Ich habe auf dem PC meiner Schwester den Nation Zoom Trojaner, bzw. Malware erkannt und möchte diesen loswerden. Ich habe bereits Scans mit Malwarebytes Anti-Malware durchgeführt und die infizierten Daten gelöscht, mittlerweile wird angezeigt dass 0 Daten infiziert sind, die Startseite ist aber immer noch Nation Zoom und beim Surfen kommen dauernd Pop Ups auf.


FRST Teil 1:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-12-2013 01
Ran by Nora (administrator) on NORA-PC on 27-12-2013 18:24:36
Running from C:\Users\Nora\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12661352 2011-08-01] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-26] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs:   [ ] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5BAFE090F1FBCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388148009&from=tugs&uid=HitachiXHDS721032CLA362_JPB440HE0T3EWB0T3EWBX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1388148009&from=tugs&uid=HitachiXHDS721032CLA362_JPB440HE0T3EWB0T3EWBX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1388148009&from=tugs&uid=HitachiXHDS721032CLA362_JPB440HE0T3EWB0T3EWBX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1388148009&from=tugs&uid=HitachiXHDS721032CLA362_JPB440HE0T3EWB0T3EWBX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388148009&from=tugs&uid=HitachiXHDS721032CLA362_JPB440HE0T3EWB0T3EWBX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388148009&from=tugs&uid=HitachiXHDS721032CLA362_JPB440HE0T3EWB0T3EWBX&q={searchTerms}
BHO: Plus-HD-1.2 - {11111111-1111-1111-1111-110311121155} - C:\Program Files (x86)\Plus-HD-1.2\Plus-HD-1.2-bho64.dll No File
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 195.50.140.246 195.50.140.180

FireFox:
========
FF ProfilePath: C:\Users\Nora\AppData\Roaming\Mozilla\Firefox\Profiles\jqa2lx3y.default
FF user.js: detected! => C:\Users\Nora\AppData\Roaming\Mozilla\Firefox\Profiles\jqa2lx3y.default\user.js
FF NewTab: hxxp://www.nationzoom.com/newtab/?type=nt&ts=1388148009&from=tugs&uid=HitachiXHDS721032CLA362_JPB440HE0T3EWB0T3EWBX
FF DefaultSearchEngine: nationzoom
FF SelectedSearchEngine: nationzoom
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-1.2 - C:\Users\Nora\AppData\Roaming\Mozilla\Firefox\Profiles\jqa2lx3y.default\Extensions\39e612de-2951-40c2-ab4a-82e121c42778@4e0cecc2-7c67-4374-bc4c-f15656d80ab7.com
FF Extension: No Name - C:\Users\Nora\AppData\Roaming\Mozilla\Firefox\Profiles\jqa2lx3y.default\Extensions\staged
FF Extension: Websteroids - C:\Users\Nora\AppData\Roaming\Mozilla\Firefox\Profiles\jqa2lx3y.default\Extensions\support@websteroidsapp.com
FF Extension: GreyGray - C:\Users\Nora\AppData\Roaming\Mozilla\Firefox\Profiles\jqa2lx3y.default\Extensions\firefox@greygray.biz.xpi
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Nora\AppData\Roaming\Mozilla\Firefox\Profiles\jqa2lx3y.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKCU\...\Firefox\Extensions: [{cf828622-feaf-4708-8e39-395e58c9f1cc}] - C:\Program Files (x86)\Re-markit\150.xpi
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-26] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-26] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-26] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-26] (Avira Operations GmbH & Co. KG)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2012-03-09] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [638896 2012-03-09] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 megasas2; C:\Windows\system32\drivers\megasas2.sys [51280 2010-11-02] (LSI Corporation)
S3 megasr1; C:\Windows\system32\drivers\megasr1.sys [806696 2012-02-08] (LSI Corporation, Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-27 18:24 - 2013-12-27 18:25 - 00009724 _____ C:\Users\Nora\Downloads\FRST.txt
2013-12-27 18:24 - 2013-12-27 18:24 - 00000000 ____D C:\FRST
2013-12-27 18:22 - 2013-12-27 18:22 - 01930746 _____ (Farbar) C:\Users\Nora\Downloads\FRST64.exe
2013-12-27 15:22 - 2013-12-27 15:22 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-27 15:22 - 2013-12-27 15:22 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Malwarebytes
2013-12-27 15:22 - 2013-12-27 15:22 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-27 15:22 - 2013-12-27 15:22 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-27 15:22 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-27 15:21 - 2013-12-27 15:21 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nora\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-27 15:07 - 2013-12-27 17:17 - 00000000 ____D C:\ProgramData\Updater
2013-12-27 15:07 - 2013-12-27 17:17 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-27 15:07 - 2013-12-27 17:16 - 00000000 ____D C:\Program Files (x86)\AmiExt
2013-12-27 15:07 - 2013-12-27 15:07 - 00000000 ____D C:\Program Files (x86)\Lightspark 0.5.3-git
2013-12-27 15:06 - 2013-12-27 17:15 - 00000000 ____D C:\Users\Nora\AppData\Local\SwvUpdater
2013-12-27 13:41 - 2013-12-27 17:20 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-12-27 13:41 - 2013-12-27 15:17 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2013-12-27 13:40 - 2013-12-27 17:20 - 00000000 ____D C:\Users\Nora\AppData\Local\Mobogenie
2013-12-27 13:40 - 2013-12-27 17:17 - 00000000 ____D C:\ProgramData\WPM
2013-12-27 13:40 - 2013-12-27 17:16 - 00000205 _____ C:\Users\Nora\daemonprocess.txt
2013-12-27 13:40 - 2013-12-27 15:18 - 00001919 _____ C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2013-12-27 13:40 - 2013-12-27 15:18 - 00000000 ____D C:\Users\Nora\AppData\Local\genienext
2013-12-27 13:40 - 2013-12-27 13:40 - 00000000 ____D C:\Users\Nora\Documents\Mobogenie
2013-12-27 13:40 - 2013-12-27 13:40 - 00000000 ____D C:\Users\Nora\AppData\Local\cache
2013-12-27 13:40 - 2013-12-27 13:40 - 00000000 ____D C:\Users\Nora\.android
2013-12-27 13:09 - 2013-12-27 13:09 - 00000989 _____ C:\Users\Public\Desktop\Winamp.lnk
2013-12-27 13:08 - 2013-12-27 13:09 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Winamp
2013-12-27 13:08 - 2013-12-27 13:09 - 00000000 ____D C:\Program Files (x86)\Winamp
2013-12-27 13:06 - 2013-12-27 13:07 - 12855384 _____ (Nullsoft, Inc.) C:\Users\Nora\Downloads\winamp5666_full_de-de.exe
2013-12-26 20:42 - 2013-12-26 20:42 - 00000000 ____D C:\Users\Nora\Documents\Originals
2013-12-26 20:42 - 2013-12-26 20:42 - 00000000 ____D C:\Users\Nora\Documents\My ooVoo
2013-12-26 20:42 - 2013-12-26 20:42 - 00000000 ____D C:\Users\Nora\Documents\Mathe
2013-12-26 20:41 - 2013-12-26 20:42 - 00000000 ____D C:\Users\Nora\Documents\java
2013-12-26 20:41 - 2013-12-26 20:41 - 00000000 ____D C:\Users\Nora\Documents\ICQ
2013-12-26 20:41 - 2013-12-26 20:41 - 00000000 ____D C:\Users\Nora\Documents\Geschichtsprotokolle
2013-12-26 20:40 - 2013-12-26 20:41 - 00000000 ____D C:\Users\Nora\Documents\Für Spanien
2013-12-26 20:14 - 2013-12-26 20:14 - 00000000 ____D C:\Users\Nora\Documents\DivX Movies
2013-12-26 20:14 - 2013-12-26 20:14 - 00000000 ____D C:\Users\Nora\Documents\Briefe
2013-12-26 20:13 - 2013-12-26 20:14 - 00000000 ____D C:\Users\Nora\Documents\Annik
2013-12-26 20:12 - 2013-12-26 20:13 - 00000000 ____D C:\Users\Nora\Documents\x
2013-12-26 20:11 - 2013-12-26 20:11 - 00000000 ____D C:\Users\Nora\Documents\Wand
2013-12-26 20:07 - 2013-12-26 20:11 - 00000000 ____D C:\Users\Nora\Documents\Von skype
2013-12-26 20:07 - 2013-10-30 13:30 - 00000000 ____D C:\Users\Nora\Documents\VideoPad Projects
2013-12-26 20:06 - 2013-12-26 20:07 - 00000000 ____D C:\Users\Nora\Documents\Unsinn
2013-12-26 20:02 - 2013-12-26 20:02 - 00000000 ____D C:\Users\Nora\Documents\Rezepte
2013-12-26 20:02 - 2013-12-26 20:02 - 00000000 ____D C:\Users\Nora\Documents\Praktikumsbericht
2013-12-26 19:50 - 2013-12-26 20:52 - 00000000 ____D C:\Filme
2013-12-26 19:50 - 2013-11-12 18:10 - 00063762 _____ C:\Users\Nora\Documents\schmetterlingsgefühle.vpj
2013-12-26 19:49 - 2013-12-26 19:58 - 00000000 ____D C:\Users\Nora\Documents\Philips
2013-12-26 19:49 - 2012-10-29 22:46 - 407469934 _____ C:\Users\Nora\Documents\MVI_7896.avi
2013-12-26 19:45 - 2013-12-26 19:45 - 00000000 ____D C:\Outlook
2013-12-26 19:44 - 2013-12-26 19:44 - 00002029 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-12-26 19:44 - 2013-12-26 19:44 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-12-26 19:35 - 2013-12-26 19:34 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-19 14:21 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-19 14:21 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-19 14:21 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-19 14:21 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-19 14:21 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-19 14:21 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-19 14:21 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-19 14:21 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-19 14:21 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-19 14:21 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-19 14:21 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-19 14:21 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-19 14:21 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-19 14:21 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-19 14:21 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-19 14:21 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-19 14:21 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-19 14:21 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-19 14:21 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-19 14:21 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-19 14:21 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-19 14:21 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-19 14:21 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-19 14:21 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-19 14:21 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-19 14:21 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-19 14:21 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-19 14:21 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-19 14:21 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-19 14:21 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-19 14:21 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-19 12:48 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-19 12:48 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-19 12:48 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-12-19 12:48 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-12-19 12:48 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-12-19 12:48 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-12-19 12:48 - 2011-03-25 04:29 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-12-19 12:48 - 2011-03-25 04:29 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-12-19 12:48 - 2011-03-25 04:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-12-19 12:48 - 2011-03-25 04:29 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-12-19 12:48 - 2011-03-25 04:29 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-12-19 12:48 - 2011-03-25 04:29 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-12-19 12:48 - 2011-03-25 04:28 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-12-19 12:48 - 2011-02-25 07:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-12-19 12:48 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-12-19 11:30 - 2013-12-19 11:30 - 01584728 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-19 11:25 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2013-12-19 11:25 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2013-12-19 11:25 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2013-12-19 11:25 - 2012-08-23 15:07 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-12-19 11:25 - 2012-08-23 14:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-12-19 11:25 - 2012-08-23 14:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-12-19 11:25 - 2012-08-23 14:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-12-19 11:25 - 2012-08-23 14:40 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-12-19 11:25 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-12-19 11:25 - 2012-08-23 14:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-12-19 11:25 - 2012-08-23 14:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-12-19 11:25 - 2012-08-23 14:17 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-12-19 11:25 - 2012-08-23 14:06 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-12-19 11:25 - 2012-08-23 13:52 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-12-19 11:25 - 2012-08-23 12:20 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-12-19 11:25 - 2012-08-23 12:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-12-19 11:25 - 2012-08-23 12:14 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-12-19 11:25 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2013-12-19 11:25 - 2012-08-23 11:54 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-12-19 11:25 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2013-12-19 11:25 - 2012-08-23 11:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-12-19 11:25 - 2012-08-23 11:22 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-12-19 11:25 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2013-12-19 11:25 - 2012-08-23 09:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-12-19 11:25 - 2012-08-23 09:13 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-12-19 11:18 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-12-19 11:18 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-12-19 11:11 - 2013-12-19 12:36 - 00000000 ____D C:\Users\Nora\AppData\Roaming\vlc
2013-12-19 11:10 - 2013-12-19 11:10 - 00001076 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-12-19 11:10 - 2013-12-19 11:10 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-12-19 11:05 - 2013-12-19 11:05 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ACD Systems
2013-12-19 11:05 - 2013-12-19 11:05 - 00000000 ____D C:\Program Files (x86)\ACDSee32
2013-12-19 10:28 - 2013-12-26 19:44 - 00000000 ____D C:\ProgramData\Adobe
2013-12-19 10:27 - 2013-12-19 10:27 - 00000000 ____D C:\ProgramData\FreePDF
2013-12-19 10:27 - 2013-12-19 10:27 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-12-19 10:27 - 2013-12-19 10:27 - 00000000 ____D C:\Program Files (x86)\FreePDF_XP
2013-12-19 10:27 - 2013-12-19 10:27 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-12-19 10:27 - 2013-12-19 10:27 - 00000000 ____D C:\InternetCache
2013-12-19 10:27 - 2005-03-12 02:07 - 00087040 _____ C:\Windows\system32\redmonnt.dll
2013-12-19 10:27 - 2005-03-12 02:07 - 00046080 _____ C:\Windows\system32\unredmon.exe
2013-12-19 10:27 - 2001-10-28 08:42 - 00119152 _____ C:\Windows\system32\redmon.hlp
2013-12-19 10:26 - 2013-12-19 10:26 - 00000000 ____D C:\ProgramData\APN
2013-12-19 09:23 - 2013-12-19 09:23 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Avira
2013-12-19 09:18 - 2013-12-19 09:18 - 00002076 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-19 09:17 - 2013-12-26 19:34 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-19 09:17 - 2013-12-26 19:34 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-19 09:17 - 2013-12-26 19:34 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-19 09:17 - 2013-12-19 09:18 - 00000000 ____D C:\ProgramData\Avira
2013-12-19 09:17 - 2013-12-19 09:17 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ghostscript
2013-12-19 09:17 - 2013-12-19 09:17 - 00000000 ____D C:\Program Files\gs
2013-12-19 09:17 - 2013-12-19 09:17 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-18 22:21 - 2013-12-27 18:17 - 00698688 _____ C:\Windows\system32\perfh007.dat
2013-12-18 22:21 - 2013-12-27 18:17 - 00148828 _____ C:\Windows\system32\perfc007.dat
2013-12-18 22:21 - 2013-12-18 22:21 - 00295922 _____ C:\Windows\system32\perfi007.dat
2013-12-18 22:21 - 2013-12-18 22:21 - 00038104 _____ C:\Windows\system32\perfd007.dat
2013-12-18 22:21 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-12-18 22:21 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\SysWOW64\de
2013-12-18 22:21 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\SysWOW64\0407
2013-12-18 22:21 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\system32\de
2013-12-18 22:21 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\system32\0407
2013-12-18 22:21 - 2013-12-18 13:31 - 00000000 ____D C:\Windows\panther
2013-12-18 22:21 - 2007-11-08 14:14 - 00043256 ____R C:\Windows\system32\OEMLOGO.bmp
2013-12-18 22:21 - 2007-11-08 14:14 - 00043256 ____R C:\Windows\Logo_positive_jpg_middle.bmp
2013-12-18 17:58 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-18 17:55 - 2013-12-18 17:55 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-18 17:55 - 2013-12-18 17:55 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-18 17:55 - 2013-12-18 17:55 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-18 17:55 - 2013-12-18 17:55 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-18 17:55 - 2013-12-18 17:55 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-18 17:55 - 2013-12-18 17:55 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-18 17:55 - 2013-12-18 17:55 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-18 17:48 - 2013-12-27 13:40 - 00001633 _____ C:\Users\Nora\Desktop\Internet Explorer.lnk
2013-12-18 17:42 - 2013-12-18 17:42 - 00000000 ____D C:\Users\Nora\AppData\Local\Macromedia
2013-12-18 17:36 - 2013-12-19 11:15 - 00000000 ____D C:\Users\Nora\AppData\Local\Adobe
2013-12-18 17:26 - 2013-12-27 13:40 - 00001375 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-12-18 17:26 - 2013-12-18 17:26 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Mozilla
2013-12-18 17:26 - 2013-12-18 17:26 - 00000000 ____D C:\Users\Nora\AppData\Local\Mozilla
2013-12-18 17:26 - 2013-12-18 17:26 - 00000000 ____D C:\ProgramData\Mozilla
2013-12-18 17:26 - 2013-12-18 17:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-18 17:26 - 2013-12-18 17:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-18 17:09 - 2013-12-18 17:09 - 00003532 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-12-18 17:09 - 2013-12-18 17:09 - 00001750 _____ C:\Users\Public\Desktop\Browserwahl.lnk
2013-12-18 16:54 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-18 16:54 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-18 16:54 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-18 16:54 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-18 16:48 - 2013-12-18 16:48 - 00000134 _____ C:\Users\Nora\Desktop\Internet Explorer Troubleshooting.url
2013-12-18 16:46 - 2013-12-18 17:58 - 00015652 _____ C:\Windows\IE11_main.log
2013-12-18 16:25 - 2013-12-18 16:25 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-12-18 16:24 - 2013-12-18 16:32 - 00010741 _____ C:\Windows\IE10_main.log
2013-12-18 16:20 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2013-12-18 16:16 - 2013-12-18 16:19 - 00003987 _____ C:\Windows\IE9_main.log
2013-12-18 15:19 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-12-18 15:19 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-12-18 15:19 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-12-18 15:19 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-12-18 15:19 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-12-18 15:19 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-12-18 15:19 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-12-18 15:19 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-12-18 15:13 - 2013-12-18 15:14 - 00000000 ____D C:\Windows\system32\MRT
2013-12-18 15:13 - 2013-12-01 14:42 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-18 15:12 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-12-18 15:12 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-12-18 15:12 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-12-18 14:59 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-18 14:59 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-18 14:59 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-12-18 14:59 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-12-18 14:59 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-12-18 14:59 - 2012-05-01 06:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-12-18 14:59 - 2012-04-26 06:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2013-12-18 14:59 - 2012-04-26 06:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2013-12-18 14:59 - 2012-04-26 06:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2013-12-18 14:58 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-12-18 14:58 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-12-18 14:58 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-12-18 14:58 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-12-18 14:58 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-12-18 14:58 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-12-18 14:58 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-12-18 14:58 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-12-18 14:58 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-12-18 14:58 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-12-18 14:58 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-12-18 14:58 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-12-18 14:58 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-12-18 14:58 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-12-18 14:58 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-12-18 14:58 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-12-18 14:58 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-12-18 14:58 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-12-18 14:58 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-12-18 14:58 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-12-18 14:58 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-12-18 14:58 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-12-18 14:58 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-12-18 14:58 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-12-18 14:58 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-12-18 14:58 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-12-18 14:58 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-12-18 14:58 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-12-18 14:58 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-12-18 14:58 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-12-18 14:58 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-12-18 14:58 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-12-18 14:58 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-12-18 14:58 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-12-18 14:58 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-12-18 14:58 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-12-18 14:58 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-12-18 14:58 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-12-18 14:58 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-12-18 14:58 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-12-18 14:58 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2013-12-18 14:58 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2013-12-18 14:58 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-12-18 14:58 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-12-18 14:58 - 2012-10-03 18:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2013-12-18 14:58 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2013-12-18 14:58 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2013-12-18 14:58 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2013-12-18 14:58 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2013-12-18 14:58 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2013-12-18 14:58 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-12-18 14:58 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-12-18 14:58 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-12-18 14:58 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2013-12-18 14:58 - 2012-01-13 08:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-12-18 14:58 - 2012-01-04 11:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-12-18 14:58 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-12-18 14:58 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2013-12-18 14:58 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2013-12-18 14:58 - 2011-05-04 06:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-12-18 14:58 - 2011-05-04 06:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-12-18 14:58 - 2011-05-04 06:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-12-18 14:58 - 2011-05-04 06:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-12-18 14:58 - 2011-05-04 06:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2013-12-18 14:58 - 2011-05-04 06:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-12-18 14:58 - 2011-05-04 06:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-12-18 14:58 - 2011-05-04 06:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2013-12-18 14:58 - 2011-05-04 06:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-12-18 14:58 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-12-18 14:58 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-12-18 14:58 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-12-18 14:58 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-12-18 14:58 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-12-18 14:58 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2013-12-18 14:58 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-12-18 14:58 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-12-18 14:58 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-12-18 14:57 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-18 14:57 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-18 14:57 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-18 14:57 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-18 14:57 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-12-18 14:57 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-12-18 14:57 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-12-18 14:57 - 2013-04-12 15:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-12-18 14:57 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-12-18 14:57 - 2012-11-01 06:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-12-18 14:57 - 2012-11-01 06:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-12-18 14:57 - 2012-11-01 05:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-12-18 14:57 - 2012-11-01 05:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-12-18 14:57 - 2011-10-26 06:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-12-18 14:57 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-12-18 14:57 - 2011-06-15 11:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2013-12-18 14:57 - 2011-06-15 11:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2013-12-18 14:57 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2013-12-18 14:57 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2013-12-18 14:57 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2013-12-18 14:57 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2013-12-18 14:57 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2013-12-18 14:57 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2013-12-18 14:57 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2013-12-18 14:57 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-12-18 14:57 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-12-18 14:57 - 2011-03-11 07:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2013-12-18 14:57 - 2011-03-11 07:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2013-12-18 14:57 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2013-12-18 14:57 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2013-12-18 14:57 - 2010-06-26 04:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2013-12-18 14:57 - 2010-06-26 04:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-12-18 14:56 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-18 14:56 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-12-18 14:56 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-12-18 14:56 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-12-18 14:56 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-12-18 14:56 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-12-18 14:56 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-12-18 14:56 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-12-18 14:56 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-12-18 14:56 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-12-18 14:56 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-12-18 14:56 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-12-18 14:56 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-12-18 14:56 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2013-12-18 14:56 - 2011-12-30 07:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-12-18 14:56 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-12-18 14:56 - 2011-06-16 06:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-12-18 14:56 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2013-12-18 14:56 - 2010-12-23 11:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2013-12-18 14:56 - 2010-12-23 11:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2013-12-18 14:56 - 2010-12-23 11:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2013-12-18 14:56 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2013-12-18 14:56 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
         

FRST Teil 2:

2013-12-18 14:56 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2013-12-18 14:55 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-18 14:55 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-18 14:55 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-12-18 14:55 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-12-18 14:55 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-12-18 14:55 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-12-18 14:55 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-12-18 14:55 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-12-18 14:55 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-12-18 14:55 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-12-18 14:55 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-12-18 14:55 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-12-18 14:55 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-12-18 14:55 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-12-18 14:55 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-12-18 14:55 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-12-18 14:55 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-12-18 14:55 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-12-18 14:55 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-12-18 14:55 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-12-18 14:55 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-12-18 14:55 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-12-18 14:55 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-12-18 14:55 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-12-18 14:55 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-12-18 14:55 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-12-18 14:55 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-12-18 14:55 - 2013-03-19 06:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-12-18 14:55 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2013-12-18 14:55 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-12-18 14:55 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-12-18 14:55 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-12-18 14:55 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-12-18 14:55 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-12-18 14:55 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-12-18 14:55 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-12-18 14:55 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-12-18 14:55 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-12-18 14:55 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-12-18 14:55 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-12-18 14:55 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-12-18 14:55 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-12-18 14:55 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-12-18 14:55 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-12-18 14:55 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-12-18 14:55 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-12-18 14:55 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-12-18 14:55 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-12-18 14:55 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-12-18 14:55 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-12-18 14:55 - 2012-11-28 23:56 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-12-18 14:55 - 2011-07-09 03:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2013-12-18 14:55 - 2011-04-27 03:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-12-18 14:55 - 2011-04-27 03:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-12-18 14:54 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-12-18 14:54 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-12-18 14:54 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-12-18 14:54 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-12-18 14:54 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-12-18 14:54 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-12-18 14:54 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-12-18 14:54 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-12-18 14:54 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-12-18 14:54 - 2012-11-30 00:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls
2013-12-18 14:54 - 2012-11-30 00:15 - 00420064 _____ C:\Windows\system32\locale.nls
2013-12-18 14:54 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2013-12-18 14:54 - 2012-06-06 07:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2013-12-18 14:54 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2013-12-18 14:54 - 2011-04-22 23:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2013-12-18 14:54 - 2011-03-03 07:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2013-12-18 14:54 - 2011-03-03 07:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2013-12-18 14:54 - 2011-03-03 07:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2013-12-18 14:54 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2013-12-18 14:54 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2013-12-18 14:53 - 2013-12-18 17:48 - 00058016 _____ C:\Users\Nora\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-18 14:53 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-18 14:53 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-18 14:53 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-12-18 14:53 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-12-18 14:53 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-12-18 14:53 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-18 14:53 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-12-18 14:53 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-18 14:53 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-12-18 14:53 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-18 14:53 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-18 14:53 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-18 14:53 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-18 14:53 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-12-18 14:53 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-12-18 14:53 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-12-18 14:53 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-18 14:53 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-18 14:53 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-12-18 14:53 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-12-18 14:53 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-12-18 14:53 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-12-18 14:53 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-12-18 14:53 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-12-18 14:53 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-12-18 14:53 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-12-18 14:53 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-12-18 14:53 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-12-18 14:53 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-12-18 14:53 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-12-18 14:53 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-12-18 14:53 - 2013-01-03 07:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-12-18 14:53 - 2012-11-22 06:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-12-18 14:53 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-12-18 14:53 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-12-18 14:53 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-12-18 14:53 - 2012-08-22 19:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2013-12-18 14:53 - 2012-08-11 01:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-12-18 14:53 - 2012-08-11 00:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-12-18 14:53 - 2012-04-28 04:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-12-18 14:53 - 2012-04-07 13:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-12-18 14:53 - 2012-04-07 12:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-12-18 14:53 - 2011-12-16 09:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-12-18 14:53 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-12-18 14:53 - 2011-10-15 07:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-12-18 14:53 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-12-18 14:53 - 2011-08-27 06:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-12-18 14:53 - 2011-08-27 06:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2013-12-18 14:53 - 2011-08-27 05:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-12-18 14:53 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-12-18 14:53 - 2011-08-17 06:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2013-12-18 14:53 - 2011-08-17 06:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2013-12-18 14:53 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-12-18 14:53 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-12-18 14:53 - 2011-05-24 12:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2013-12-18 14:53 - 2011-05-24 11:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2013-12-18 14:53 - 2011-05-24 11:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2013-12-18 14:53 - 2011-05-24 11:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2013-12-18 14:53 - 2011-05-24 11:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2013-12-18 14:53 - 2011-04-29 04:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2013-12-18 14:53 - 2011-04-29 04:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-12-18 14:53 - 2011-04-29 04:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-12-18 14:53 - 2011-02-23 05:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2013-12-18 14:53 - 2011-02-18 11:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2013-12-18 14:53 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2013-12-18 14:53 - 2011-02-05 18:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2013-12-18 14:53 - 2011-02-05 18:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2013-12-18 14:53 - 2011-02-05 18:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2013-12-18 14:53 - 2011-02-05 18:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2013-12-18 14:53 - 2011-02-05 18:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2013-12-18 14:53 - 2011-02-05 18:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2013-12-18 14:53 - 2011-02-05 18:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2013-12-18 14:53 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-12-18 14:52 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-12-18 14:52 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-12-18 14:52 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-12-18 14:52 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-12-18 14:52 - 2012-09-25 23:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-12-18 14:52 - 2012-07-04 23:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-12-18 14:52 - 2012-07-04 23:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-12-18 14:52 - 2012-07-04 23:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-12-18 14:52 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-12-18 14:52 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-12-18 14:52 - 2012-05-14 06:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-12-18 14:52 - 2012-05-05 09:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-12-18 14:52 - 2012-05-05 08:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-12-18 14:52 - 2012-03-17 08:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-12-18 14:52 - 2011-11-19 15:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2013-12-18 14:52 - 2011-11-19 15:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-12-18 14:52 - 2011-05-03 06:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2013-12-18 14:52 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2013-12-18 14:52 - 2011-02-12 12:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2013-12-18 14:45 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-12-18 14:45 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-12-18 14:45 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-12-18 14:40 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-12-18 14:40 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-12-18 14:40 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-12-18 14:40 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-12-18 14:40 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-12-18 14:40 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-12-18 14:40 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-12-18 14:40 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-12-18 14:40 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-12-18 14:33 - 2013-12-18 14:33 - 00016282 _____ C:\Windows\system32\results.xml
2013-12-18 14:33 - 2013-12-18 14:33 - 00000000 ____D C:\ProgramData\Intel
2013-12-18 14:31 - 2013-12-18 14:31 - 00000000 ____D C:\Program Files\Common Files\Intel
2013-12-18 14:21 - 2013-12-18 14:31 - 00000000 ____D C:\Program Files (x86)\Intel
2013-12-18 14:21 - 2013-12-18 14:30 - 00000000 ____D C:\Intel
2013-12-18 14:20 - 2013-12-18 14:20 - 00002200 _____ C:\RHDSetup.log
2013-12-18 14:20 - 2013-12-18 14:20 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-18 14:20 - 2013-12-18 14:20 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-12-18 14:20 - 2013-12-18 14:20 - 00000000 ____D C:\Program Files\Realtek
2013-12-18 14:20 - 2013-12-18 14:20 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-12-18 14:20 - 2011-08-02 18:38 - 03048040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2013-12-18 14:20 - 2011-08-02 16:03 - 01483264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2013-12-18 14:20 - 2011-08-02 11:21 - 00093288 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll
2013-12-18 14:20 - 2011-07-29 14:46 - 03192936 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2013-12-18 14:20 - 2011-07-29 14:46 - 02484840 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2013-12-18 14:20 - 2011-07-29 14:46 - 01827944 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2013-12-18 14:20 - 2011-07-28 00:55 - 02604376 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2013-12-18 14:20 - 2011-07-28 00:55 - 02132824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2013-12-18 14:20 - 2011-07-22 19:35 - 01247848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2013-12-18 14:20 - 2011-07-11 14:17 - 01698408 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2013-12-18 14:20 - 2011-07-08 17:05 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2013-12-18 14:20 - 2011-07-08 14:34 - 00065432 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2013-12-18 14:20 - 2011-06-30 16:14 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2013-12-18 14:20 - 2011-06-27 14:45 - 03768152 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2013-12-18 14:20 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2013-12-18 14:20 - 2011-05-05 15:24 - 02085440 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2013-12-18 14:20 - 2011-05-05 14:15 - 00220512 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2013-12-18 14:20 - 2011-05-05 14:14 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2013-12-18 14:20 - 2011-05-05 14:14 - 00078176 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2013-12-18 14:20 - 2011-05-02 14:27 - 03308376 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2013-12-18 14:20 - 2011-05-02 14:27 - 00426328 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2013-12-18 14:20 - 2011-05-02 14:27 - 00136024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2013-12-18 14:20 - 2011-05-02 14:27 - 00118104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2013-12-18 14:20 - 2011-05-02 14:27 - 00074072 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2013-12-18 14:20 - 2010-11-18 11:49 - 00121744 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2013-12-18 14:20 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2013-12-18 14:20 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2013-12-18 14:20 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2013-12-18 14:20 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2013-12-18 14:20 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2013-12-18 14:20 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2013-12-18 14:20 - 2010-11-03 18:31 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2013-12-18 14:20 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2013-12-18 14:20 - 2010-10-03 13:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2013-12-18 14:20 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2013-12-18 14:20 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2013-12-18 14:20 - 2010-07-22 16:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2013-12-18 14:20 - 2010-05-06 17:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2013-12-18 14:20 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2013-12-18 14:20 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2013-12-18 14:20 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2013-12-18 14:20 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2013-12-18 14:20 - 2009-11-17 18:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2013-12-18 14:10 - 2013-12-18 14:10 - 00000000 ____D C:\ProgramData\Fujitsu
2013-12-18 14:09 - 2013-12-19 09:17 - 00000000 ____D C:\Install
2013-12-18 14:06 - 2013-12-19 11:15 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Adobe
2013-12-18 14:06 - 2013-12-18 14:06 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Macromedia
2013-12-18 14:05 - 2013-12-27 17:12 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-18 14:05 - 2013-12-18 17:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-18 14:05 - 2013-12-18 17:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-18 14:05 - 2013-12-18 17:37 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-18 14:05 - 2013-12-18 14:05 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-12-18 14:05 - 2013-12-18 14:05 - 00000000 ____D C:\Windows\system32\Macromed
2013-12-18 14:03 - 2011-11-22 10:37 - 00316104 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2013-12-18 14:00 - 2013-12-18 14:00 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-18 13:59 - 2011-11-22 10:37 - 00330416 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1k62x64.sys
2013-12-18 13:59 - 2011-11-22 10:37 - 00092864 _____ (Intel Corporation) C:\Windows\system32\NicInstK.dll
2013-12-18 13:59 - 2011-11-22 10:37 - 00068264 _____ (Intel Corporation) C:\Windows\system32\e1kmsg.dll
2013-12-18 13:59 - 2011-11-22 10:37 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2013-12-18 13:59 - 2011-11-22 10:37 - 00003143 _____ C:\Windows\system32\e1k62x64.din
2013-12-18 13:32 - 2013-12-27 13:40 - 00001663 _____ C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-18 13:31 - 2013-12-27 17:20 - 00000000 ___RD C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-18 13:31 - 2013-12-27 13:40 - 00000000 ____D C:\Users\Nora
2013-12-18 13:31 - 2013-12-18 15:27 - 00000000 ___RD C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-18 13:31 - 2013-12-18 13:31 - 00000159 _____ C:\lang.txt
2013-12-18 13:31 - 2013-12-18 13:31 - 00000020 ___SH C:\Users\Nora\ntuser.ini
2013-12-18 13:31 - 2013-12-18 13:31 - 00000012 _____ C:\Windows\SysWOW64\Drivers\10CF_FUJITSU_FTS_ESPRIMO 9900   _RC_FUJITSU     _D2924-A1_Version 6.00 R1.20.2924.A1_FSC - 60000_6.00 R1.20.2924.A1   _Standard-VGA-Grafikkarte.MRK
2013-12-18 13:31 - 2013-12-18 13:31 - 00000012 _____ C:\Windows\system32\Drivers\10CF_FUJITSU_FTS_ESPRIMO 9900   _RC_FUJITSU     _D2924-A1_Version 6.00 R1.20.2924.A1_FSC - 60000_6.00 R1.20.2924.A1   _Standard-VGA-Grafikkarte.MRK
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Vorlagen
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Startmenü
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Netzwerkumgebung
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Lokale Einstellungen
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Eigene Dateien
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Druckumgebung
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Documents\Eigene Musik
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Documents\Eigene Bilder
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\AppData\Local\Verlauf
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\AppData\Local\Anwendungsdaten
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Anwendungsdaten
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 ____D C:\Users\Nora\AppData\Local\VirtualStore
2013-12-18 13:31 - 2010-11-21 04:23 - 00383786 __RSH C:\bootmgr
2013-12-18 13:31 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-18 13:31 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Programme
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 __SHD C:\Recovery
2013-12-18 13:26 - 2013-12-27 18:16 - 01425909 _____ C:\Windows\WindowsUpdate.log
2013-12-18 13:25 - 2013-12-18 13:25 - 00001355 _____ C:\Windows\TSSysprep.log
2013-12-18 13:25 - 2013-12-18 13:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2013-12-18 13:23 - 2013-12-18 13:23 - 00000000 ____D C:\Windows\CSC

==================== One Month Modified Files and Folders =======

2013-12-27 18:25 - 2013-12-27 18:24 - 00009724 _____ C:\Users\Nora\Downloads\FRST.txt
2013-12-27 18:24 - 2013-12-27 18:24 - 00000000 ____D C:\FRST
2013-12-27 18:22 - 2013-12-27 18:22 - 01930746 _____ (Farbar) C:\Users\Nora\Downloads\FRST64.exe
2013-12-27 18:20 - 2009-07-14 05:45 - 00021088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-27 18:20 - 2009-07-14 05:45 - 00021088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-27 18:17 - 2013-12-18 22:21 - 00698688 _____ C:\Windows\system32\perfh007.dat
2013-12-27 18:17 - 2013-12-18 22:21 - 00148828 _____ C:\Windows\system32\perfc007.dat
2013-12-27 18:17 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-27 18:16 - 2013-12-18 13:26 - 01425909 _____ C:\Windows\WindowsUpdate.log
2013-12-27 18:12 - 2010-11-21 04:47 - 00252048 _____ C:\Windows\PFRO.log
2013-12-27 18:12 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-27 18:12 - 2009-07-14 05:51 - 00030007 _____ C:\Windows\setupact.log
2013-12-27 17:20 - 2013-12-27 13:41 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-12-27 17:20 - 2013-12-27 13:40 - 00000000 ____D C:\Users\Nora\AppData\Local\Mobogenie
2013-12-27 17:20 - 2013-12-18 13:31 - 00000000 ___RD C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-27 17:17 - 2013-12-27 15:07 - 00000000 ____D C:\ProgramData\Updater
2013-12-27 17:17 - 2013-12-27 15:07 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-27 17:17 - 2013-12-27 13:40 - 00000000 ____D C:\ProgramData\WPM
2013-12-27 17:16 - 2013-12-27 15:07 - 00000000 ____D C:\Program Files (x86)\AmiExt
2013-12-27 17:16 - 2013-12-27 13:40 - 00000205 _____ C:\Users\Nora\daemonprocess.txt
2013-12-27 17:15 - 2013-12-27 15:06 - 00000000 ____D C:\Users\Nora\AppData\Local\SwvUpdater
2013-12-27 17:12 - 2013-12-18 14:05 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-27 15:22 - 2013-12-27 15:22 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-27 15:22 - 2013-12-27 15:22 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Malwarebytes
2013-12-27 15:22 - 2013-12-27 15:22 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-27 15:22 - 2013-12-27 15:22 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-27 15:21 - 2013-12-27 15:21 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nora\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-27 15:18 - 2013-12-27 13:40 - 00001919 _____ C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2013-12-27 15:18 - 2013-12-27 13:40 - 00000000 ____D C:\Users\Nora\AppData\Local\genienext
2013-12-27 15:17 - 2013-12-27 13:41 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2013-12-27 15:07 - 2013-12-27 15:07 - 00000000 ____D C:\Program Files (x86)\Lightspark 0.5.3-git
2013-12-27 13:41 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-12-27 13:40 - 2013-12-27 13:40 - 00000000 ____D C:\Users\Nora\Documents\Mobogenie
2013-12-27 13:40 - 2013-12-27 13:40 - 00000000 ____D C:\Users\Nora\AppData\Local\cache
2013-12-27 13:40 - 2013-12-27 13:40 - 00000000 ____D C:\Users\Nora\.android
2013-12-27 13:40 - 2013-12-18 17:48 - 00001633 _____ C:\Users\Nora\Desktop\Internet Explorer.lnk
2013-12-27 13:40 - 2013-12-18 17:26 - 00001375 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-12-27 13:40 - 2013-12-18 13:32 - 00001663 _____ C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-27 13:40 - 2013-12-18 13:31 - 00000000 ____D C:\Users\Nora
2013-12-27 13:09 - 2013-12-27 13:09 - 00000989 _____ C:\Users\Public\Desktop\Winamp.lnk
2013-12-27 13:09 - 2013-12-27 13:08 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Winamp
2013-12-27 13:09 - 2013-12-27 13:08 - 00000000 ____D C:\Program Files (x86)\Winamp
2013-12-27 13:07 - 2013-12-27 13:06 - 12855384 _____ (Nullsoft, Inc.) C:\Users\Nora\Downloads\winamp5666_full_de-de.exe
2013-12-26 20:52 - 2013-12-26 19:50 - 00000000 ____D C:\Filme
2013-12-26 20:42 - 2013-12-26 20:42 - 00000000 ____D C:\Users\Nora\Documents\Originals
2013-12-26 20:42 - 2013-12-26 20:42 - 00000000 ____D C:\Users\Nora\Documents\My ooVoo
2013-12-26 20:42 - 2013-12-26 20:42 - 00000000 ____D C:\Users\Nora\Documents\Mathe
2013-12-26 20:42 - 2013-12-26 20:41 - 00000000 ____D C:\Users\Nora\Documents\java
2013-12-26 20:41 - 2013-12-26 20:41 - 00000000 ____D C:\Users\Nora\Documents\ICQ
2013-12-26 20:41 - 2013-12-26 20:41 - 00000000 ____D C:\Users\Nora\Documents\Geschichtsprotokolle
2013-12-26 20:41 - 2013-12-26 20:40 - 00000000 ____D C:\Users\Nora\Documents\Für Spanien
2013-12-26 20:14 - 2013-12-26 20:14 - 00000000 ____D C:\Users\Nora\Documents\DivX Movies
2013-12-26 20:14 - 2013-12-26 20:14 - 00000000 ____D C:\Users\Nora\Documents\Briefe
2013-12-26 20:14 - 2013-12-26 20:13 - 00000000 ____D C:\Users\Nora\Documents\Annik
2013-12-26 20:13 - 2013-12-26 20:12 - 00000000 ____D C:\Users\Nora\Documents\x
2013-12-26 20:11 - 2013-12-26 20:11 - 00000000 ____D C:\Users\Nora\Documents\Wand
2013-12-26 20:11 - 2013-12-26 20:07 - 00000000 ____D C:\Users\Nora\Documents\Von skype
2013-12-26 20:07 - 2013-12-26 20:06 - 00000000 ____D C:\Users\Nora\Documents\Unsinn
2013-12-26 20:02 - 2013-12-26 20:02 - 00000000 ____D C:\Users\Nora\Documents\Rezepte
2013-12-26 20:02 - 2013-12-26 20:02 - 00000000 ____D C:\Users\Nora\Documents\Praktikumsbericht
2013-12-26 19:58 - 2013-12-26 19:49 - 00000000 ____D C:\Users\Nora\Documents\Philips
2013-12-26 19:45 - 2013-12-26 19:45 - 00000000 ____D C:\Outlook
2013-12-26 19:44 - 2013-12-26 19:44 - 00002029 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-12-26 19:44 - 2013-12-26 19:44 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-12-26 19:44 - 2013-12-19 10:28 - 00000000 ____D C:\ProgramData\Adobe
2013-12-26 19:34 - 2013-12-26 19:35 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-26 19:34 - 2013-12-19 09:17 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-26 19:34 - 2013-12-19 09:17 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-26 19:34 - 2013-12-19 09:17 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-26 16:40 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-19 12:36 - 2013-12-19 11:11 - 00000000 ____D C:\Users\Nora\AppData\Roaming\vlc
2013-12-19 12:24 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-19 12:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-19 11:30 - 2013-12-19 11:30 - 01584728 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-19 11:15 - 2013-12-18 17:36 - 00000000 ____D C:\Users\Nora\AppData\Local\Adobe
2013-12-19 11:15 - 2013-12-18 14:06 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Adobe
2013-12-19 11:10 - 2013-12-19 11:10 - 00001076 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-12-19 11:10 - 2013-12-19 11:10 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-12-19 11:05 - 2013-12-19 11:05 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ACD Systems
2013-12-19 11:05 - 2013-12-19 11:05 - 00000000 ____D C:\Program Files (x86)\ACDSee32
2013-12-19 10:27 - 2013-12-19 10:27 - 00000000 ____D C:\ProgramData\FreePDF
2013-12-19 10:27 - 2013-12-19 10:27 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-12-19 10:27 - 2013-12-19 10:27 - 00000000 ____D C:\Program Files (x86)\FreePDF_XP
2013-12-19 10:27 - 2013-12-19 10:27 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-12-19 10:27 - 2013-12-19 10:27 - 00000000 ____D C:\InternetCache
2013-12-19 10:26 - 2013-12-19 10:26 - 00000000 ____D C:\ProgramData\APN
2013-12-19 09:23 - 2013-12-19 09:23 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Avira
2013-12-19 09:18 - 2013-12-19 09:18 - 00002076 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-19 09:18 - 2013-12-19 09:17 - 00000000 ____D C:\ProgramData\Avira
2013-12-19 09:17 - 2013-12-19 09:17 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ghostscript
2013-12-19 09:17 - 2013-12-19 09:17 - 00000000 ____D C:\Program Files\gs
2013-12-19 09:17 - 2013-12-19 09:17 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-19 09:17 - 2013-12-18 14:09 - 00000000 ____D C:\Install
2013-12-18 22:21 - 2013-12-18 22:21 - 00295922 _____ C:\Windows\system32\perfi007.dat
2013-12-18 22:21 - 2013-12-18 22:21 - 00038104 _____ C:\Windows\system32\perfd007.dat
2013-12-18 22:21 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-12-18 22:21 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\SysWOW64\de
2013-12-18 22:21 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\SysWOW64\0407
2013-12-18 22:21 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\system32\de
2013-12-18 22:21 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\system32\0407
2013-12-18 22:21 - 2009-07-14 06:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-12-18 22:21 - 2009-07-14 06:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-12-18 22:21 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2013-12-18 22:21 - 2009-07-14 05:45 - 00000000 ____D C:\Windows\Setup
2013-12-18 22:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\servicing
2013-12-18 17:58 - 2013-12-18 16:46 - 00015652 _____ C:\Windows\IE11_main.log
2013-12-18 17:55 - 2013-12-18 17:55 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-18 17:55 - 2013-12-18 17:55 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-18 17:55 - 2013-12-18 17:55 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-18 17:55 - 2013-12-18 17:55 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-18 17:55 - 2013-12-18 17:55 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-18 17:55 - 2013-12-18 17:55 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-18 17:55 - 2013-12-18 17:55 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-18 17:55 - 2013-12-18 17:55 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-18 17:55 - 2013-12-18 17:55 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-18 17:48 - 2013-12-18 14:53 - 00058016 _____ C:\Users\Nora\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-18 17:42 - 2013-12-18 17:42 - 00000000 ____D C:\Users\Nora\AppData\Local\Macromedia
2013-12-18 17:37 - 2013-12-18 14:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-18 17:37 - 2013-12-18 14:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-18 17:37 - 2013-12-18 14:05 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-18 17:26 - 2013-12-18 17:26 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Mozilla
2013-12-18 17:26 - 2013-12-18 17:26 - 00000000 ____D C:\Users\Nora\AppData\Local\Mozilla
2013-12-18 17:26 - 2013-12-18 17:26 - 00000000 ____D C:\ProgramData\Mozilla
2013-12-18 17:26 - 2013-12-18 17:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-18 17:26 - 2013-12-18 17:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-18 17:09 - 2013-12-18 17:09 - 00003532 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-12-18 17:09 - 2013-12-18 17:09 - 00001750 _____ C:\Users\Public\Desktop\Browserwahl.lnk
2013-12-18 17:09 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-12-18 17:08 - 2009-07-14 05:45 - 00275856 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-18 17:05 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-12-18 17:05 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-12-18 17:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-12-18 17:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-12-18 17:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\zh-HK
2013-12-18 17:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-12-18 17:05 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-18 16:48 - 2013-12-18 16:48 - 00000134 _____ C:\Users\Nora\Desktop\Internet Explorer Troubleshooting.url
2013-12-18 16:32 - 2013-12-18 16:24 - 00010741 _____ C:\Windows\IE10_main.log
2013-12-18 16:25 - 2013-12-18 16:25 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-12-18 16:25 - 2013-12-18 16:25 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-12-18 16:19 - 2013-12-18 16:16 - 00003987 _____ C:\Windows\IE9_main.log
2013-12-18 15:27 - 2013-12-18 13:31 - 00000000 ___RD C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-18 15:23 - 2010-11-21 08:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-12-18 15:23 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-12-18 15:23 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-12-18 15:23 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-12-18 15:23 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-12-18 15:23 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-12-18 15:23 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\winrm
2013-12-18 15:23 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\WCN
2013-12-18 15:23 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\slmgr
2013-12-18 15:23 - 2010-11-21 08:06 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2013-12-18 15:23 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\DigitalLocker
2013-12-18 15:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-12-18 15:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-12-18 15:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker
2013-12-18 15:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-12-18 15:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\com
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Setup
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\oobe
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\MUI
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\migwiz
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Dism
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\com
2013-12-18 15:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\IME
2013-12-18 15:14 - 2013-12-18 15:13 - 00000000 ____D C:\Windows\system32\MRT
2013-12-18 14:33 - 2013-12-18 14:33 - 00016282 _____ C:\Windows\system32\results.xml
2013-12-18 14:33 - 2013-12-18 14:33 - 00000000 ____D C:\ProgramData\Intel
2013-12-18 14:31 - 2013-12-18 14:31 - 00000000 ____D C:\Program Files\Common Files\Intel
2013-12-18 14:31 - 2013-12-18 14:21 - 00000000 ____D C:\Program Files (x86)\Intel
2013-12-18 14:30 - 2013-12-18 14:21 - 00000000 ____D C:\Intel
2013-12-18 14:20 - 2013-12-18 14:20 - 00002200 _____ C:\RHDSetup.log
2013-12-18 14:20 - 2013-12-18 14:20 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-18 14:20 - 2013-12-18 14:20 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-12-18 14:20 - 2013-12-18 14:20 - 00000000 ____D C:\Program Files\Realtek
2013-12-18 14:20 - 2013-12-18 14:20 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-12-18 14:20 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\restore
2013-12-18 14:10 - 2013-12-18 14:10 - 00000000 ____D C:\ProgramData\Fujitsu
2013-12-18 14:06 - 2013-12-18 14:06 - 00000000 ____D C:\Users\Nora\AppData\Roaming\Macromedia
2013-12-18 14:05 - 2013-12-18 14:05 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-12-18 14:05 - 2013-12-18 14:05 - 00000000 ____D C:\Windows\system32\Macromed
2013-12-18 14:00 - 2013-12-18 14:00 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-18 13:31 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\panther
2013-12-18 13:31 - 2013-12-18 13:31 - 00000159 _____ C:\lang.txt
2013-12-18 13:31 - 2013-12-18 13:31 - 00000020 ___SH C:\Users\Nora\ntuser.ini
2013-12-18 13:31 - 2013-12-18 13:31 - 00000012 _____ C:\Windows\SysWOW64\Drivers\10CF_FUJITSU_FTS_ESPRIMO 9900   _RC_FUJITSU     _D2924-A1_Version 6.00 R1.20.2924.A1_FSC - 60000_6.00 R1.20.2924.A1   _Standard-VGA-Grafikkarte.MRK
2013-12-18 13:31 - 2013-12-18 13:31 - 00000012 _____ C:\Windows\system32\Drivers\10CF_FUJITSU_FTS_ESPRIMO 9900   _RC_FUJITSU     _D2924-A1_Version 6.00 R1.20.2924.A1_FSC - 60000_6.00 R1.20.2924.A1   _Standard-VGA-Grafikkarte.MRK
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Vorlagen
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Startmenü
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Netzwerkumgebung
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Lokale Einstellungen
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Eigene Dateien
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Druckumgebung
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Documents\Eigene Musik
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Documents\Eigene Bilder
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\AppData\Local\Verlauf
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\AppData\Local\Anwendungsdaten
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 _SHDL C:\Users\Nora\Anwendungsdaten
2013-12-18 13:31 - 2013-12-18 13:31 - 00000000 ____D C:\Users\Nora\AppData\Local\VirtualStore
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Programme
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-12-18 13:30 - 2013-12-18 13:30 - 00000000 __SHD C:\Recovery
2013-12-18 13:30 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-18 13:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Recovery
2013-12-18 13:30 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT
2013-12-18 13:25 - 2013-12-18 13:25 - 00001355 _____ C:\Windows\TSSysprep.log
2013-12-18 13:25 - 2013-12-18 13:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2013-12-18 13:25 - 2009-07-14 05:46 - 00002790 _____ C:\Windows\DtcInstall.log
2013-12-18 13:23 - 2013-12-18 13:23 - 00000000 ____D C:\Windows\CSC
2013-12-01 14:42 - 2013-12-18 15:13 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\Nora\AppData\Local\Temp\avgnt.exe
C:\Users\Nora\AppData\Local\Temp\BackupSetup.exe
C:\Users\Nora\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Nora\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-26 16:33

==================== End Of Log ============================
         

Addition TXT:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-12-2013 01
Ran by Nora at 2013-12-27 18:25:43
Running from C:\Users\Nora\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

ACDSee 32 (x32)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)
Avira Free Antivirus (x32 Version: 14.0.2.286)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2949)
FreePDF (Remove only) (x32)
GPL Ghostscript 8.71
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Network Connections Drivers (Version: 16.1)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2342)
Lightspark 0.5.3-git (x32 Version: 0.5.3-git)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)
Mozilla Maintenance Service (x32 Version: 26.0)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6428)
RedMon - Redirection Port Monitor
Updater (x32 Version: 2.6.53)
VLC media player 2.0.0 (x32 Version: 2.0.0)
Winamp (x32 Version: 5.666 )

==================== Restore Points  =========================

18-12-2013 13:39:59 Windows Update
18-12-2013 13:49:43 Windows Update
18-12-2013 14:08:56 Windows Update
18-12-2013 15:14:05 Windows Update
18-12-2013 16:53:14 Windows Update
19-12-2013 07:23:20 Windows Update
19-12-2013 09:27:08 Gerätetreiber-Paketinstallation: freepdfxp.de Drucker
19-12-2013 09:46:45 Installed Adobe Reader X - Deutsch.
19-12-2013 10:25:24 Windows Update
19-12-2013 13:21:06 Windows Update
26-12-2013 15:40:07 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {6F8510EE-3A3A-4DEC-AEFB-D6C70071F5F7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-18] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2011-04-07 14:00 - 2011-04-07 14:00 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-12-19 09:17 - 2013-07-18 08:02 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-12-18 17:26 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-12-18 17:37 - 2013-12-18 17:37 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/27/2013 06:14:23 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/27/2013 05:19:40 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/27/2013 01:13:35 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: winamp.exe, Version: 5.6.6.3516, Zeitstempel: 0x52aa753e
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.6161, Zeitstempel: 0x4dace5b9
Ausnahmecode: 0xc0000417
Fehleroffset: 0x00066812
ID des fehlerhaften Prozesses: 0x5dc
Startzeit der fehlerhaften Anwendung: 0xwinamp.exe0
Pfad der fehlerhaften Anwendung: winamp.exe1
Pfad des fehlerhaften Moduls: winamp.exe2
Berichtskennung: winamp.exe3

Error: (12/27/2013 00:34:13 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/26/2013 07:40:15 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/26/2013 04:05:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/19/2013 00:38:57 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/19/2013 00:35:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/19/2013 00:25:30 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/19/2013 11:14:54 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (12/27/2013 05:18:38 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/27/2013 05:18:38 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (12/27/2013 03:15:43 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (12/27/2013 03:11:17 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (12/26/2013 07:40:32 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.

Error: (12/26/2013 04:02:31 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007045b

Error: (12/26/2013 04:00:50 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007045b

Error: (12/19/2013 02:21:33 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (12/19/2013 00:34:58 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005

Error: (12/19/2013 11:02:23 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR6 gefunden.


Microsoft Office Sessions:
=========================
Error: (12/27/2013 06:14:23 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/27/2013 05:19:40 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/27/2013 01:13:35 PM) (Source: Application Error)(User: )
Description: winamp.exe5.6.6.351652aa753eMSVCR90.dll9.0.30729.61614dace5b9c0000417000668125dc01cf02fce2d79115C:\Program Files (x86)\Winamp\winamp.exeC:\Program Files (x86)\Winamp\Microsoft.VC90.CRT\MSVCR90.dll4f19718b-6ef0-11e3-bbef-001999929ed2

Error: (12/27/2013 00:34:13 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/26/2013 07:40:15 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/26/2013 04:05:12 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/19/2013 00:38:57 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/19/2013 00:35:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/19/2013 00:25:30 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/19/2013 11:14:54 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 3895.23 MB
Available physical RAM: 2151.15 MB
Total Pagefile: 7788.65 MB
Available Pagefile: 5635 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:297.99 GB) (Free:80.95 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 2EDF317F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Ich hoffe auf Eure Hilfe.


Marcel

Hat sich erledigt!

Hi,

Hat sich erledigt!

also brauchst Du keine Hilfe mehr?

Genau, hab's selbst hin bekommen, trotzdem vielen Dank

ok