogger.exe 2013-12-03 22:18 - 2013-12-03 22:18 - 01092389 _____ (Farbar) C:\Users\tom\Desktop\FRST.exe 2013-12-03 22:02 - 2010-03-05 05:29 - 01324802 _____ C:\windows\WindowsUpdate.log 2013-12-03 20:59 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\NDF 2013-12-03 17:51 - 2013-12-03 17:12 - 87529432 _____ (AVAST Software) C:\Users\tom\Downloads\avast_free_antivirus_setup2008.exe 2013-12-03 17:30 - 2009-07-14 05:34 - 00014736 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-03 17:30 - 2009-07-14 05:34 - 00014736 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-03 17:24 - 2013-11-27 17:03 - 00001094 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-03 17:04 - 2009-07-26 21:06 - 01618320 _____ C:\windows\system32\PerfStringBackup.INI 2013-12-03 17:01 - 2013-11-28 16:46 - 00002054 _____ C:\Users\tom\Desktop\SafeZone-Browser.lnk 2013-12-03 17:01 - 2013-11-27 17:55 - 00000316 _____ C:\windows\Tasks\GlaryInitialize 4.job 2013-12-03 17:01 - 2013-11-27 17:55 - 00000000 ____D C:\Program Files\Glary Utilities 4 2013-12-03 16:58 - 2013-11-28 23:22 - 00001019 _____ C:\windows\setupact.log 2013-12-03 16:58 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT 2013-12-03 15:58 - 2013-11-28 01:17 - 00000000 ____D C:\Users\tom\Sinnestäuschung 2013-12-03 15:58 - 2013-11-28 01:17 - 00000000 ____D C:\Users\tom\Sinnestäuschung 2013-12-03 15:46 - 2010-09-10 14:14 - 00000000 ____D C:\Users\tom 2013-12-03 06:31 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\LogFiles 2013-12-03 04:05 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public 2013-12-03 04:04 - 2013-12-03 04:04 - 00000000 ____D C:\FRST 2013-12-03 04:02 - 2013-12-03 04:02 - 00000000 _____ C:\Users\tom\defogger_reenable 2013-12-03 04:02 - 2013-12-03 04:02 - 00000000 _____ C:\Users\tom\defogger_reenable 2013-12-02 22:20 - 2010-09-10 14:17 - 00000000 ____D C:\Users\tom\AppData\Local\Adobe 2013-12-02 22:02 - 2013-11-28 01:25 - 00055296 ___SH C:\Users\tom\Thumbs.db 2013-12-02 22:02 - 2013-11-28 01:25 - 00055296 ___SH C:\Users\tom\Thumbs.db 2013-12-02 21:54 - 2013-11-28 01:15 - 00000000 ____D C:\Users\tom\Meine Scans 2013-12-02 21:54 - 2013-11-28 01:15 - 00000000 ____D C:\Users\tom\Meine Scans 2013-12-02 21:22 - 2010-09-10 14:28 - 00116360 _____ C:\Users\tom\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-02 21:04 - 2013-12-02 21:04 - 00000649 _____ C:\Users\tom\Desktop\tom - Verknüpfung.lnk 2013-12-02 21:04 - 2013-12-02 21:04 - 00000355 _____ C:\Users\tom\Desktop\Computer - Verknüpfung.lnk 2013-11-28 23:22 - 2013-11-28 23:22 - 00000000 _____ C:\windows\setuperr.log 2013-11-28 23:11 - 2009-07-26 21:57 - 00000000 ____D C:\windows\Panther 2013-11-28 22:57 - 2010-09-10 14:23 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-28 22:57 - 2010-09-10 14:23 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-28 22:55 - 2010-09-10 14:22 - 00000000 ____D C:\Program Files\Microsoft Office 2013-11-28 22:52 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System 2013-11-28 22:52 - 2009-07-14 03:04 - 00000510 _____ C:\windows\win.ini 2013-11-28 22:45 - 2009-07-14 03:37 - 00000000 ____D C:\windows\rescache 2013-11-28 22:42 - 2010-09-10 14:35 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-11-28 22:42 - 2009-07-14 05:33 - 00430144 _____ C:\windows\system32\FNTCACHE.DAT 2013-11-28 22:40 - 2010-09-10 14:21 - 00000000 ____D C:\Program Files\Microsoft Works 2013-11-28 22:36 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-11-28 22:05 - 2013-11-28 22:05 - 00000000 ____D C:\Users\tom\AppData\Local\WindowsUpdate 2013-11-28 21:33 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\MSBuild 2013-11-28 21:32 - 2013-11-28 21:32 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 2013-11-28 21:32 - 2010-03-05 23:03 - 00000000 ____D C:\windows\ShellNew 2013-11-28 21:27 - 2013-11-28 21:27 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8 2013-11-28 21:20 - 2013-11-27 17:25 - 00001222 _____ C:\Users\tom\Desktop\Revo Uninstaller.lnk 2013-11-28 21:10 - 2010-03-05 23:07 - 00000000 ____D C:\windows\system32\XPSViewer 2013-11-28 21:10 - 2010-03-05 23:03 - 00000000 ____D C:\Program Files\Windows Journal 2013-11-28 21:10 - 2009-07-14 05:56 - 00000000 ____D C:\windows\system32\winrm 2013-11-28 21:10 - 2009-07-14 05:56 - 00000000 ____D C:\windows\system32\WCN 2013-11-28 21:10 - 2009-07-14 05:56 - 00000000 ____D C:\windows\system32\slmgr 2013-11-28 21:10 - 2009-07-14 05:56 - 00000000 ____D C:\windows\system32\Printing_Admin_Scripts 2013-11-28 21:10 - 2009-07-14 05:56 - 00000000 ____D C:\windows\DigitalLocker 2013-11-28 21:10 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Sidebar 2013-11-28 21:10 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-11-28 21:10 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Defender 2013-11-28 21:10 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\DVD Maker 2013-11-28 21:10 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\MUI 2013-11-28 21:10 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\it-IT 2013-11-28 21:10 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\fr-FR 2013-11-28 21:10 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\com 2013-11-28 21:10 - 2009-07-14 03:37 - 00000000 ____D C:\windows\IME 2013-11-28 17:47 - 2009-07-14 03:37 - 00000000 ____D C:\windows\Microsoft.NET 2013-11-28 17:17 - 2013-11-27 18:12 - 00000000 ____D C:\windows\system32\MRT 2013-11-28 17:15 - 2013-11-27 18:12 - 80340640 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-11-28 16:06 - 2010-03-05 23:12 - 00000000 ____D C:\windows\system32\Drivers\de-DE 2013-11-28 16:06 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\de-DE 2013-11-28 16:00 - 2013-11-28 16:00 - 17142784 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-11-28 16:00 - 2013-11-28 16:00 - 11220992 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-11-28 16:00 - 2013-11-28 16:00 - 04240384 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-11-28 16:00 - 2013-11-28 16:00 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\zh-TW 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\zh-HK 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\zh-CN 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\tr-TR 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\sv-SE 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\ru-RU 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\pt-PT 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\pt-BR 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\pl-PL 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\nl-NL 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\nb-NO 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\ko-KR 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\ja-JP 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\hu-HU 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\fi-FI 2013-11-28 15:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\el-GR 2013-11-28 14:39 - 2013-11-28 14:39 - 03419136 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 02284544 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 01988096 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 01247744 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 01158144 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 01080832 _____ (Microsoft Corporation) C:\windows\system32\d3d10.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00906240 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00604160 _____ (Microsoft Corporation) C:\windows\system32\d3d10level9.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00364544 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00293376 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00249856 _____ (Microsoft Corporation) C:\windows\system32\d3d10_1core.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\d3d10core.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00207872 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecsExt.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\UIAnimation.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00161792 _____ (Microsoft Corporation) C:\windows\system32\d3d10_1.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\taskhost.exe 2013-11-28 14:39 - 2013-11-28 14:39 - 00010752 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00009728 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00005632 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00005632 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-11-28 14:39 - 2013-11-28 14:39 - 00002560 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-11-28 14:38 - 2013-11-28 14:38 - 01505280 _____ (Microsoft Corporation) C:\windows\system32\d3d11.dll 2013-11-28 02:26 - 2010-03-05 05:39 - 00000000 ____D C:\ProgramData\WinClon 2013-11-28 02:26 - 2010-03-05 05:39 - 00000000 ____D C:\ProgramData\WinClon 2013-11-28 01:57 - 2013-11-27 23:40 - 00000000 ____D C:\Users\tom\AppData\Roaming\Skype 2013-11-28 01:51 - 2013-11-27 21:07 - 00000000 ____D C:\ProgramData\GlarySoft 2013-11-28 01:51 - 2013-11-27 21:07 - 00000000 ____D C:\ProgramData\GlarySoft 2013-11-28 01:24 - 2013-11-28 01:24 - 00000000 ____D C:\Users\tom\Witziges 2013-11-28 01:24 - 2013-11-28 01:24 - 00000000 ____D C:\Users\tom\Witziges 2013-11-28 01:23 - 2013-11-28 01:23 - 00000000 ____D C:\Users\tom\Vokabel 2013-11-28 01:23 - 2013-11-28 01:23 - 00000000 ____D C:\Users\tom\Vokabel 2013-11-28 01:18 - 2013-11-28 01:18 - 00000000 ____D C:\Users\tom\Tests 2013-11-28 01:18 - 2013-11-28 01:18 - 00000000 ____D C:\Users\tom\Tests 2013-11-28 00:52 - 2013-11-27 16:39 - 00000000 ____D C:\Users\tom\AppData\Local\Google 2013-11-27 23:40 - 2013-11-27 23:40 - 00000000 ___RD C:\Program Files\Skype 2013-11-27 23:40 - 2013-11-27 23:40 - 00000000 ____D C:\Program Files\Common Files\Skype 2013-11-27 23:40 - 2013-11-27 23:39 - 00000000 ____D C:\ProgramData\Skype 2013-11-27 23:40 - 2013-11-27 23:39 - 00000000 ____D C:\ProgramData\Skype 2013-11-27 21:05 - 2010-09-10 14:14 - 00000000 ____D C:\Users\tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2013-11-27 20:56 - 2010-03-05 23:12 - 00000000 ____D C:\windows\de-DE 2013-11-27 20:56 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Portable Devices 2013-11-27 20:56 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\AdvancedInstallers 2013-11-27 20:53 - 2009-07-14 03:05 - 00152576 _____ (Microsoft Corporation) C:\windows\system32\msclmd.dll 2013-11-27 20:32 - 2013-11-27 20:32 - 00000000 ____D C:\windows\system32\SPReview 2013-11-27 20:31 - 2013-11-27 20:31 - 00000000 ____D C:\windows\system32\EventProviders 2013-11-27 20:10 - 2013-11-27 20:00 - 35095200 _____ (Skype Technologies S.A.) C:\Users\tom\Downloads\Skype611SetupFull.exe 2013-11-27 20:05 - 2013-11-27 20:05 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-27 20:05 - 2013-11-27 20:05 - 00000000 ____D C:\Users\tom\AppData\Roaming\Malwarebytes 2013-11-27 20:05 - 2013-11-27 20:05 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-27 20:05 - 2013-11-27 20:05 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-27 20:05 - 2013-11-27 20:05 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-11-27 20:02 - 2013-11-27 19:58 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\tom\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-27 19:17 - 2013-11-27 19:17 - 00002113 _____ C:\Users\Public\Desktop\avast! SafeZone.lnk 2013-11-27 19:16 - 2013-11-27 19:17 - 00026136 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys 2013-11-27 19:16 - 2013-11-27 19:16 - 00259928 _____ (AVAST Software) C:\windows\system32\Drivers\aswNdisFlt.sys 2013-11-27 18:34 - 2013-11-27 18:34 - 00000000 ____D C:\Users\Public\CyberLink 2013-11-27 18:34 - 2013-11-27 18:34 - 00000000 ____D C:\Users\Public\CyberLink 2013-11-27 18:34 - 2010-03-05 05:31 - 00000000 ____D C:\ProgramData\CyberLink 2013-11-27 18:34 - 2010-03-05 05:31 - 00000000 ____D C:\ProgramData\CyberLink 2013-11-27 18:17 - 2010-09-10 14:24 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-11-27 18:09 - 2013-11-27 18:09 - 00001409 _____ C:\Users\tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-27 18:03 - 2013-11-27 17:56 - 00000410 _____ C:\windows\Tasks\GlaryOneClickOptimizer 4.job 2013-11-27 18:03 - 2010-03-05 05:41 - 00000000 ____D C:\ProgramData\McAfee 2013-11-27 18:03 - 2010-03-05 05:41 - 00000000 ____D C:\ProgramData\McAfee 2013-11-27 17:55 - 2013-11-27 17:55 - 00001038 _____ C:\Users\Public\Desktop\Glary Utilities 4.lnk 2013-11-27 17:55 - 2013-11-27 17:55 - 00000000 ____D C:\Users\tom\AppData\Roaming\GlarySoft 2013-11-27 17:54 - 2013-11-27 17:53 - 12240536 _____ C:\Users\tom\Downloads\glary_up4setup.exe 2013-11-27 17:47 - 2010-03-05 05:25 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-11-27 17:43 - 2010-09-10 14:17 - 00000000 ____D C:\Program Files\Samsung Casual Games 2013-11-27 17:25 - 2013-11-27 17:25 - 00000000 ____D C:\Program Files\VS Revo Group 2013-11-27 17:21 - 2013-11-27 17:21 - 00000000 ____D C:\Users\tom\AppData\Roaming\AVAST Software 2013-11-27 17:21 - 2010-03-05 05:56 - 00000000 ____D C:\Program Files\Google 2013-11-27 17:19 - 2013-11-27 17:19 - 00774392 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00403440 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00269216 _____ (AVAST Software) C:\windows\system32\aswBoot.exe 2013-11-27 17:19 - 2013-11-27 17:19 - 00178304 _____ C:\windows\system32\Drivers\aswVmm.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00079720 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00070384 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00057672 _____ (AVAST Software) C:\windows\system32\Drivers\aswTdi.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00049944 _____ C:\windows\system32\Drivers\aswRvrt.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr 2013-11-27 17:19 - 2013-11-27 17:19 - 00035656 _____ (AVAST Software) C:\windows\system32\Drivers\aswFsBlk.sys 2013-11-27 17:19 - 2013-11-27 17:19 - 00000000 ____D C:\Program Files\AVAST Software 2013-11-27 17:18 - 2013-11-27 17:18 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-27 17:18 - 2013-11-27 17:18 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-27 17:14 - 2013-11-27 17:14 - 00000000 ____D C:\Users\tom\AppData\Roaming\Macromedia 2013-11-27 16:47 - 2013-11-27 16:38 - 00000000 ____D C:\Users\tom\AppData\Roaming\Adobe 2013-11-27 16:39 - 2013-11-27 16:39 - 00000000 ____D C:\Users\tom\AppData\Roaming\Google 2013-11-27 16:30 - 2010-03-05 05:25 - 00000000 ____D C:\Program Files\Intel 2013-11-27 16:29 - 2013-11-27 16:29 - 00000000 ____D C:\Users\tom\AppData\Roaming\InstallShield 2013-11-19 04:56 - 2013-11-27 17:55 - 00101664 _____ (Glarysoft Ltd) C:\windows\system32\BootDefrag.exe 2013-11-18 02:18 - 2013-11-27 17:55 - 00014528 _____ (Glarysoft Ltd) C:\windows\system32\Drivers\BootDefragDriver.sys 2013-11-11 05:50 - 2013-11-27 17:51 - 00230048 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-03 01:50 ==================== End Of Log ============================ |
04.12.2013, 08:06 | #2 |
/// the machine /// TB-Ausbilder | win mediaplayer startet nicht! infiziert? hi,
__________________Scan mit Combofix
__________________ |
05.12.2013, 17:14 | #3 |
| win mediaplayer startet nicht! infiziert? Hi!
__________________habe genau nach Anweisung combofix laufen lassen. Es gab keine Fehlermeldung auch nicht nach Neustart des PC aber der win-mediaplayer funktioniert nun einwandfrei. dafür bedanke ich mich sehr herzlich bei Ihnen. werde trotzdem das logfile einfügen. mfG froland Code:
ATTFilter Combofix Logfile: |
06.12.2013, 10:14 | #4 |
/// the machine /// TB-Ausbilder | win mediaplayer startet nicht! infiziert? Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
06.12.2013, 15:52 | #5 |
| win mediaplayer startet nicht! infiziert? hi schrauber, hab alles genau befolgt und füge nun die logs ein. bei Malwarebytes ist kein Fund. hatte allerding 3x plötzlich ein "schwarzes Desk" nichts reagierte mehr - musste den PC dunrch langes Halter der Power-Taste runterfahren. Der Neustart ins Windows war aber jedesmal problemlos möglich. der letze Ausfall war während ich diesen Bericht schreibe, hoffe es passiert nicht wieder. (habe über 180000 Zeichen und ich schaffe es trotz aller Bemühung nicht mit 7zip den Beitag als Archiv anzuhängen) Ich lasse vorerst FRST.txt weg und bitte um Entschuldigung für mein Unvermögen. kann ich es irgendwie nachreichen; habe es ja am desktop aber es ist zu groß für hier AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.014 - Bericht erstellt am 06/12/2013 um 20:44:11 # Updated 01/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits) # Benutzername : tom - TOM-PC # Gestartet von : C:\Users\tom\Desktop\adwcleaner.exe # Option : Suchen ***** [ Dienste ] ***** Dienst Gefunden : Partner Service ***** [ Dateien / Ordner ] ***** Ordner Gefunden C:\ProgramData\Partner ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{28A88B70-D874-4F73-BBBA-9B2B222FB7D6} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\kt_bho_dll.dll Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\kt_bho.KettleBho Schlüssel Gefunden : HKLM\SOFTWARE\Classes\kt_bho.KettleBho.1 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{86676E13-D6D8-4652-9FCF-F2047F1FB000} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4 ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Google Chrome v31.0.1650.63 [ Datei : C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\preferences ] [ Datei : C:\Users\frk\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [2182 octets] - [06/12/2013 20:44:11] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2242 octets] ########## AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.014 - Bericht erstellt am 06/12/2013 um 20:45:53 # Updated 01/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits) # Benutzername : tom - TOM-PC # Gestartet von : C:\Users\tom\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** [#] Dienst Gelöscht : Partner Service ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\Partner ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\kt_bho_dll.dll Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\kt_bho.KettleBho Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\kt_bho.KettleBho.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{28A88B70-D874-4F73-BBBA-9B2B222FB7D6} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{86676E13-D6D8-4652-9FCF-F2047F1FB000} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4 ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Google Chrome v31.0.1650.63 [ Datei : C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\preferences ] [ Datei : C:\Users\frk\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [2322 octets] - [06/12/2013 20:44:11] AdwCleaner[S0].txt - [2249 octets] - [06/12/2013 20:45:53] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2309 octets] ########## ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.8 (11.05.2013:1) OS: Windows 7 Home Premium x86 Ran by tom on 06.12.2013 at 21:16:04,07 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 06.12.2013 at 21:17:41,81 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-12-2013 Ran by tom at 2013-12-06 21:26:05 Running from C:\Users\tom\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Internet Security (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Internet Security (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Internet Security (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installed Programs ====================== 7-Zip 9.20 Adobe Flash Player ActiveX (Version: 9.0.124.0) Adobe Reader 9.1 - Deutsch (Version: 9.1.0) Atheros Client Installation Program (Version: 1.0.2.1119) avast! Internet Security (Version: 9.0.2008) BatteryLifeExtender (Version: 1.0.1) CCleaner (Version: 4.08) ChargeableUSB (Version: 1.0.0.0) Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000) CyberLink DVD Suite (Version: 6.0.2806) CyberLink LabelPrint (Version: 2.5.1916) CyberLink Power2Go (Version: 6.0.3108a) CyberLink PowerDirector (Version: 7.0.3213) CyberLink PowerDVD 8 (Version: 8.0.2815b) CyberLink PowerProducer (Version: 5.0.1.1812) CyberLink YouCam (Version: 2.0.3625) Easy Display Manager (Version: 3.0) Easy Network Manager (Version: 4.2.8) Easy SpeedUp Manager (Version: 3.0.0.5) EasyBatteryManager (Version: 4.0.0.3) Game Pack (Version: 5.3.0.10) Google Chrome (Version: 31.0.1650.63) Google Toolbar for Internet Explorer (Version: 1.0.0) Google Toolbar for Internet Explorer (Version: 7.5.4601.54) Google Update Helper (Version: 1.3.21.169) Intel(R) Rapid Storage Technology (Version: 9.5.4.1001) Intel(R) Turbo Boost Technology Driver (Version: 01.00.01.1003) Junk Mail filter update (Version: 14.0.8089.726) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) Marvell Miniport Driver (Version: 11.22.3.3) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (FRA) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (Français) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (ITA) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (Italiano) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938) Microsoft Application Error Reporting (Version: 12.0.6012.5000) Microsoft Choice Guard (Version: 2.0.48.0) Microsoft Office 2007 Service Pack 3 (SP3) Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000) Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (Version: 14.0.5130.5003) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Works (Version: 9.7.0621) MSVCRT (Version: 14.0.1468.721) NVIDIA Drivers (Version: 1.4) Realtek High Definition Audio Driver (Version: 6.0.1.6003) REALTEK Wireless LAN Software (Version: 1.01.0088) Revo Uninstaller 1.95 (Version: 1.95) Samsung Recovery Solution 4 (Version: 4.0.0.6) Samsung R-Series (Version: 1.0) Samsung Support Center (Version: 1.1.0) Samsung Update Plus (Version: 2.0) Skype™ 6.11 (Version: 6.11.102) Synaptics Pointing Device Driver (Version: 14.0.10.0) Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.3) Update for 2007 Microsoft Office System (KB967642) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825642) 32-Bit Edition Update für Microsoft Office Excel 2007 Help (KB963678) Update für Microsoft Office Outlook 2007 Help (KB963677) Update für Microsoft Office Powerpoint 2007 Help (KB963669) Update für Microsoft Office Word 2007 Help (KB963665) User Guide (Version: 1.0) VLC media player 2.1.1 (Version: 2.1.1) WIDCOMM Bluetooth Software (Version: 6.2.1.800) Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (Version: 07/30/2009 6.2.0.9405) Windows Driver Package - Broadcom Bluetooth (09/11/2009 6.2.0.9407) (Version: 09/11/2009 6.2.0.9407) Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800) Windows Live Anmelde-Assistent (Version: 5.000.818.5) Windows Live Call (Version: 14.0.8064.0206) Windows Live Communications Platform (Version: 14.0.8064.206) Windows Live Essentials (Version: 14.0.8089.0726) Windows Live Essentials (Version: 14.0.8089.726) Windows Live Family Safety (Version: 14.0.8093.805) Windows Live Fotogalerie (Version: 14.0.8081.709) Windows Live Mail (Version: 14.0.8089.0726) Windows Live Messenger (Version: 14.0.8089.0726) Windows Live Movie Maker (Version: 14.0.8091.0730) Windows Live Sync (Version: 14.0.8089.726) Windows Live Writer (Version: 14.0.8089.0726) Windows Live-Uploadtool (Version: 14.0.8014.1029) ==================== Restore Points ========================= 02-12-2013 19:51:34 nach recovery + updates+sp1+office 03-12-2013 14:56:37 recovery+win_updates+sp1+office2007 03-12-2013 17:08:07 Windows Update 05-12-2013 22:21:27 ComboFix created restore point 06-12-2013 00:01:58 nach reparatur des mediaplayer 06-12-2013 17:42:50 Windows Update 06-12-2013 18:39:28 Revo Uninstaller's restore point - Glary Utilities PRO 4.0 ==================== Hosts content: ========================== 2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {25B852AF-0F08-417D-A112-DD474B4238F8} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2009-10-16] (SAMSUNG Electronics co., LTD.) Task: {2A22598A-D027-4D1C-BB04-968C54AC0280} - \GlaryInitialize 4 No Task File Task: {3BB20698-0509-4DB9-9BB6-9A1172BAA155} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-27] (Google Inc.) Task: {6378EDF5-B3D1-4A49-A0C8-B161AED57A67} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe [2010-04-20] () Task: {7730DD09-5417-4ED1-AB2D-3A11A1399671} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-27] (AVAST Software) Task: {85432527-CE8D-4EEF-A10F-D3CFF47DF566} - System32\Tasks\EasySpeedUpManager => C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe [2009-10-13] (Samsung Electronics Co., Ltd.) Task: {A262B463-C260-4781-909F-C756859A9E66} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-11-19] (Samsung Electronics. Co. Ltd.) Task: {C653CBBB-78D5-46AA-B7BA-99E64B7FF124} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2009-11-04] (Samsung Electronics Co., Ltd.) Task: {CC9DF44D-CBB5-4AE5-8A89-DEDA5CF44EF5} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-12-14] (SAMSUNG Electronics) Task: {D1FB3E83-5C6C-43E7-9912-E0E360C4B44F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd) Task: {D907D439-A03E-4D08-B861-C10484AFFAE1} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC) Task: {F91E5DD4-7BC0-467B-8D2F-00FAC351C4B6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-27] (Google Inc.) Task: C:\windows\Tasks\GlaryInitialize 4.job => C:\Program Files\Glary Utilities 4\Initialize.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2010-03-05 05:38 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll 2010-03-05 05:31 - 2010-04-16 14:11 - 00155648 _____ () C:\Program Files\Samsung\Samsung Update Plus\HMXML.dll 2013-11-27 17:19 - 2013-11-27 17:19 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service" ==================== Faulty Device Manager Devices ============= Name: Broadcom BCM2070 Bluetooth 2.1+EDR USB Device Description: Broadcom BCM2070 Bluetooth 2.1+EDR USB Device Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: Broadcom Service: BTHUSB Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Error: (12/06/2013 09:22:08 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 06.12.2013 um 21:20:58 unerwartet heruntergefahren. Microsoft Office Sessions: ========================= Error: (12/03/2013 02:46:01 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 26 seconds with 0 seconds of active time. This session ended with a crash. Error: (12/02/2013 10:52:08 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 3 seconds with 0 seconds of active time. This session ended with a crash. Error: (12/02/2013 10:51:56 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 4 seconds with 0 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 30% Total physical RAM: 3060.55 MB Available physical RAM: 2114.79 MB Total Pagefile: 6119.38 MB Available Pagefile: 5148.68 MB Total Virtual: 2047.88 MB Available Virtual: 1913.41 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:180.26 GB) (Free:138.07 GB) NTFS Drive d: () (Fixed) (Total:270.4 GB) (Free:183.3 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: B0FD1CB0) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=180 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=270 GB) - (Type=07 NTFS) ==================== End Of Log ============================ [/CODE] |
07.12.2013, 12:00 | #6 |
/// the machine /// TB-Ausbilder | win mediaplayer startet nicht! infiziert?ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> win mediaplayer startet nicht! infiziert? |
07.12.2013, 18:23 | #7 |
| win mediaplayer startet nicht! infiziert? hallo schrauber, alles ausgeführt, nur FRST.exe macht kurz nach dem Scanstart eine Fehlermeldung: Error: variable used without being declared LINE9498 (File"C:\User\tom\Desktop\FRST.exe") es wird zwar ein log.txt erstellt aber wohl nicht vollständig. Übrigens: beim Kopieren dieses FRST logfile hatte ich plötzlich wieder einen schwarzen Schirm. scheint irgendwie mit diesen FRSTlogs zusammenhängen denn letztens passierte es 4x; meistens dann, wenn ich "rechts" oder "links" klicke - schwarzer Schirm - nichts geht mehr also "abwürgen" - starte dann Windows problemlos normal. Sonst läuft der Laptop ohne sichtbare Probleme. Mit herzlichem Gruß tomfroland Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok ESETSmartInstaller@High as downloader log: all ok ESETSmartInstaller@High as downloader log: Can not read file from internet.ESETSmartInstaller@High as downloader log: Can not read file from internet.esets_scanner_update returned -1 esets_gle=1 ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=7ced346192b0e74083ee86926f191024 # engine=16175 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-12-07 09:12:26 # local_time=2013-12-07 10:12:26 (+0100, Mitteleuropäische Zeit) # country="Austria" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=772 16777213 66 80 874521 885181 0 0 # compatibility_mode=5893 16776573 100 94 98915 138081937 0 0 # scanned=46 # found=0 # cleaned=0 # scan_time=7 ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=7ced346192b0e74083ee86926f191024 # engine=16175 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-12-07 09:15:58 # local_time=2013-12-07 10:15:58 (+0100, Mitteleuropäische Zeit) # country="Austria" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=772 16777213 66 80 874733 885393 0 0 # compatibility_mode=5893 16776573 100 94 99127 138082149 0 0 # scanned=58 # found=0 # cleaned=0 # scan_time=12 ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=7ced346192b0e74083ee86926f191024 # engine=16175 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-12-07 10:21:20 # local_time=2013-12-07 11:21:20 (+0100, Mitteleuropäische Zeit) # country="Austria" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=772 16777213 66 80 882255 889315 0 0 # compatibility_mode=5893 16776573 100 94 106649 138086071 0 0 # scanned=143627 # found=0 # cleaned=0 # scan_time=3754 ------------------------------------------------------------------------ Results of screen317's Security Check version 0.99.76 Windows 7 Service Pack 1 x86 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` avast! Internet Security Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 CCleaner Adobe Reader 9 Adobe Reader out of Date! Google Chrome 31.0.1650.57 Google Chrome 31.0.1650.63 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes' Anti-Malware mbamscheduler.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast afwServ.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` ------------------------------------------------------------------------- Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-12-2013 02 Ran by tom (administrator) on TOM-PC on 08-12-2013 00:58:22 Running from C:\Users\tom\Desktop Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe (SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe () C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe () C:\Windows\System32\Rezip.exe () C:\Program Files\CyberLink\Shared files\RichVideo.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8120864 2009-12-15] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1578280 2009-10-10] (Synaptics Incorporated) HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-27] (AVAST Software) Startup: C:\Users\tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn SearchScopes: HKLM - DefaultScope value is missing. BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.) Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Chrome: ======= |
08.12.2013, 07:45 | #8 |
/// the machine /// TB-Ausbilder | win mediaplayer startet nicht! infiziert? Adobe updaten. Bestehen denn sonst noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
08.12.2013, 15:30 | #9 |
| win mediaplayer startet nicht! infiziert? HI, Adobe fand 2 updates aber beim runterladen kam Fehlermeldung - update fehler. und irgend eine Meldung ungültiges Laufwerk F: ich habe gar kein F: nur C:+D: sowie ein CD Laufwerk E: (ein externes Laufwerk war nicht am LP) habe es nochmals versucht doch es fand kein update statt - gleiche Fehlermeldung. vielleich voreilig deinstallierte ich Adobe Reader und machte den Download von der Adobe Webside. bei der Insstallation dann die Meldung: Schwerwiegender Fehler in der Installation. Ungültiges Laufwerk F:\ Ich wählte dann einen automatisch erstellten Wiederherstellungspunkt von gestern (nach einem wichtigem Windows update) Meldung: Wiederherstellung war erfolgreich - doch Adobe ließ sich nicht starten. Laufw F:\ dann sah ich noch in meinem eigenen Ordner "tom" eine Menge verknüpfter Ordner bis plötzlich der Schirm "blau" war, jedoch ohne jede Schrift. Muste den LP runterwürgen dann zur Vorsicht im abgesicherten Modus gestartet und schreibe nun diesen Bericht. Im e. Ordner "tom" sehe ich folgende Ordnerverknüpfungen, die ich vorher nicht hatte - die Öffnung wird verweigert - folgende Ordner: Anwendungsdateien, Cookies, eigene Dateien, lokale Einstellungen, Netzwerkumgebung, Recent, Send to u. Startmenue. und 9 Dateien "NTUser.dat" die ich auch nicht öffnen kann weil kein entsp. Programm z.V. steht. versuche diese Dateien zu posten - wenn es möglich ist. ( es ging leider nicht) Es sah schon so gut aus, hätte nicht gedacht, dass es an einem Adobe update scheitern wird. damit verbleibe ich mit freundlichem Gruß tomfroland bin darauf gekommen, dass es sich bei diesen Dateien um GESCHÜTZTE Systemdateien handelt, die sehe ich nun weil ich in den Ordneroptionen "geschützte Systemdateien nicht anzeigen" das "Häckchen" entfernt habe. (wurde auf trojaner_board so empfohlen "deaktivieren" wenn ich das richtig verstanden habe. dies sind 2 ini dateien die ich am desktop fand alles andere läßt sich leider nicht einfügen sehe auch 2 Systemdateien, dat 8.12.2013 also vonheute mit je ca. 3,1 mb C:\hyberfil.sis C:\pagefil.sis Code:
ATTFilter [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21769 IconResource=%SystemRoot%\system32\imageres.dll,-183 ---------------------------------------------------------------------------- [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21769 IconResource=%SystemRoot%\system32\imageres.dll,-183 --------------------------------------------------------------------------- alles andere läßt sich leider nicht einfügen sehe auch 2 Systemdateien, dat 8.12.2013 mit je ca. 3,1 mb C:\hyberfil.sis C:\pagefil.sis Geändert von tomfroland (08.12.2013 um 16:01 Uhr) Grund: Nachtrag! |
08.12.2013, 17:22 | #10 | |
/// the machine /// TB-Ausbilder | win mediaplayer startet nicht! infiziert?Zitat:
Adobe mal mit Revo Uninstaller deinstallieren, Reste entfernen lassen. Downloade dir bitte Windows Repair (All In One) von hier.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
08.12.2013, 20:29 | #11 |
| win mediaplayer startet nicht! infiziert? Hi, Adobe mit Revo deinstalliert und Reste entfernen lassen. nach Neustart fand ich aber in C:\Programme noch das gesamte Adobe Verzeichnis habe dort dann alles händisch gelöscht bis auf den Unterordner CMap mit 2 Dateien - dort wird mir der Zugriff verweigert; auch mit Admin-Rechten C:\Programme\Adobe\Reader 9.0\Resource\CMap (mit 2 Dateien) Identity-H u. Identity-V Eigenschaften von Adobe: Attribute: schreibgeschützt(betrifft nur Dateien im Ordner) Sicherheit/Benutzernamen: neben SYSTEM, Administrator, Benutzer (tom-PC\Benutzer) steht ERSTELLER-BESITZER mit "speziellen Berechtigungen" (klingt merkwürdig f. mich) liegt hier das Problem mit Adobe? seit ich Adobe gelöscht habe, läßt sich die Avast firewall nicht mehr starten (win-firewall läuft jedoch) bei der Such nach dem Problem hab ich einen Eintrag im Avast Quarantäne(Viruscontainer) gefunden! Virus: Win32:Evo-gen(Susp) "die Klammern aber eckig" leider n. auf m. Tastatur Name: jwgkvsq.vmx (Transferzeit: 6.12.13, 20 UHR) das klingt WOHL nicht gut... der LP läuft sonst unaufällig (bis auf die Avast firewall natürlich) damit verbleibe ich bis zu einer Antwort mit freundlichem Gruß tomfroland |
09.12.2013, 10:14 | #12 |
/// the machine /// TB-Ausbilder | win mediaplayer startet nicht! infiziert? Installiere Avast mal neu. Klappt jetzt auch Adobe Installation?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
09.12.2013, 11:00 | #13 |
| win mediaplayer startet nicht! infiziert? Hallo, Die Avast firewall ist nun wieder aktiv. Avast liess sich reparieren bei der Deinstallation. Soll ich wirklich Adobe Reader downloaden und Ausfuehren obwohl noch dieser ominoese nicht entfernbare Adobe-Unterordner existiert. Ich habe kein gutes Gefuehl dabei. Lieber moechte ich vorher diesen ominoesen Ordner mit den beiden Dateien entfernen - aber wie? Was halten sie davon.? Mit einer Entschuldigung fuer mein Bedenken verbleibe ich Mit freundlichem Gruss Tomfroland , |
09.12.2013, 12:53 | #14 |
| win mediaplayer startet nicht! infiziert? hello schrauber, habe nun doch versucht Adobe zu installieren aber ich sehe folgende Meldung: Adobe-Reader Installationsfehler Ungültiges Laufwerk F:\ ist einem Benutzerordner zugeordnet. Das Laufwerk existiert nicht oder konnte nicht verbunden werden. Trennen sie das Laufwerk ab oder weisen sie den Laufwerksbuchstaben neu zu. Weitere Details siehe: hxxp://kb2.adobe.com/cps/404/kb404946.html was kann ich nun tun? Gruß tomfroland Geändert von tomfroland (09.12.2013 um 13:08 Uhr) |
09.12.2013, 13:04 | #15 |
| win mediaplayer startet nicht! infiziert? hello schrauber, habe nun doch versucht Adobe zu installieren aber ich sehe folgende Meldung: Adobe-Reader Installationsfehler Ungültiges Laufwerk F:\ ist einem Benutzerordner zugeordnet. Das Laufwerk existiert nicht oder konnte nicht verbunden werden. Trennen sie das Laufwerk ab oder weisen sie den Laufwerksbuchstaben neu zu. Weitere Details siehe: hxxp://kb2.adobe.com/cps/404/kb404946.html was kann ich nun tun? Gruß tomfroland |
Themen zu win mediaplayer startet nicht! infiziert? |
administrator, adobe, antivirus, avast, browser, computer, explorer, fehler, finds, firewall, infiziert, installation, mediaplayer def., mp3, nicht installiert, nvidia, pdf, realtek, registry, scan, security, services.exe, software, svchost.exe, tcp, temp, trustedinstaller, udp, winlogon.exe |