|
Log-Analyse und Auswertung: sporadische Bluescreens + snap.do + keine Windows-UpdatesWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
04.01.2014, 06:46 | #16 |
| sporadische Bluescreens + snap.do + keine Windows-Updates Aktuell wird 65% Update-Konfiguration beim Start angezeigt, keine Updates (außer div. Sprachpaketen) mehr zu installieren. Leider stürzt TrustedInstaller weiterhin mehrfach ab, außerdem gibt es weiterhin Bluescreens. Wegen neuer Avast-Version habe ich den Support angeschrieben, da auch deinstallieren nicht klappt. Anbei das frische FRST-Log: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014 Ran by Schmiedler (administrator) on PC004 on 04-01-2014 06:35:43 Running from C:\Users\Schmiedler\Desktop Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe () C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Dropbox, Inc.) C:\Users\windsaat\AppData\Roaming\Dropbox\bin\Dropbox.exe () C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe ==================== Registry (Whitelisted) ================== HKLM-x32\...\Run: [avast] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [4858968 2013-05-09] (AVAST Software) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-03-24] (Hewlett-Packard) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [156448 2012-05-04] () HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.) Startup: C:\Users\Schmiedler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\windsaat\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\windsaat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Schmiedler\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1D5862E4219CCA01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Schmiedler\AppData\Roaming\Mozilla\Firefox\Profiles\aqu8c6ix.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: QuickShare Widget - C:\Users\Schmiedler\AppData\Roaming\Mozilla\Firefox\Profiles\aqu8c6ix.default\Extensions\{55f2c2dd-8270-4719-bc9a-b41188f5be35} FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.com" CHR Extension: (Google Docs) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Google Wallet) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [46808 2013-05-09] (AVAST Software) R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [274208 2012-05-04] () ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] () R3 nmserial; C:\Windows\System32\DRIVERS\nmserial.sys [75264 2012-01-12] (Windows (R) Win 7 DDK provider) S1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-04 06:35 - 2014-01-04 06:35 - 00008812 _____ C:\Users\Schmiedler\Desktop\FRST.txt 2014-01-04 06:28 - 2014-01-04 06:28 - 00000020 ___SH C:\Users\TEMP\ntuser.ini 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Vorlagen 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Startmenü 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Netzwerkumgebung 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Lokale Einstellungen 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Eigene Dateien 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Druckumgebung 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Documents\Eigene Musik 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Documents\Eigene Bilder 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\AppData\Local\Verlauf 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\AppData\Local\Anwendungsdaten 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Anwendungsdaten 2014-01-04 06:28 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-01-04 06:28 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-01-03 14:02 - 2014-01-03 14:37 - 00062485 _____ C:\Users\windsaat\Documents\Veranstaltungen 2014.odt 2014-01-03 13:01 - 2014-01-03 13:01 - 00290920 _____ C:\Windows\Minidump\010314-23649-01.dmp 2014-01-02 12:23 - 2014-01-02 12:23 - 00013692 _____ C:\Users\windsaat\Documents\Aufnahmeblatt Beratung.odt 2014-01-02 09:27 - 2014-01-02 09:27 - 00290680 _____ C:\Windows\Minidump\010214-22464-01.dmp 2014-01-02 08:22 - 2014-01-02 08:22 - 00001474 _____ C:\Users\windsaat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-02 07:56 - 2014-01-02 07:56 - 00003250 _____ C:\Windows\System32\Tasks\{846BBE37-810F-4D8E-AE36-D1B5827973DB} 2014-01-02 07:36 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-01-02 07:31 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-01-02 07:31 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-01-02 07:31 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-01-02 07:31 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-01-02 07:21 - 2014-01-02 07:21 - 00000020 ___SH C:\Users\UpdatusUser.PC004\ntuser.ini 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Vorlagen 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Startmenü 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Netzwerkumgebung 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Lokale Einstellungen 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Eigene Dateien 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Druckumgebung 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Documents\Eigene Musik 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Documents\Eigene Bilder 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\AppData\Local\Verlauf 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\AppData\Local\Anwendungsdaten 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Anwendungsdaten 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 ____D C:\Users\UpdatusUser.PC004 2014-01-02 07:21 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\UpdatusUser.PC004\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-01-02 07:21 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\UpdatusUser.PC004\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-01-02 07:15 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-01-02 07:15 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-01-02 06:58 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-02 06:58 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-02 06:58 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-02 06:58 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-02 06:58 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-02 06:58 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-02 06:58 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-02 06:39 - 2014-01-02 06:39 - 87591084 _____ C:\Users\Schmiedler\Documents\regeditCOMPONENTS.reg 2014-01-01 16:29 - 2014-01-01 16:29 - 00005588 _____ C:\Users\Schmiedler\Desktop\Windows-Kompatibilitätsbericht.htm 2014-01-01 10:32 - 2014-01-01 16:32 - 00002562 _____ C:\Windows\diagwrn.xml 2014-01-01 10:32 - 2014-01-01 16:32 - 00001908 _____ C:\Windows\diagerr.xml 2014-01-01 09:41 - 2014-01-04 06:26 - 00065536 _____ C:\Windows\system32\Ikeext.etl 2013-12-31 09:27 - 2013-12-31 09:27 - 00000134 _____ C:\Users\Schmiedler\Desktop\Internet Explorer-Problembehebung.url 2013-12-31 09:07 - 2013-12-31 09:07 - 00000000 ____D C:\3f38f3b32409d4e080f43ca874c78c12 2013-12-30 05:46 - 2013-12-30 05:46 - 00000000 ____D C:\Users\Schmiedler\AppData\Roaming\JAM Software 2013-12-30 05:46 - 2013-12-30 05:46 - 00000000 ____D C:\Program Files (x86)\JAM Software 2013-12-30 05:45 - 2013-12-30 05:45 - 03350608 _____ (JAM Software ) C:\Users\Schmiedler\Downloads\TreeSizeFreeSetup_2.7.exe 2013-12-29 21:06 - 2013-12-29 21:06 - 00000000 ____D C:\Windows\system32\appmgmt 2013-12-29 20:16 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-29 20:16 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-29 20:16 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-29 20:16 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-29 20:15 - 2013-12-29 20:15 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-29 20:15 - 2013-12-29 20:15 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-29 20:15 - 2013-12-29 20:15 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-29 20:15 - 2013-12-29 20:15 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-29 20:15 - 2013-12-29 20:15 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-29 20:15 - 2013-12-29 20:15 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-29 20:15 - 2013-12-29 20:15 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-29 20:15 - 2013-12-29 20:15 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-29 20:15 - 2013-12-29 20:15 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-29 20:15 - 2013-12-29 20:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-29 20:13 - 2014-01-02 07:36 - 00037691 _____ C:\Windows\IE11_main.log 2013-12-29 16:19 - 2014-01-02 07:31 - 00016204 _____ C:\Windows\IE10_main.log 2013-12-29 15:56 - 2013-12-29 15:57 - 00000000 ____D C:\Windows\system32\MRT 2013-12-29 15:31 - 2013-12-29 15:31 - 00000000 ____D C:\Windows\CheckSur 2013-12-29 15:30 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2013-12-29 15:30 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2013-12-29 15:30 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-12-29 15:30 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2013-12-29 15:30 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2013-12-29 15:30 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2013-12-29 15:29 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-12-29 15:29 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-12-29 15:29 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2013-12-29 15:29 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2013-12-29 15:29 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2013-12-29 15:29 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2013-12-29 15:29 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2013-12-29 15:29 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2013-12-29 15:29 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2013-12-29 15:29 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-12-29 15:29 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-12-29 15:29 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-12-29 15:29 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-12-29 15:29 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-12-29 15:29 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-12-29 15:29 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-12-29 15:29 - 2013-04-12 15:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2013-12-29 15:29 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-12-29 15:29 - 2013-03-19 06:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2013-12-29 15:29 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2013-12-29 15:29 - 2013-02-15 07:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-12-29 15:29 - 2013-02-15 07:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-12-29 15:29 - 2013-02-15 07:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2013-12-29 15:29 - 2013-02-15 05:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2013-12-29 15:29 - 2013-02-15 05:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2013-12-29 15:29 - 2013-02-15 04:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2013-12-29 15:28 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-29 15:28 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-29 15:28 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-12-29 15:28 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-12-29 15:28 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-12-29 15:28 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-12-29 15:28 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-12-29 15:28 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-12-29 15:28 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-12-29 15:28 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-12-29 15:28 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-12-29 15:28 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-12-29 15:28 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-12-29 15:28 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-12-29 15:28 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-12-29 15:28 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-12-29 15:28 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-12-29 15:28 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-12-29 15:28 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-12-29 15:28 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-12-29 15:28 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-12-29 15:28 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-12-29 15:28 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-12-29 15:28 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-12-29 15:28 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-12-29 15:28 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-12-29 15:28 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2013-12-29 15:28 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2013-12-29 15:28 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2013-12-29 15:28 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-12-29 15:28 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-12-29 15:28 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-12-29 15:28 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-12-29 15:28 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-12-29 15:28 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-12-29 15:28 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-12-29 15:28 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-12-29 15:28 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-12-29 15:28 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-12-29 15:28 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-12-29 15:28 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-12-29 15:28 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-12-29 15:28 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-12-29 15:28 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-12-29 15:28 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-12-29 15:28 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-12-29 15:28 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-12-29 15:27 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-29 15:27 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-29 15:27 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-29 15:27 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-29 15:27 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-29 15:27 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-29 15:27 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-29 15:27 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-12-29 15:27 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-12-29 15:27 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-12-29 15:27 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-12-29 15:27 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-12-29 15:27 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-12-29 15:27 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-12-29 15:27 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-12-29 15:27 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-12-29 15:27 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-12-29 15:27 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-12-29 15:27 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-12-29 15:27 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-12-29 15:27 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-12-29 15:27 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-12-29 15:27 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-12-29 15:27 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-12-29 15:27 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-12-29 15:27 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-12-29 15:27 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-12-29 15:27 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-12-29 15:27 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-12-29 15:27 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2013-12-29 15:27 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-12-29 15:27 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-12-29 15:27 - 2013-06-15 05:35 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2013-12-29 15:27 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-12-29 15:27 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-12-29 15:27 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-12-29 15:27 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-12-29 15:27 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-12-29 15:27 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2013-12-29 15:26 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-29 15:26 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-29 15:26 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-29 15:26 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-29 15:26 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-29 15:26 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-29 15:26 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-29 15:26 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-29 15:26 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-12-29 15:26 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-12-29 15:26 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-12-29 15:26 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-12-29 15:26 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-12-29 15:26 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2013-12-29 15:26 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-12-29 15:26 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2013-12-29 15:26 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2013-12-29 15:26 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2013-12-29 15:25 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-12-29 15:25 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-12-29 15:25 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-12-29 15:25 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-12-29 15:25 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-12-29 15:16 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-12-29 14:27 - 2013-12-29 14:48 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2013-12-29 14:09 - 2013-12-29 14:09 - 00000207 _____ C:\Windows\tweaking.com-regbackup-PC004-Microsoft-Windows-7-Ultimate-(64-bit).dat 2013-12-29 14:08 - 2013-12-29 14:08 - 00000000 ____D C:\RegBackup 2013-12-29 13:56 - 2013-12-29 13:56 - 02900332 _____ C:\Users\Schmiedler\Downloads\tweaking.com_windows_repair_aio.zip 2013-12-29 13:56 - 2013-12-29 13:56 - 00000000 ____D C:\Users\Schmiedler\Downloads\tweaking.com_windows_repair_aio 2013-12-29 08:10 - 2014-01-04 06:35 - 00000000 ____D C:\Users\Schmiedler\Desktop\FRST-OlderVersion 2013-12-29 08:06 - 2013-12-29 08:06 - 00891200 _____ C:\Users\Schmiedler\Desktop\SecurityCheck.exe 2013-12-29 07:00 - 2013-12-29 07:00 - 02347384 _____ (ESET) C:\Users\Schmiedler\Downloads\esetsmartinstaller_enu.exe 2013-12-27 12:27 - 2013-12-29 08:11 - 00023528 _____ C:\Users\Schmiedler\Desktop\FRST_03.txt 2013-12-27 12:27 - 2013-12-27 12:27 - 00022733 _____ C:\Users\Schmiedler\Desktop\FRST_02.txt 2013-12-27 12:17 - 2013-12-27 12:17 - 00000924 _____ C:\Users\Schmiedler\Desktop\JRT.txt 2013-12-27 12:12 - 2013-12-27 12:12 - 00000000 ____D C:\Windows\ERUNT 2013-12-27 12:10 - 2013-12-27 12:10 - 01034531 _____ (Thisisu) C:\Users\Schmiedler\Desktop\JRT.exe 2013-12-27 11:59 - 2013-12-27 12:01 - 00000000 ____D C:\AdwCleaner 2013-12-27 11:57 - 2013-12-27 11:57 - 01233962 _____ C:\Users\Schmiedler\Downloads\adwcleaner.exe 2013-12-27 09:08 - 2013-12-27 09:08 - 00347816 _____ (Microsoft Corporation) C:\Users\Schmiedler\Downloads\MicrosoftFixit.wu.RNP.3831155887870044.1.1.Run.exe 2013-12-26 15:34 - 2013-12-26 15:34 - 00016192 _____ C:\ComboFix.txt 2013-12-26 15:05 - 2013-12-26 15:34 - 00000000 ____D C:\Qoobox 2013-12-26 15:05 - 2013-12-26 15:33 - 00000000 ____D C:\Windows\erdnt 2013-12-26 15:05 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2013-12-26 15:05 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2013-12-26 15:05 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-12-26 15:05 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-12-26 15:05 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-12-26 15:05 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2013-12-26 15:05 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2013-12-26 15:05 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2013-12-26 15:03 - 2013-12-26 15:04 - 05158590 ____R (Swearware) C:\Users\Schmiedler\Desktop\ComboFix.exe 2013-12-26 09:13 - 2013-12-26 09:13 - 00023446 _____ C:\Users\Schmiedler\Desktop\Gmer.zip 2013-12-26 09:13 - 2013-12-26 09:13 - 00015910 _____ C:\Users\Schmiedler\Desktop\mbam-log-2013-11-23 (09-10-24).zip 2013-12-26 07:40 - 2013-12-26 07:40 - 00386991 _____ C:\Users\Schmiedler\Desktop\Gmer.txt 2013-12-26 07:28 - 2013-12-26 07:29 - 00377856 _____ C:\Users\Schmiedler\Downloads\gmer_2.1.19163.exe 2013-12-26 07:25 - 2013-12-26 07:25 - 00019858 _____ C:\Users\Schmiedler\Desktop\Addition.txt 2013-12-26 07:24 - 2014-01-04 06:35 - 00000000 ____D C:\FRST 2013-12-26 07:24 - 2013-12-26 07:25 - 00023304 _____ C:\Users\Schmiedler\Desktop\FRST_01.txt 2013-12-26 07:23 - 2014-01-04 06:35 - 01931368 _____ (Farbar) C:\Users\Schmiedler\Desktop\FRST64.exe 2013-12-26 07:21 - 2013-12-26 07:21 - 00000482 _____ C:\Users\Schmiedler\Desktop\defogger_disable.log 2013-12-26 07:21 - 2013-12-26 07:21 - 00000000 _____ C:\Users\Schmiedler\defogger_reenable 2013-12-26 07:19 - 2013-12-26 07:19 - 00050477 _____ C:\Users\Schmiedler\Downloads\Defogger.exe 2013-12-23 10:30 - 2013-12-23 10:46 - 00013689 _____ C:\Users\windsaat\Documents\Veränderte Öffnungszeiten_7.odt 2013-12-23 09:09 - 2013-12-23 09:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-22 12:50 - 2013-12-22 12:50 - 00287224 _____ C:\Windows\Minidump\122213-22807-01.dmp 2013-12-20 17:05 - 2013-12-20 17:05 - 00288200 _____ C:\Windows\Minidump\122013-45848-01.dmp 2013-12-20 13:07 - 2013-12-20 13:07 - 00286888 _____ C:\Windows\Minidump\122013-56129-01.dmp 2013-12-19 15:39 - 2013-12-19 15:39 - 00289144 _____ C:\Windows\Minidump\121913-103319-01.dmp 2013-12-18 15:59 - 2013-12-18 15:59 - 00290928 _____ C:\Windows\Minidump\121813-44772-01.dmp 2013-12-17 18:10 - 2013-12-17 18:10 - 00289672 _____ C:\Windows\Minidump\121713-19874-01.dmp 2013-12-17 12:29 - 2013-12-17 12:29 - 00288744 _____ C:\Windows\Minidump\121713-51277-01.dmp 2013-12-07 13:15 - 2013-12-07 13:15 - 00285992 _____ C:\Windows\Minidump\120713-54413-01.dmp ==================== One Month Modified Files and Folders ======= 2014-01-04 06:35 - 2014-01-04 06:35 - 00008812 _____ C:\Users\Schmiedler\Desktop\FRST.txt 2014-01-04 06:35 - 2013-12-29 08:10 - 00000000 ____D C:\Users\Schmiedler\Desktop\FRST-OlderVersion 2014-01-04 06:35 - 2013-12-26 07:24 - 00000000 ____D C:\FRST 2014-01-04 06:35 - 2013-12-26 07:23 - 01931368 _____ (Farbar) C:\Users\Schmiedler\Desktop\FRST64.exe 2014-01-04 06:31 - 2009-07-14 05:45 - 00015104 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-04 06:31 - 2009-07-14 05:45 - 00015104 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-04 06:30 - 2009-07-14 18:58 - 00685570 _____ C:\Windows\system32\perfh007.dat 2014-01-04 06:30 - 2009-07-14 18:58 - 00145402 _____ C:\Windows\system32\perfc007.dat 2014-01-04 06:30 - 2009-07-14 06:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-04 06:28 - 2014-01-04 06:28 - 00000020 ___SH C:\Users\TEMP\ntuser.ini 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Vorlagen 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Startmenü 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Netzwerkumgebung 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Lokale Einstellungen 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Eigene Dateien 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Druckumgebung 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Documents\Eigene Musik 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Documents\Eigene Bilder 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\AppData\Local\Verlauf 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\AppData\Local\Anwendungsdaten 2014-01-04 06:28 - 2014-01-04 06:28 - 00000000 _SHDL C:\Users\TEMP\Anwendungsdaten 2014-01-04 06:27 - 2013-01-02 05:44 - 00000000 ___RD C:\Users\Schmiedler\Dropbox 2014-01-04 06:27 - 2013-01-02 05:40 - 00000000 ____D C:\Users\Schmiedler\AppData\Roaming\Dropbox 2014-01-04 06:27 - 2010-01-23 13:33 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-04 06:26 - 2014-01-01 09:41 - 00065536 _____ C:\Windows\system32\Ikeext.etl 2014-01-04 06:26 - 2009-12-28 15:37 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-04 06:26 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-04 06:26 - 2009-07-14 05:51 - 00001972 _____ C:\Windows\setupact.log 2014-01-03 18:39 - 2013-01-02 04:59 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-03 18:39 - 2009-12-28 15:10 - 01431213 _____ C:\Windows\WindowsUpdate.log 2014-01-03 18:18 - 2013-10-11 11:58 - 00000348 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job 2014-01-03 18:06 - 2010-01-23 13:33 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-03 16:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing 2014-01-03 16:21 - 2013-01-14 10:16 - 00000000 ____D C:\JposNetz 2014-01-03 14:37 - 2014-01-03 14:02 - 00062485 _____ C:\Users\windsaat\Documents\Veranstaltungen 2014.odt 2014-01-03 13:59 - 2013-08-06 10:04 - 00000000 ____D C:\Users\windsaat\Documents\Plakat-Dokumente 2014-01-03 13:02 - 2013-02-25 07:58 - 00000000 ___RD C:\Users\windsaat\Dropbox 2014-01-03 13:02 - 2013-02-25 07:55 - 00000000 ____D C:\Users\windsaat\AppData\Roaming\Dropbox 2014-01-03 13:01 - 2014-01-03 13:01 - 00290920 _____ C:\Windows\Minidump\010314-23649-01.dmp 2014-01-03 13:01 - 2013-01-02 21:22 - 00000000 ____D C:\Windows\Minidump 2014-01-02 12:23 - 2014-01-02 12:23 - 00013692 _____ C:\Users\windsaat\Documents\Aufnahmeblatt Beratung.odt 2014-01-02 10:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2014-01-02 09:27 - 2014-01-02 09:27 - 00290680 _____ C:\Windows\Minidump\010214-22464-01.dmp 2014-01-02 08:22 - 2014-01-02 08:22 - 00001474 _____ C:\Users\windsaat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-02 08:22 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2014-01-02 08:06 - 2013-01-14 08:58 - 00000000 ____D C:\ProgramData\AVAST Software 2014-01-02 08:04 - 2013-01-14 08:58 - 00004184 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2014-01-02 07:56 - 2014-01-02 07:56 - 00003250 _____ C:\Windows\System32\Tasks\{846BBE37-810F-4D8E-AE36-D1B5827973DB} 2014-01-02 07:40 - 2009-12-28 15:17 - 00001474 _____ C:\Users\Schmiedler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-02 07:38 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-02 07:36 - 2013-12-29 20:13 - 00037691 _____ C:\Windows\IE11_main.log 2014-01-02 07:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2014-01-02 07:31 - 2013-12-29 16:19 - 00016204 _____ C:\Windows\IE10_main.log 2014-01-02 07:21 - 2014-01-02 07:21 - 00000020 ___SH C:\Users\UpdatusUser.PC004\ntuser.ini 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Vorlagen 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Startmenü 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Netzwerkumgebung 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Lokale Einstellungen 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Eigene Dateien 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Druckumgebung 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Documents\Eigene Musik 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Documents\Eigene Bilder 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\AppData\Local\Verlauf 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\AppData\Local\Anwendungsdaten 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 _SHDL C:\Users\UpdatusUser.PC004\Anwendungsdaten 2014-01-02 07:21 - 2014-01-02 07:21 - 00000000 ____D C:\Users\UpdatusUser.PC004 2014-01-02 07:21 - 2013-01-02 03:44 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2014-01-02 07:20 - 2013-01-02 03:45 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2014-01-02 07:18 - 2013-01-02 03:44 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2014-01-02 07:08 - 2010-02-04 14:48 - 01567792 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2014-01-02 07:01 - 2009-12-28 15:44 - 00451522 _____ C:\Windows\PFRO.log 2014-01-02 06:39 - 2014-01-02 06:39 - 87591084 _____ C:\Users\Schmiedler\Documents\regeditCOMPONENTS.reg 2014-01-01 23:23 - 2010-01-23 15:04 - 00000000 ____D C:\Users\Schmiedler\AppData\Roaming\Skype 2014-01-01 16:32 - 2014-01-01 10:32 - 00002562 _____ C:\Windows\diagwrn.xml 2014-01-01 16:32 - 2014-01-01 10:32 - 00001908 _____ C:\Windows\diagerr.xml 2014-01-01 16:29 - 2014-01-01 16:29 - 00005588 _____ C:\Users\Schmiedler\Desktop\Windows-Kompatibilitätsbericht.htm 2014-01-01 10:32 - 2009-07-14 05:51 - 00000000 _____ C:\Windows\setuperr.log 2013-12-31 09:27 - 2013-12-31 09:27 - 00000134 _____ C:\Users\Schmiedler\Desktop\Internet Explorer-Problembehebung.url 2013-12-31 09:07 - 2013-12-31 09:07 - 00000000 ____D C:\3f38f3b32409d4e080f43ca874c78c12 2013-12-30 08:29 - 2013-01-14 10:14 - 00064024 _____ C:\Users\windsaat\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-30 08:13 - 2013-01-02 08:25 - 00000000 ___RD C:\Users\windsaat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-12-30 08:13 - 2013-01-02 08:25 - 00000000 ___RD C:\Users\windsaat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-12-30 07:06 - 2010-02-03 12:32 - 00007607 _____ C:\Users\Schmiedler\AppData\Local\Resmon.ResmonCfg 2013-12-30 05:46 - 2013-12-30 05:46 - 00000000 ____D C:\Users\Schmiedler\AppData\Roaming\JAM Software 2013-12-30 05:46 - 2013-12-30 05:46 - 00000000 ____D C:\Program Files (x86)\JAM Software 2013-12-30 05:45 - 2013-12-30 05:45 - 03350608 _____ (JAM Software ) C:\Users\Schmiedler\Downloads\TreeSizeFreeSetup_2.7.exe 2013-12-29 21:11 - 2010-01-23 13:33 - 00000000 ____D C:\Program Files\Google 2013-12-29 21:11 - 2010-01-23 13:33 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-29 21:08 - 2010-01-23 13:33 - 00000000 ____D C:\Users\Schmiedler\AppData\Local\Google 2013-12-29 21:06 - 2013-12-29 21:06 - 00000000 ____D C:\Windows\system32\appmgmt 2013-12-29 21:05 - 2010-02-04 14:48 - 00000000 ____D C:\ProgramData\VMware 2013-12-29 21:05 - 2010-02-04 14:48 - 00000000 ____D C:\Program Files (x86)\VMware 2013-12-29 20:19 - 2009-07-14 05:45 - 00294168 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-29 20:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK 2013-12-29 20:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR 2013-12-29 20:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\zh-HK 2013-12-29 20:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\tr-TR 2013-12-29 20:15 - 2013-12-29 20:15 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-29 20:15 - 2013-12-29 20:15 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-29 20:15 - 2013-12-29 20:15 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-29 20:15 - 2013-12-29 20:15 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-29 20:15 - 2013-12-29 20:15 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-29 20:15 - 2013-12-29 20:15 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-29 20:15 - 2013-12-29 20:15 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-29 20:15 - 2013-12-29 20:15 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-29 20:15 - 2013-12-29 20:15 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-29 20:15 - 2013-12-29 20:15 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-29 20:15 - 2013-12-29 20:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-29 20:15 - 2013-12-29 20:15 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-29 20:15 - 2013-12-29 20:15 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-29 20:04 - 2009-12-28 15:17 - 00000000 ___RD C:\Users\Schmiedler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-12-29 20:04 - 2009-12-28 15:17 - 00000000 ___RD C:\Users\Schmiedler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-12-29 20:02 - 2009-12-28 15:17 - 00000000 ____D C:\Users\Schmiedler 2013-12-29 19:53 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-12-29 19:53 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-12-29 19:52 - 2009-07-14 19:18 - 00000000 ____D C:\Program Files\Windows Journal 2013-12-29 15:57 - 2013-12-29 15:56 - 00000000 ____D C:\Windows\system32\MRT 2013-12-29 15:31 - 2013-12-29 15:31 - 00000000 ____D C:\Windows\CheckSur 2013-12-29 15:21 - 2010-01-23 13:28 - 00064024 _____ C:\Users\Schmiedler\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-29 14:48 - 2013-12-29 14:27 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2013-12-29 14:45 - 2009-07-14 03:34 - 00000439 _____ C:\Windows\win.ini 2013-12-29 14:09 - 2013-12-29 14:09 - 00000207 _____ C:\Windows\tweaking.com-regbackup-PC004-Microsoft-Windows-7-Ultimate-(64-bit).dat 2013-12-29 14:08 - 2013-12-29 14:08 - 00000000 ____D C:\RegBackup 2013-12-29 13:56 - 2013-12-29 13:56 - 02900332 _____ C:\Users\Schmiedler\Downloads\tweaking.com_windows_repair_aio.zip 2013-12-29 13:56 - 2013-12-29 13:56 - 00000000 ____D C:\Users\Schmiedler\Downloads\tweaking.com_windows_repair_aio 2013-12-29 08:11 - 2013-12-27 12:27 - 00023528 _____ C:\Users\Schmiedler\Desktop\FRST_03.txt 2013-12-29 08:06 - 2013-12-29 08:06 - 00891200 _____ C:\Users\Schmiedler\Desktop\SecurityCheck.exe 2013-12-29 07:00 - 2013-12-29 07:00 - 02347384 _____ (ESET) C:\Users\Schmiedler\Downloads\esetsmartinstaller_enu.exe 2013-12-27 12:27 - 2013-12-27 12:27 - 00022733 _____ C:\Users\Schmiedler\Desktop\FRST_02.txt 2013-12-27 12:17 - 2013-12-27 12:17 - 00000924 _____ C:\Users\Schmiedler\Desktop\JRT.txt 2013-12-27 12:12 - 2013-12-27 12:12 - 00000000 ____D C:\Windows\ERUNT 2013-12-27 12:10 - 2013-12-27 12:10 - 01034531 _____ (Thisisu) C:\Users\Schmiedler\Desktop\JRT.exe 2013-12-27 12:01 - 2013-12-27 11:59 - 00000000 ____D C:\AdwCleaner 2013-12-27 11:57 - 2013-12-27 11:57 - 01233962 _____ C:\Users\Schmiedler\Downloads\adwcleaner.exe 2013-12-27 09:08 - 2013-12-27 09:08 - 00347816 _____ (Microsoft Corporation) C:\Users\Schmiedler\Downloads\MicrosoftFixit.wu.RNP.3831155887870044.1.1.Run.exe 2013-12-26 15:34 - 2013-12-26 15:34 - 00016192 _____ C:\ComboFix.txt 2013-12-26 15:34 - 2013-12-26 15:05 - 00000000 ____D C:\Qoobox 2013-12-26 15:33 - 2013-12-26 15:05 - 00000000 ____D C:\Windows\erdnt 2013-12-26 15:29 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2013-12-26 15:04 - 2013-12-26 15:03 - 05158590 ____R (Swearware) C:\Users\Schmiedler\Desktop\ComboFix.exe 2013-12-26 09:13 - 2013-12-26 09:13 - 00023446 _____ C:\Users\Schmiedler\Desktop\Gmer.zip 2013-12-26 09:13 - 2013-12-26 09:13 - 00015910 _____ C:\Users\Schmiedler\Desktop\mbam-log-2013-11-23 (09-10-24).zip 2013-12-26 07:40 - 2013-12-26 07:40 - 00386991 _____ C:\Users\Schmiedler\Desktop\Gmer.txt 2013-12-26 07:29 - 2013-12-26 07:28 - 00377856 _____ C:\Users\Schmiedler\Downloads\gmer_2.1.19163.exe 2013-12-26 07:25 - 2013-12-26 07:25 - 00019858 _____ C:\Users\Schmiedler\Desktop\Addition.txt 2013-12-26 07:25 - 2013-12-26 07:24 - 00023304 _____ C:\Users\Schmiedler\Desktop\FRST_01.txt 2013-12-26 07:21 - 2013-12-26 07:21 - 00000482 _____ C:\Users\Schmiedler\Desktop\defogger_disable.log 2013-12-26 07:21 - 2013-12-26 07:21 - 00000000 _____ C:\Users\Schmiedler\defogger_reenable 2013-12-26 07:19 - 2013-12-26 07:19 - 00050477 _____ C:\Users\Schmiedler\Downloads\Defogger.exe 2013-12-24 09:18 - 2013-01-02 05:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-23 10:46 - 2013-12-23 10:30 - 00013689 _____ C:\Users\windsaat\Documents\Veränderte Öffnungszeiten_7.odt 2013-12-23 09:09 - 2013-12-23 09:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-22 12:50 - 2013-12-22 12:50 - 00287224 _____ C:\Windows\Minidump\122213-22807-01.dmp 2013-12-20 17:05 - 2013-12-20 17:05 - 00288200 _____ C:\Windows\Minidump\122013-45848-01.dmp 2013-12-20 13:07 - 2013-12-20 13:07 - 00286888 _____ C:\Windows\Minidump\122013-56129-01.dmp 2013-12-19 15:39 - 2013-12-19 15:39 - 00289144 _____ C:\Windows\Minidump\121913-103319-01.dmp 2013-12-18 15:59 - 2013-12-18 15:59 - 00290928 _____ C:\Windows\Minidump\121813-44772-01.dmp 2013-12-17 18:10 - 2013-12-17 18:10 - 00289672 _____ C:\Windows\Minidump\121713-19874-01.dmp 2013-12-17 12:29 - 2013-12-17 12:29 - 00288744 _____ C:\Windows\Minidump\121713-51277-01.dmp 2013-12-14 10:07 - 2013-03-27 09:18 - 00002261 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-11 18:39 - 2013-01-02 04:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 18:39 - 2013-01-02 04:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-11 18:39 - 2013-01-02 04:59 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-07 14:01 - 2010-01-23 13:33 - 00004114 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-07 14:01 - 2010-01-23 13:33 - 00003862 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-07 13:15 - 2013-12-07 13:15 - 00285992 _____ C:\Windows\Minidump\120713-54413-01.dmp Some content of TEMP: ==================== C:\Users\Schmiedler\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 06:25 ==================== End Of Log ============================ Gruß, cmiedler |
04.01.2014, 15:58 | #17 |
/// the machine /// TB-Ausbilder | sporadische Bluescreens + snap.do + keine Windows-Updates Also ich würde jetzt Daten sichern und einmal sauber neu aufsetzen, irgendwas ist da total verbogen.
__________________
__________________ |
23.02.2014, 16:00 | #18 |
| sporadische Bluescreens + snap.do + keine Windows-Updates Anbei zur Info der aktuelle Endstand:
__________________nach mehrfachem Löschen des PendingXmlIdentifier wurden schließlich alle Updates bis auf IE10 und IE11 erfolgreich installiert. Ich arbeite deshalb nur mit FF. Avast hat eine Anleitung geliefert, nach der sich die neue Version erfolgreich installieren ließ. Das alles hat mir viel Erfahrung gebracht und war dank Eurer guten Anleitungen ja auch erfolgreich! Leider gab es weiterhin diverse BlueScreens, weshalb ich einen neuen PC besorgt habe. Der alte dient zu Testzwecken und als Backup. |
24.02.2014, 16:39 | #19 |
/// the machine /// TB-Ausbilder | sporadische Bluescreens + snap.do + keine Windows-Updates ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu sporadische Bluescreens + snap.do + keine Windows-Updates |
.dll, adobe, antivirus, avast, bluescreens, browser, defender, desktop, explorer, flash player, google, helper, homepage, iexplore.exe, minidump, mozilla, neustart, newtab, ntdll.dll, officejet, plug-in, registry, scan, security, server, snap.do, störungen, svchost.exe, system, temp, usb, warum, windows-update, windowsupdates, winlogon.exe |