|
Plagegeister aller Art und deren Bekämpfung: Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten ModusWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
07.01.2014, 17:42 | #1 |
| Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus Hallöchen, und ein gesundes neues Jahr an alle, Ich habe folgende Herausforderung und komme nicht weiter. Lenovo all in one mit Windows 7 Home Premium. Nachdem meine Tochter den PC längere Zeit nicht genutzt hat, habe ich ihn vor kurzem wieder ans Netz gebracht. Bevor ich den PC angeschlossen habe, wurde von mir über das Lenovo Rescue Center der PC zurück gesetzt. Danach habe ich ihn eingerichtet, die Windows Updates (134) gedownloaded und installiert. Genutzt und installiert wurde auch Avira Antivir, Mozilla Firefox, FormatFactory und der Free Youtube to MP3 Konverter. Nach dem erforderlichen Neustart, läuft Windows normal an, bis zu dem Punkt wo der Monitor mir den Desktop zeigen sollte, dies geschieht allerdings nicht. Ein Zugriff ist seither nur noch im abgesicherten Modus möglich. Eine Rücksetzung auf einen Wiederherstellungspunkt lässt das System nicht zu "der Computerschutz ist deaktiviert". Eine Neu Installation des Betriebssystems über das Rescue Center ist im abgesicherten Modus nicht möglich Fehlermeldung: "Treiberaktualisierung fehlgeschlagen". Auch die Wiederherstellung über die F5 Taste schlägt fehl. Ich weiß nicht mehr weiter, kann jemand von euch so nett sein und mich unterstützen? Danke Gruß Mike |
08.01.2014, 07:35 | #2 |
/// the machine /// TB-Ausbilder | Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
08.01.2014, 10:30 | #3 |
| Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus Hi Schrauber,
__________________Danke Anbei die Logs FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-01-2014 Ran by JUPA (administrator) on JUPA-PC on 08-01-2014 10:23:18 Running from C:\Users\JUPA\Desktop Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Safe Mode (with Networking) ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [] - [x] HKLM\...\Run: [Verigesture] - C:\Program Files (x86)\Lenovo\Lenovo VeriTouch\Verigesture Dashboard.exe [1199504 2009-11-23] (Lenovo) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2009-12-03] (Realtek Semiconductor) HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [jmekey] - C:\Program Files (x86)\jmesoft\hotkey.exe [114688 2009-07-16] (JME) HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-04] (CyberLink) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG) HKLM\...\Runonce: [GrpConv] - grpconv -o Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\Default\...\RunOnce: [WLStart] - C:\Program Files (x86)\Windows Live\Installer\wlstart.exe [786760 2009-07-26] (Microsoft Corporation) HKU\Default User\...\RunOnce: [WLStart] - C:\Program Files (x86)\Windows Live\Installer\wlstart.exe [786760 2009-07-26] (Microsoft Corporation) AppInit_DLLs: C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1317152 2013-12-16] (Conduit) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll C:\Windows\SysWOW64\nvinit.dll [202600 2012-10-25] (NVIDIA Corporation) Lsa: [Notification Packages] scecli OctopusCredentialPlugin ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/ StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3318001&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP9D0B442A-A573-4983-88B5-72C624F4A7B5&q={searchTerms}&SSPV= SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3318001&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP9D0B442A-A573-4983-88B5-72C624F4A7B5&q={searchTerms}&SSPV= BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.) BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll No File BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) Toolbar: HKLM-x32 - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\JUPA\AppData\Roaming\Mozilla\Firefox\Profiles\fru8xqns.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF SearchPlugin: C:\Users\JUPA\AppData\Roaming\Mozilla\Firefox\Profiles\fru8xqns.default\searchplugins\conduit-search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\JUPA\AppData\Roaming\Mozilla\Firefox\Profiles\fru8xqns.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ ==================== Services (Whitelisted) ================= S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG) S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG) S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2251552 2013-12-16] (Conduit) S3 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29263712 2008-11-24] (Microsoft Corporation) S2 clr_optimization_v4.0.30319_32; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [x] S2 clr_optimization_v4.0.30319_64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] ==================== Drivers (Whitelisted) ==================== S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG) S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG) S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG) S2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG) R3 FEIExpress; C:\Windows\System32\DRIVERS\fei62x64.sys [187392 2009-10-02] (Intel Corporation) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-08 10:23 - 2014-01-08 10:23 - 00007832 _____ C:\Users\JUPA\Desktop\FRST.txt 2014-01-08 10:23 - 2014-01-08 10:23 - 00000000 ____D C:\FRST 2014-01-08 10:21 - 2014-01-08 10:21 - 01931762 _____ (Farbar) C:\Users\JUPA\Desktop\FRST64.exe 2014-01-07 17:14 - 2014-01-07 17:14 - 00014716 _____ C:\Users\JUPA\Desktop\log.xml 2014-01-07 16:48 - 2014-01-07 17:41 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Nico Mak Computing 2014-01-07 16:47 - 2014-01-07 16:48 - 04892480 _____ (WinZip International LLC ) C:\Users\JUPA\Downloads\wzmp_8.exe 2014-01-06 19:21 - 2014-01-06 19:23 - 48524296 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\NetFx20SP2_x64.exe 2014-01-06 19:11 - 2014-01-06 19:11 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1).zip 2014-01-06 19:11 - 2014-01-06 19:11 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1) 2014-01-06 19:06 - 2014-01-06 19:06 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool.zip 2014-01-06 19:06 - 2014-01-06 19:06 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool 2014-01-05 18:38 - 2014-01-07 19:45 - 00000000 ____D C:\Users\JUPA\dwhelper 2014-01-05 17:54 - 2014-01-05 17:54 - 00000134 _____ C:\Users\JUPA\Desktop\Microsoft Fix*it.url 2014-01-05 14:39 - 2014-01-05 14:39 - 00000000 ____D C:\Users\JUPA\Documents\FormatFactory 2014-01-05 13:59 - 2014-01-05 13:59 - 00347816 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\MicrosoftFixit.wu.LB.63312353662502285.1.1.Run.exe 2014-01-05 11:03 - 2011-02-19 07:37 - 01135104 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-01-05 10:30 - 2014-01-05 10:30 - 00000000 ____D C:\Users\JUPA\Documents\InterVideo 2014-01-05 09:47 - 2014-01-05 09:47 - 00001202 _____ C:\Users\JUPA\Desktop\Format Factory.lnk 2014-01-05 09:47 - 2014-01-05 09:47 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-05 09:45 - 2014-01-05 09:45 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-05 09:38 - 2014-01-05 09:42 - 61746584 _____ (Free Time) C:\Users\JUPA\Downloads\FFSetup3.2.1.0.exe 2014-01-05 09:33 - 2014-01-05 09:33 - 00000000 ____D C:\Users\JUPA\AppData\Local\SearchProtect 2014-01-05 09:33 - 2014-01-05 09:33 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2014-01-05 09:31 - 2014-01-05 09:31 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-01-05 09:30 - 2014-01-05 09:30 - 00001536 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2014-01-05 09:30 - 2014-01-05 09:30 - 00001243 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-05 09:29 - 2014-01-05 09:31 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\DVDVideoSoft 2014-01-05 09:29 - 2014-01-05 09:30 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2014-01-05 09:29 - 2014-01-05 09:29 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\OpenCandy 2014-01-05 09:18 - 2014-01-05 09:20 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\JUPA\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe 2014-01-05 05:09 - 2010-09-14 07:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2014-01-05 05:09 - 2010-09-14 07:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll 2014-01-05 04:03 - 2012-07-26 05:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-01-05 04:03 - 2012-07-26 05:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-01-05 04:03 - 2012-07-26 03:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2014-01-05 04:03 - 2012-06-02 15:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2014-01-05 03:27 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-05 03:17 - 2014-01-05 03:23 - 00004599 _____ C:\Windows\IE9_main.log 2014-01-05 02:52 - 2012-12-16 17:52 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-01-05 02:52 - 2012-12-16 15:40 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-01-05 02:52 - 2012-12-16 15:25 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-01-05 02:52 - 2012-12-16 15:25 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-01-05 02:50 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-01-05 02:50 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-01-05 02:50 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-01-05 02:50 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-01-05 02:32 - 2012-10-25 20:02 - 00060776 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-01-05 02:32 - 2012-10-25 20:02 - 00052584 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-01-05 02:30 - 2014-01-05 02:30 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2014-01-05 02:26 - 2014-01-05 02:28 - 00000000 ____D C:\Windows\system32\MRT 2014-01-05 02:26 - 2013-12-01 14:42 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-05 02:25 - 2012-03-01 07:54 - 00022896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2014-01-05 02:25 - 2012-03-01 07:40 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-01-05 02:25 - 2012-03-01 07:35 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2014-01-05 02:25 - 2012-03-01 06:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-01-05 02:25 - 2012-03-01 06:40 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2014-01-05 02:20 - 2014-01-05 11:05 - 00260606 _____ C:\Windows\msxml4-KB2758694-enu.LOG 2014-01-05 02:19 - 2010-03-04 05:40 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-01-05 02:19 - 2010-03-04 05:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2014-01-05 02:16 - 2013-02-12 16:42 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-01-05 02:16 - 2013-02-12 16:37 - 03138048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-01-05 02:16 - 2013-02-12 16:31 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2014-01-05 02:16 - 2013-02-12 16:13 - 02691072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-01-05 02:16 - 2013-02-12 16:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2014-01-05 02:16 - 2013-02-12 14:59 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-01-05 02:16 - 2012-12-07 06:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-01-05 02:16 - 2012-12-07 06:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-01-05 02:16 - 2012-12-07 06:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2014-01-05 02:16 - 2012-12-07 05:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2014-01-05 02:16 - 2012-12-07 04:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2014-01-05 02:16 - 2011-03-11 07:19 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2014-01-05 02:16 - 2011-03-11 07:19 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2014-01-05 02:16 - 2011-03-11 06:40 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll 2014-01-05 02:16 - 2011-03-11 06:40 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll 2014-01-05 02:16 - 2010-12-23 07:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2014-01-05 02:16 - 2010-12-23 07:07 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2014-01-05 02:16 - 2010-12-23 07:02 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2014-01-05 02:16 - 2010-12-23 06:28 - 00850432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll 2014-01-05 02:16 - 2010-12-23 06:28 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll 2014-01-05 02:16 - 2010-12-23 06:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax 2014-01-05 02:13 - 2012-06-09 06:30 - 14165504 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-01-05 02:13 - 2012-06-09 05:46 - 12868608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-01-05 02:13 - 2012-01-04 10:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2014-01-05 02:13 - 2012-01-04 10:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2014-01-05 02:13 - 2011-04-27 03:57 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2014-01-05 02:12 - 2013-04-12 15:36 - 01653096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-01-05 02:12 - 2013-03-01 04:32 - 03150848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-05 02:12 - 2012-11-09 06:34 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-01-05 02:12 - 2012-11-09 05:49 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2014-01-05 02:12 - 2012-11-02 06:30 - 02001408 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-01-05 02:12 - 2012-11-02 06:30 - 01880064 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-01-05 02:12 - 2012-11-02 05:50 - 01388544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-01-05 02:12 - 2012-11-02 05:50 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 01837568 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 01074176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-01-05 02:12 - 2011-11-17 08:12 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2014-01-05 02:12 - 2011-11-17 06:39 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2014-01-05 02:12 - 2011-05-04 06:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2014-01-05 02:12 - 2011-05-04 06:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2014-01-05 02:12 - 2011-05-04 06:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2014-01-05 02:12 - 2011-05-04 06:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2014-01-05 02:12 - 2011-05-04 05:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2014-01-05 02:12 - 2011-05-04 05:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2014-01-05 02:12 - 2011-05-04 05:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2014-01-05 02:12 - 2011-05-04 05:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2014-01-05 02:12 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-01-05 02:12 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-01-05 02:12 - 2011-03-12 13:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-01-05 02:12 - 2011-03-12 12:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2014-01-05 02:12 - 2010-12-21 07:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2014-01-05 02:12 - 2010-12-21 07:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2014-01-05 02:12 - 2010-12-21 07:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll 2014-01-05 02:12 - 2010-12-21 06:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-01-05 02:12 - 2010-11-02 06:18 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2014-01-05 02:12 - 2010-11-02 06:17 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2014-01-05 02:12 - 2010-11-02 06:17 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2014-01-05 02:12 - 2010-11-02 06:16 - 01114624 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-01-05 02:12 - 2010-11-02 06:10 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2014-01-05 02:12 - 2010-11-02 06:10 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2014-01-05 02:12 - 2010-11-02 05:40 - 00496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll 2014-01-05 02:12 - 2010-11-02 05:40 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll 2014-01-05 02:12 - 2010-11-02 05:34 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe 2014-01-05 02:12 - 2010-11-02 05:34 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe 2014-01-05 02:12 - 2010-05-05 08:37 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2014-01-05 02:12 - 2010-05-05 07:46 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2014-01-05 02:11 - 2012-11-09 06:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-01-05 02:11 - 2012-11-09 05:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-01-05 02:11 - 2012-01-03 07:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2014-01-05 02:11 - 2012-01-03 06:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2014-01-05 02:11 - 2011-10-26 06:22 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2014-01-05 02:11 - 2011-10-26 06:22 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-01-05 02:11 - 2011-10-26 05:28 - 01328640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2014-01-05 02:11 - 2011-10-26 05:28 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-01-05 02:11 - 2011-07-09 03:44 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2014-01-05 02:11 - 2011-06-16 06:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2014-01-05 02:11 - 2011-06-16 05:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2014-01-05 02:11 - 2011-05-04 03:51 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-01-05 02:11 - 2011-05-04 03:51 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-01-05 02:11 - 2011-04-22 21:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-01-05 02:11 - 2011-02-24 07:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-01-05 02:11 - 2011-02-24 06:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-01-05 02:11 - 2010-08-26 06:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2014-01-05 02:11 - 2010-08-26 05:39 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll 2014-01-05 02:11 - 2010-08-21 07:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-01-05 02:11 - 2010-08-21 06:33 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-01-05 02:10 - 2013-01-04 06:41 - 01893224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-01-05 02:10 - 2013-01-04 06:40 - 00287576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-01-05 02:10 - 2013-01-04 06:30 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-01-05 02:10 - 2013-01-04 06:30 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-01-05 02:10 - 2012-08-11 01:53 - 00714752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-01-05 02:10 - 2012-08-11 00:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-01-05 02:10 - 2012-06-02 06:38 - 00152432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-01-05 02:10 - 2012-06-02 06:38 - 00095088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-01-05 02:10 - 2012-06-02 06:37 - 00459216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-01-05 02:10 - 2012-06-02 06:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-01-05 02:10 - 2012-06-02 05:48 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-01-05 02:10 - 2012-06-02 05:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-01-05 02:10 - 2012-06-02 05:42 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-01-05 02:10 - 2012-04-28 04:50 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-01-05 02:10 - 2012-04-26 06:34 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2014-01-05 02:10 - 2012-04-26 06:34 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2014-01-05 02:10 - 2012-04-26 06:28 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2014-01-05 02:10 - 2012-03-17 08:55 - 00075632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2014-01-05 02:10 - 2011-12-28 04:59 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-01-05 02:10 - 2011-11-17 08:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-01-05 02:10 - 2011-11-17 08:11 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-01-05 02:10 - 2011-11-17 08:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-01-05 02:10 - 2011-11-17 08:08 - 01446912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-01-05 02:10 - 2011-11-17 08:05 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-01-05 02:10 - 2011-04-29 04:13 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-01-05 02:10 - 2011-04-29 04:12 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-01-05 02:10 - 2011-04-29 04:12 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-01-05 02:10 - 2011-01-26 07:53 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-01-05 02:10 - 2011-01-26 07:53 - 00265088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-01-05 02:10 - 2011-01-26 07:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-01-05 02:10 - 2010-11-02 06:18 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2014-01-05 02:10 - 2010-11-02 05:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll 2014-01-05 02:10 - 2010-08-31 05:32 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll 2014-01-05 02:10 - 2010-08-31 05:32 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll 2014-01-05 02:10 - 2010-06-26 06:31 - 01863680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2014-01-05 02:10 - 2010-06-26 06:14 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2014-01-05 02:10 - 2010-05-23 11:15 - 01619456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-01-05 02:10 - 2010-05-23 11:11 - 03181568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-01-05 02:10 - 2010-05-23 11:11 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2014-01-05 02:10 - 2010-05-23 09:37 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-01-05 02:10 - 2010-05-23 09:35 - 04068864 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-01-05 02:10 - 2010-05-23 09:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2014-01-05 02:10 - 2010-05-23 09:35 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-01-05 02:10 - 2010-03-03 00:24 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe 2014-01-05 02:10 - 2010-03-03 00:24 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll 2014-01-05 02:10 - 2010-03-03 00:23 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2014-01-05 02:10 - 2010-03-03 00:23 - 00109928 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2014-01-05 02:09 - 2013-02-12 15:02 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-01-05 02:09 - 2013-01-04 06:37 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-01-05 02:09 - 2013-01-04 06:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-01-05 02:09 - 2013-01-04 06:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-01-05 02:09 - 2013-01-04 06:36 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-01-05 02:09 - 2013-01-04 06:33 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:51 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-01-05 02:09 - 2013-01-04 05:51 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-01-05 02:09 - 2013-01-04 05:51 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 04:19 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-01-05 02:09 - 2013-01-04 03:48 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-01-05 02:09 - 2013-01-04 03:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-01-05 02:09 - 2013-01-04 03:48 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-01-05 02:09 - 2013-01-04 03:48 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-01-05 02:09 - 2013-01-04 03:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 03:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 03:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 03:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-01-05 02:09 - 2012-11-22 11:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-01-05 02:09 - 2012-11-22 10:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-01-05 02:09 - 2012-11-20 06:55 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-01-05 02:09 - 2012-11-20 06:10 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-01-05 02:09 - 2012-11-02 06:27 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-01-05 02:09 - 2012-11-02 05:48 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2014-01-05 02:09 - 2012-09-25 23:39 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2014-01-05 02:09 - 2012-09-25 22:55 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2014-01-05 02:09 - 2012-09-06 18:38 - 00295792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-01-05 02:09 - 2012-08-24 19:05 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-01-05 02:09 - 2012-08-24 18:10 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-01-05 02:09 - 2012-08-02 18:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-01-05 02:09 - 2012-08-02 18:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-01-05 02:09 - 2012-05-02 06:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-01-05 02:09 - 2012-04-07 13:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-01-05 02:09 - 2012-04-07 12:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-01-05 02:09 - 2011-08-17 06:32 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2014-01-05 02:09 - 2011-08-17 06:27 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2014-01-05 02:09 - 2011-08-17 06:27 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2014-01-05 02:09 - 2011-08-17 06:27 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2014-01-05 02:09 - 2011-08-17 06:27 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2014-01-05 02:09 - 2011-08-17 05:26 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2014-01-05 02:09 - 2011-08-17 05:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSNP.ax 2014-01-05 02:09 - 2011-08-17 05:22 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2014-01-05 02:09 - 2011-08-17 05:22 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mpeg2Data.ax 2014-01-05 02:09 - 2011-08-17 05:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSDvbNP.ax 2014-01-05 02:09 - 2011-03-03 07:17 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2014-01-05 02:09 - 2011-03-03 07:17 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2014-01-05 02:09 - 2011-03-03 07:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2014-01-05 02:09 - 2011-03-03 06:29 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2014-01-05 02:09 - 2011-03-03 06:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe 2014-01-05 02:09 - 2011-02-05 13:41 - 00640896 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2014-01-05 02:09 - 2011-02-05 13:41 - 00556928 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2014-01-05 02:09 - 2011-02-05 13:41 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2014-01-05 02:09 - 2011-02-05 13:41 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2014-01-05 02:09 - 2011-02-05 13:41 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2014-01-05 02:09 - 2011-02-05 13:39 - 00603976 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2014-01-05 02:09 - 2011-02-05 13:39 - 00518160 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2014-01-05 02:09 - 2010-08-21 07:38 - 01024512 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2014-01-05 02:09 - 2010-08-21 07:29 - 00558592 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-01-05 02:09 - 2010-08-21 06:36 - 00738816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll 2014-01-05 01:45 - 2011-05-24 12:21 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2014-01-05 01:45 - 2011-05-24 11:34 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2014-01-05 01:45 - 2011-05-24 11:34 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2014-01-05 01:45 - 2011-05-24 11:34 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2014-01-05 01:45 - 2011-05-24 11:32 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2014-01-05 01:45 - 2010-12-18 07:08 - 01097216 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-01-05 01:45 - 2010-12-18 06:26 - 01034240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-01-05 01:44 - 2013-01-24 06:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-01-05 01:44 - 2012-07-04 23:04 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2014-01-05 01:44 - 2012-07-04 23:01 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2014-01-05 01:44 - 2012-07-04 23:01 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2014-01-05 01:44 - 2012-07-04 22:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2014-01-05 01:44 - 2012-07-04 22:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2014-01-05 01:44 - 2012-05-05 09:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-01-05 01:44 - 2012-05-05 08:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2014-01-05 01:44 - 2011-12-16 09:42 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2014-01-05 01:44 - 2011-12-16 08:59 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2014-01-05 01:44 - 2011-05-03 06:21 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2014-01-05 01:44 - 2011-05-03 05:50 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2014-01-05 01:44 - 2011-02-23 06:15 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2014-01-05 01:44 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2014-01-05 01:44 - 2011-02-18 06:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2014-01-05 01:44 - 2011-02-12 07:14 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2014-01-05 01:44 - 2010-10-16 06:23 - 00112000 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-01-05 01:44 - 2010-09-01 06:21 - 14627840 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-01-05 01:44 - 2010-09-01 06:12 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-01-05 01:44 - 2010-09-01 05:29 - 11406848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-01-05 01:44 - 2010-09-01 05:23 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-01-05 01:43 - 2013-03-19 07:19 - 05497688 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-01-05 01:43 - 2013-03-19 06:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-01-05 01:43 - 2013-03-19 06:06 - 03958120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-01-05 01:43 - 2013-03-19 06:06 - 03902312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-01-05 01:43 - 2013-03-19 05:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-01-05 01:43 - 2013-03-19 04:19 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-01-05 01:43 - 2012-05-14 06:20 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-01-05 01:43 - 2011-11-17 08:14 - 01739160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-01-05 01:43 - 2011-11-17 06:41 - 01292592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-01-05 01:43 - 2011-10-15 07:25 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2014-01-05 01:43 - 2011-10-15 06:48 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2014-01-05 01:43 - 2011-08-27 06:40 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-01-05 01:43 - 2011-08-27 06:40 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2014-01-05 01:43 - 2011-08-27 05:43 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-01-05 01:43 - 2011-08-27 05:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2014-01-05 01:42 - 2012-06-02 06:25 - 01462784 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-01-05 01:42 - 2012-06-02 06:25 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-01-05 01:42 - 2012-06-02 06:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-01-05 01:42 - 2012-06-02 05:45 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-01-05 01:42 - 2012-06-02 05:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2014-01-05 01:42 - 2012-06-02 05:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2014-01-05 01:42 - 2011-11-19 16:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-01-05 01:42 - 2011-11-19 15:06 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-01-05 01:42 - 2010-10-16 06:17 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2014-01-05 01:42 - 2010-10-16 05:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll 2014-01-05 01:42 - 2010-08-27 07:14 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2014-01-05 01:42 - 2010-08-27 06:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll 2014-01-05 01:35 - 2012-02-15 07:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-01-05 01:35 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-01-05 01:35 - 2012-02-15 05:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-01-05 01:33 - 2014-01-07 16:50 - 00000000 ____D C:\Users\JUPA\Erst 2014-01-04 23:34 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-01-04 23:34 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-01-04 23:34 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-01-04 23:34 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-01-04 23:33 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-01-04 23:33 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-01-04 23:33 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-01-04 23:33 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-01-04 23:33 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-01-04 23:12 - 2014-01-04 23:12 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm(1).zip 2014-01-04 23:08 - 2013-08-27 09:35 - 00778019 ____R C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx+sm.xpi 2014-01-04 23:07 - 2014-01-04 23:07 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm.zip 2014-01-04 21:06 - 2014-01-04 21:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-04 21:06 - 2014-01-04 21:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\system32\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Macromedia 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Adobe 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Local\Macromedia 2014-01-04 20:14 - 2014-01-04 20:41 - 00000000 ____D C:\Windows\pss 2014-01-04 19:13 - 2014-01-04 19:13 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Avira 2014-01-04 19:12 - 2014-01-04 19:14 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Mozilla 2014-01-04 19:12 - 2014-01-04 19:14 - 00000000 ____D C:\Users\JUPA\AppData\Local\Mozilla 2014-01-04 19:11 - 2014-01-05 09:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-04 19:11 - 2014-01-04 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2014-01-04 19:11 - 2014-01-04 19:11 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\ProgramData\Mozilla 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\ProgramData\Avira 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\Program Files (x86)\Avira 2014-01-04 19:11 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-01-04 19:11 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-01-04 19:11 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-01-04 19:11 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-01-04 18:51 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Local\Adobe 2014-01-04 18:47 - 2014-01-05 09:30 - 00112176 _____ C:\Users\JUPA\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-04 18:47 - 2014-01-05 08:59 - 00001443 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-04 18:47 - 2014-01-05 08:59 - 00001409 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-04 18:47 - 2014-01-05 08:59 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-04 18:47 - 2014-01-05 08:59 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-04 18:47 - 2014-01-04 18:47 - 00000000 ____D C:\Users\JUPA\AppData\Local\Power2Go 2014-01-04 18:46 - 2014-01-07 20:54 - 00002288 _____ C:\Users\JUPA\Desktop\Lenovo Rescue System.lnk 2014-01-04 18:46 - 2014-01-05 18:38 - 00000000 ____D C:\Users\JUPA 2014-01-04 18:46 - 2014-01-04 18:47 - 00000000 ____D C:\Users\JUPA\AppData\Local\VirtualStore 2014-01-04 18:46 - 2014-01-04 18:46 - 00000020 ___SH C:\Users\JUPA\ntuser.ini 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Vorlagen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Startmenü 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Netzwerkumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Lokale Einstellungen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Eigene Dateien 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Druckumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Musik 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Bilder 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Verlauf 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Anwendungsdaten 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Anwendungsdaten 2014-01-04 18:46 - 2010-04-10 13:01 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2014-01-04 18:46 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-01-04 18:46 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-01-04 18:45 - 2014-01-04 20:35 - 00000000 __SHD C:\Recovery 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Favoriten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Dokumente 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Dokumente und Einstellungen ==================== One Month Modified Files and Folders ======= 2014-01-08 10:23 - 2014-01-08 10:23 - 00007832 _____ C:\Users\JUPA\Desktop\FRST.txt 2014-01-08 10:23 - 2014-01-08 10:23 - 00000000 ____D C:\FRST 2014-01-08 10:21 - 2014-01-08 10:21 - 01931762 _____ (Farbar) C:\Users\JUPA\Desktop\FRST64.exe 2014-01-08 10:16 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-08 10:16 - 2009-07-14 05:51 - 00023297 _____ C:\Windows\setupact.log 2014-01-07 20:54 - 2014-01-04 18:46 - 00002288 _____ C:\Users\JUPA\Desktop\Lenovo Rescue System.lnk 2014-01-07 20:48 - 2009-07-14 18:58 - 00710898 _____ C:\Windows\system32\perfh007.dat 2014-01-07 20:48 - 2009-07-14 18:58 - 00153326 _____ C:\Windows\system32\perfc007.dat 2014-01-07 20:48 - 2009-07-14 06:13 - 01645946 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-07 19:45 - 2014-01-05 18:38 - 00000000 ____D C:\Users\JUPA\dwhelper 2014-01-07 17:41 - 2014-01-07 16:48 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Nico Mak Computing 2014-01-07 17:37 - 2010-04-10 10:38 - 01866487 _____ C:\Windows\WindowsUpdate.log 2014-01-07 17:14 - 2014-01-07 17:14 - 00014716 _____ C:\Users\JUPA\Desktop\log.xml 2014-01-07 16:50 - 2014-01-05 01:33 - 00000000 ____D C:\Users\JUPA\Erst 2014-01-07 16:48 - 2014-01-07 16:47 - 04892480 _____ (WinZip International LLC ) C:\Users\JUPA\Downloads\wzmp_8.exe 2014-01-06 19:57 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-06 19:57 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-06 19:23 - 2014-01-06 19:21 - 48524296 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\NetFx20SP2_x64.exe 2014-01-06 19:11 - 2014-01-06 19:11 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1).zip 2014-01-06 19:11 - 2014-01-06 19:11 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1) 2014-01-06 19:06 - 2014-01-06 19:06 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool.zip 2014-01-06 19:06 - 2014-01-06 19:06 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool 2014-01-06 17:41 - 2010-04-10 12:46 - 00000000 ____D C:\Windows\SysWOW64\NV 2014-01-06 17:41 - 2010-04-10 12:46 - 00000000 ____D C:\Windows\system32\NV 2014-01-05 18:38 - 2014-01-04 18:46 - 00000000 ____D C:\Users\JUPA 2014-01-05 17:54 - 2014-01-05 17:54 - 00000134 _____ C:\Users\JUPA\Desktop\Microsoft Fix*it.url 2014-01-05 17:11 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System 2014-01-05 14:39 - 2014-01-05 14:39 - 00000000 ____D C:\Users\JUPA\Documents\FormatFactory 2014-01-05 13:59 - 2014-01-05 13:59 - 00347816 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\MicrosoftFixit.wu.LB.63312353662502285.1.1.Run.exe 2014-01-05 13:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2014-01-05 12:26 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2014-01-05 12:24 - 2010-04-10 13:56 - 00630688 _____ C:\Windows\PFRO.log 2014-01-05 11:05 - 2014-01-05 02:20 - 00260606 _____ C:\Windows\msxml4-KB2758694-enu.LOG 2014-01-05 10:30 - 2014-01-05 10:30 - 00000000 ____D C:\Users\JUPA\Documents\InterVideo 2014-01-05 09:48 - 2014-01-04 19:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-05 09:47 - 2014-01-05 09:47 - 00001202 _____ C:\Users\JUPA\Desktop\Format Factory.lnk 2014-01-05 09:47 - 2014-01-05 09:47 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-05 09:45 - 2014-01-05 09:45 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-05 09:42 - 2014-01-05 09:38 - 61746584 _____ (Free Time) C:\Users\JUPA\Downloads\FFSetup3.2.1.0.exe 2014-01-05 09:33 - 2014-01-05 09:33 - 00000000 ____D C:\Users\JUPA\AppData\Local\SearchProtect 2014-01-05 09:33 - 2014-01-05 09:33 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2014-01-05 09:31 - 2014-01-05 09:31 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-01-05 09:31 - 2014-01-05 09:29 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\DVDVideoSoft 2014-01-05 09:30 - 2014-01-05 09:30 - 00001536 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2014-01-05 09:30 - 2014-01-05 09:30 - 00001243 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-05 09:30 - 2014-01-05 09:29 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2014-01-05 09:30 - 2014-01-04 18:47 - 00112176 _____ C:\Users\JUPA\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-05 09:29 - 2014-01-05 09:29 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\OpenCandy 2014-01-05 09:20 - 2014-01-05 09:18 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\JUPA\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe 2014-01-05 08:59 - 2014-01-04 18:47 - 00001443 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-05 08:59 - 2014-01-04 18:47 - 00001409 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-05 08:59 - 2014-01-04 18:47 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-05 08:59 - 2014-01-04 18:47 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-05 08:58 - 2010-04-10 12:38 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-05 08:55 - 2009-07-14 05:45 - 00431744 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-05 08:50 - 2009-07-14 19:18 - 00000000 ____D C:\Program Files\Windows Journal 2014-01-05 03:23 - 2014-01-05 03:17 - 00004599 _____ C:\Windows\IE9_main.log 2014-01-05 03:20 - 2014-01-05 03:20 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-05 02:33 - 2010-04-10 12:37 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2014-01-05 02:33 - 2010-04-10 12:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2014-01-05 02:30 - 2014-01-05 02:30 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2014-01-05 02:28 - 2014-01-05 02:26 - 00000000 ____D C:\Windows\system32\MRT 2014-01-05 00:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2014-01-04 23:12 - 2014-01-04 23:12 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm(1).zip 2014-01-04 23:07 - 2014-01-04 23:07 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm.zip 2014-01-04 21:06 - 2014-01-04 21:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-04 21:06 - 2014-01-04 21:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\system32\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Macromedia 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Adobe 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Local\Macromedia 2014-01-04 21:06 - 2014-01-04 18:51 - 00000000 ____D C:\Users\JUPA\AppData\Local\Adobe 2014-01-04 21:03 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries 2014-01-04 20:41 - 2014-01-04 20:14 - 00000000 ____D C:\Windows\pss 2014-01-04 20:35 - 2014-01-04 18:45 - 00000000 __SHD C:\Recovery 2014-01-04 19:20 - 2010-04-10 12:48 - 00000000 ____D C:\ProgramData\McAfee 2014-01-04 19:14 - 2014-01-04 19:12 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Mozilla 2014-01-04 19:14 - 2014-01-04 19:12 - 00000000 ____D C:\Users\JUPA\AppData\Local\Mozilla 2014-01-04 19:13 - 2014-01-04 19:13 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Avira 2014-01-04 19:11 - 2014-01-04 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2014-01-04 19:11 - 2014-01-04 19:11 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\ProgramData\Mozilla 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\ProgramData\Avira 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\Program Files (x86)\Avira 2014-01-04 18:47 - 2014-01-04 18:47 - 00000000 ____D C:\Users\JUPA\AppData\Local\Power2Go 2014-01-04 18:47 - 2014-01-04 18:46 - 00000000 ____D C:\Users\JUPA\AppData\Local\VirtualStore 2014-01-04 18:46 - 2014-01-04 18:46 - 00000020 ___SH C:\Users\JUPA\ntuser.ini 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Vorlagen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Startmenü 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Netzwerkumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Lokale Einstellungen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Eigene Dateien 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Druckumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Musik 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Bilder 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Verlauf 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Anwendungsdaten 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Anwendungsdaten 2014-01-04 18:46 - 2010-04-10 13:25 - 00000000 ____D C:\Program Files (x86)\Windows Live 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Favoriten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Dokumente 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Dokumente und Einstellungen 2014-01-04 18:45 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default 2014-01-04 18:45 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Recovery 2014-01-04 18:45 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT 2013-12-09 11:37 - 2014-01-04 19:11 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-09 11:37 - 2014-01-04 19:11 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-09 11:37 - 2014-01-04 19:11 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-09 11:37 - 2014-01-04 19:11 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys Some content of TEMP: ==================== C:\Users\JUPA\AppData\Local\Temp\AskPIP_FF_.exe C:\Users\JUPA\AppData\Local\Temp\avgnt.exe C:\Users\JUPA\AppData\Local\Temp\install_flashplayer11x32_mssd_aaa_aih.exe C:\Users\JUPA\AppData\Local\Temp\nse6444.exe C:\Users\JUPA\AppData\Local\Temp\nsp6A9.exe C:\Users\JUPA\AppData\Local\Temp\nsp7018.exe C:\Users\JUPA\AppData\Local\Temp\nsz1154.exe C:\Users\JUPA\AppData\Local\Temp\Offercast_AVIRAV7_.exe C:\Users\JUPA\AppData\Local\Temp\setup__3862.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-04 19:09 ==================== End Of Log ============================ und ADD: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-01-2014 Ran by JUPA at 2014-01-08 10:25:19 Running from C:\Users\JUPA\Desktop Boot Mode: Safe Mode (with Networking) ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== 2007 Microsoft Office Suite Service Pack 1 (SP1) (x32 Version: - Microsoft) Hidden 2007 Microsoft Office system (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Atheros Client Installation Program (x32 Version: 7.0 - Atheros) Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira) Business Contact Manager für Outlook 2007 SP1 (x32 Version: 3.0.7311.0 - Microsoft Corporation) Business Contact Manager für Outlook 2007 SP1 (x32 Version: 3.0.7311.0 - Microsoft Corporation) Hidden CalTouch (x32 Version: 1.00.0000 - My Company Name) FormatFactory 3.2.1.0 (x32 Version: 3.2.1.0 - Free Time) Free YouTube to MP3 Converter version 3.12.20.1230 (x32 Version: 3.12.20.1230 - DVDVideoSoft Ltd.) Intel(R) Graphics Media Accelerator Driver (Version: 8.14.10.2230 - Intel Corporation) Intel(R) Network Connections 14.8.43.0 (Version: 14.8.43.0 - Intel) Intel(R) Network Connections 14.8.43.0 (Version: 14.8.43.0 - Intel) Hidden InterVideo WinDVD 8 (x32 Version: 8.0.20.148 - InterVideo Inc.) InterVideo WinDVD 8 (x32 Version: 8.0.20.148 - InterVideo Inc.) Hidden Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden Lenovo Power2Go (x32 Version: 6.0.3720 - CyberLink Corp.) Lenovo Power2Go (x32 Version: 6.0.3720 - CyberLink Corp.) Hidden Lenovo Rescue System (Version: 3.0.1029 - CyberLink Corp.) Hidden Lenovo Rescue System (x32 Version: 3.0.1029 - CyberLink Corp.) Lenovo Treiber- und Anwendungsinstallation (x32 Version: 5.1.0.1311 - Lenovo) Lenovo USB2.0 UVC Camera (x32 Version: 1.00.0000 - Vimicro Corporation) Lenovo VeriTouch, Desktop Edition (Version: 1.06.1123 - Lenovo) Hidden Lenovo VeriTouch, Desktop Edition (x32 Version: - ) LXH-JME2207FN Hotkey Driver (x32 Version: 5.1.0804 - Lenovo) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden Microsoft Office 2003 Web Components (x32 Version: 11.0.8003.0 - Microsoft Corporation) Microsoft Office 2007 Primary Interop Assemblies (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office 2007 Service Pack 2 (SP2) (x32 Version: - Microsoft) Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Hybrid 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6213.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6213.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6213.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6213.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office Small Business Connectivity Components (x32 Version: 2.0.7024.0 - Microsoft Corporation) Microsoft Office Suite Activation Assistant (x32 Version: 2.7 - Microsoft Corporation) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Search Enhancement Pack (x32 Version: 1.2.123.0 - Microsoft Corporation) Hidden Microsoft Silverlight (x32 Version: 3.0.40624.0 - Microsoft Corporation) Microsoft SQL Server 2005 (x32 Version: - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) (x32 Version: 9.3.4035.00 - Microsoft Corporation) Hidden Microsoft SQL Server 2005 Tools Express Edition (x32 Version: 9.2.3042.00 - Microsoft Corporation) Hidden Microsoft SQL Server Native Client (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server Setup Support Files (English) (x32 Version: 9.00.3042.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0 - Microsoft Corporation) NVIDIA Grafiktreiber 307.21 (Version: 307.21 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.85.551 - NVIDIA Corporation) Hidden NVIDIA Optimus 1.10.8 (Version: 1.10.8 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 307.21 (Version: 307.21 - NVIDIA Corporation) Hidden NVIDIA Update 1.10.8 (Version: 1.10.8 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden NVIDIA Updatus (x32 Version: 1.0.3 - NVIDIA Corporation) Hidden Realtek High Definition Audio Driver (x32 Version: 6.0.1.5995 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30116 - Realtek Semiconductor Corp.) Search Protect (x32 Version: 2.9.8.2 - Conduit) <==== ATTENTION Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (x32 Version: 9.00.4035.00 - Microsoft Corporation) Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5 - Microsoft Corporation) Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation) Windows Live Toolbar (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live-Uploadtool (x32 Version: 14.0.8014.1029 - Microsoft Corporation) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {BEDAFC59-2000-4305-B6FA-D5EAC901F43B} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation) ==================== Loaded Modules (whitelisted) ============= 2014-01-04 19:11 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2" ==================== Faulty Device Manager Devices ============= Name: Security Processor Loader Driver Description: Security Processor Loader Driver Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: spldr Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (01/07/2014 08:44:18 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc8ba Name des fehlerhaften Moduls: OctopusCredentialPlugin.dll, Version: 0.0.0.0, Zeitstempel: 0x4b0a5ffe Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000004456 ID des fehlerhaften Prozesses: 0x37c Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0 Pfad der fehlerhaften Anwendung: LogonUI.exe1 Pfad des fehlerhaften Moduls: LogonUI.exe2 Berichtskennung: LogonUI.exe3 Error: (01/07/2014 04:35:05 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc8ba Name des fehlerhaften Moduls: OctopusCredentialPlugin.dll, Version: 0.0.0.0, Zeitstempel: 0x4b0a5ffe Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000004456 ID des fehlerhaften Prozesses: 0x364 Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0 Pfad der fehlerhaften Anwendung: LogonUI.exe1 Pfad des fehlerhaften Moduls: LogonUI.exe2 Berichtskennung: LogonUI.exe3 Error: (01/05/2014 04:28:22 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Vom Kryptografiedienst konnte das VSS-Sicherungsobjekt "System Writer" nicht initialisiert werden. Details: Could not query the status of the EventSystem service. System Error: Der Computer wird heruntergefahren. . Error: (01/05/2014 01:32:11 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 26.0.0.5087, Zeitstempel: 0x52a0d293 Name des fehlerhaften Moduls: mozalloc.dll, Version: 26.0.0.5087, Zeitstempel: 0x52a0af28 Ausnahmecode: 0x80000003 Fehleroffset: 0x0000119c ID des fehlerhaften Prozesses: 0x104 Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (01/05/2014 11:13:48 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc8ba Name des fehlerhaften Moduls: OctopusCredentialPlugin.dll, Version: 0.0.0.0, Zeitstempel: 0x4b0a5ffe Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000004456 ID des fehlerhaften Prozesses: 0x378 Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0 Pfad der fehlerhaften Anwendung: LogonUI.exe1 Pfad des fehlerhaften Moduls: LogonUI.exe2 Berichtskennung: LogonUI.exe3 Error: (01/04/2014 09:36:08 PM) (Source: .NET Runtime) (User: ) Description: Shim database version C:\Windows\Microsoft.NET\Framework64\v4.0.30319 doesn't have a matching runtime directory Error: (01/04/2014 09:05:08 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc8ba Name des fehlerhaften Moduls: OctopusCredentialPlugin.dll, Version: 0.0.0.0, Zeitstempel: 0x4b0a5ffe Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000004456 ID des fehlerhaften Prozesses: 0x384 Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0 Pfad der fehlerhaften Anwendung: LogonUI.exe1 Pfad des fehlerhaften Moduls: LogonUI.exe2 Berichtskennung: LogonUI.exe3 Error: (01/04/2014 08:57:30 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc8ba Name des fehlerhaften Moduls: OctopusCredentialPlugin.dll, Version: 0.0.0.0, Zeitstempel: 0x4b0a5ffe Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000004456 ID des fehlerhaften Prozesses: 0x360 Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0 Pfad der fehlerhaften Anwendung: LogonUI.exe1 Pfad des fehlerhaften Moduls: LogonUI.exe2 Berichtskennung: LogonUI.exe3 Error: (01/04/2014 08:42:40 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc8ba Name des fehlerhaften Moduls: OctopusCredentialPlugin.dll, Version: 0.0.0.0, Zeitstempel: 0x4b0a5ffe Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000004456 ID des fehlerhaften Prozesses: 0x360 Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0 Pfad der fehlerhaften Anwendung: LogonUI.exe1 Pfad des fehlerhaften Moduls: LogonUI.exe2 Berichtskennung: LogonUI.exe3 Error: (01/04/2014 08:33:00 PM) (Source: .NET Runtime) (User: ) Description: Shim database version C:\Windows\Microsoft.NET\Framework64\v4.0.30319 doesn't have a matching runtime directory System errors: ============= Error: (01/08/2014 10:22:03 AM) (Source: DCOM) (User: ) Description: 1084NVSvc{DCAB0989-1301-4319-BE5F-ADE89F88581C} Error: (01/08/2014 10:18:24 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/08/2014 10:18:24 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/08/2014 10:18:24 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/08/2014 10:18:24 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/08/2014 10:18:24 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/08/2014 10:18:24 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/08/2014 10:18:14 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/08/2014 10:18:14 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/08/2014 10:18:14 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 20% Total physical RAM: 3062.3 MB Available physical RAM: 2419.64 MB Total Pagefile: 6122.75 MB Available Pagefile: 5511.41 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:440.59 GB) (Free:411.11 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 380F76BF) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=441 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=25 GB) - (Type=12) ==================== End Of Log ============================ |
09.01.2014, 08:43 | #4 |
/// the machine /// TB-Ausbilder | Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
09.01.2014, 23:16 | #5 |
| Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus Hi Schrauber, Sorry für die späte Rückmeldung, war arbeiten. Eine Fehlermeldung als solche habe ich nicht beobachtet, allerdings hat Combofix auf den aktiven Avira Desktop hingewiesen. Da ich im abgesicherten Modus Avira nicht ausschalten konnte habe ich Antivir komplett deinstalliert. Dann den Rechner neu (im abgesicherten Modus) gestartet und Cobo ausgeführt. Er meckerte immernoch wegen dem Avira Desktop, ich habe dann dennoch mit ok bestätigt. NAch Beendigung des Combo Durchlaufs, hat Combo den Rechner starten wollen, dies schlug insofern fehl, das auch nach dem Windows Ton der Monitor schwarz blieb. Also habe ich den Rechner über den Powerknopf runtergefahren und von Hand im Abgesicherten Modus wieder gestartet. AUf der Suche nach der TXT File im COMBOORDNER hoffe ich Dir die korrekte zu posten. Danke Code:
ATTFilter ComboFix 14-01-08.03 - JUPA 09.01.2014 22:53:11.1.4 - x64 NETWORK Microsoft Windows 7 Home Premium 6.1.7600.0.1252.49.1031.18.3062.2562 [GMT 1:00] ausgeführt von:: C:\Users\JUPA\Desktop\ComboFix.exe AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Neuer Wiederherstellungspunkt wurde erstellt (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) C:\Program Files (x86)\SearchProtect C:\Program Files (x86)\SearchProtect\EULA.txt C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe C:\Program Files (x86)\SearchProtect\Main\bin\SPTool.dll C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64.dll C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.css C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.html C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.js C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\defaults.js C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\defaults.js C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\main.js C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\SPDialogAPI.js C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\defaults.js C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.js C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\defaults.js C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.js C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js ((((((((((((((((((((((( Dateien erstellt von 2013-12-09 bis 2014-01-09 )))))))))))))))))))))))))))))) 2014-01-09 22:02:09 . 2014-01-09 22:02:09 -------- d-----w- C:\Users\UpdatusUser\AppData\Local\temp 2014-01-08 09:23:11 . 2014-01-08 09:23:11 -------- d-----w- C:\FRST 2014-01-05 12:25:08 . 2014-01-05 12:25:08 -------- d-----w- C:\Windows\SysWow64\wbem\en-US 2014-01-05 12:25:08 . 2014-01-05 12:25:08 -------- d-----w- C:\Windows\system32\wbem\en-US 2014-01-05 10:03:49 . 2011-02-19 06:37:44 1135104 ----a-w- C:\Windows\system32\FntCache.dll 2014-01-05 08:45:47 . 2014-01-05 08:45:47 -------- d-----w- C:\Program Files (x86)\FreeTime 2014-01-05 08:31:50 . 2014-01-05 08:31:50 -------- d-sh--w- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-01-05 08:31:50 . 2014-01-05 08:31:50 -------- d--h--w- C:\ProgramData\Common Files 2014-01-05 08:29:14 . 2014-01-05 08:30:42 -------- d-----w- C:\Program Files (x86)\DVDVideoSoft 2014-01-05 08:29:14 . 2014-01-05 08:30:22 -------- d-----w- C:\Program Files (x86)\Common Files\DVDVideoSoft 2014-01-05 04:09:15 . 2010-09-14 06:45:57 367104 ----a-w- C:\Windows\system32\wcncsvc.dll 2014-01-05 04:09:15 . 2010-09-14 06:07:14 276992 ----a-w- C:\Windows\SysWow64\wcncsvc.dll 2014-01-05 03:03:49 . 2012-07-26 07:46:05 2560 ----a-w- C:\Windows\system32\drivers\de-DE\wdf01000.sys.mui 2014-01-05 03:03:49 . 2012-07-26 04:55:47 785512 ----a-w- C:\Windows\system32\drivers\Wdf01000.sys 2014-01-05 03:03:49 . 2012-07-26 04:55:47 54376 ----a-w- C:\Windows\system32\drivers\WdfLdr.sys 2014-01-05 03:03:49 . 2012-07-26 02:36:08 9728 ----a-w- C:\Windows\system32\Wdfres.dll 2014-01-05 02:27:08 . 2010-02-23 08:16:17 294912 ----a-w- C:\Windows\system32\browserchoice.exe 2014-01-05 01:52:56 . 2012-12-16 16:52:02 46080 ----a-w- C:\Windows\system32\atmlib.dll 2014-01-05 01:52:56 . 2012-12-16 14:25:19 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll 2014-01-05 01:52:55 . 2012-12-16 14:40:45 367616 ----a-w- C:\Windows\system32\atmfd.dll 2014-01-05 01:52:55 . 2012-12-16 14:25:27 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll 2014-01-05 01:50:08 . 2012-07-26 03:08:14 84992 ----a-w- C:\Windows\system32\WUDFSvc.dll 2014-01-05 01:50:08 . 2012-07-26 03:08:14 194048 ----a-w- C:\Windows\system32\WUDFPlatform.dll 2014-01-05 01:50:08 . 2012-07-26 02:26:45 87040 ----a-w- C:\Windows\system32\drivers\WUDFPf.sys 2014-01-05 01:50:08 . 2012-07-26 02:26:06 198656 ----a-w- C:\Windows\system32\drivers\WUDFRd.sys 2014-01-05 01:50:07 . 2012-07-26 03:08:53 229888 ----a-w- C:\Windows\system32\WUDFHost.exe 2014-01-05 01:50:07 . 2012-07-26 03:08:14 45056 ----a-w- C:\Windows\system32\WUDFCoinstaller.dll 2014-01-05 01:50:06 . 2012-07-26 03:08:14 744448 ----a-w- C:\Windows\system32\WUDFx.dll 2014-01-05 01:32:18 . 2012-10-25 19:02:24 60776 ----a-w- C:\Windows\system32\OpenCL.dll 2014-01-05 01:32:18 . 2012-10-25 19:02:18 52584 ----a-w- C:\Windows\SysWow64\OpenCL.dll 2014-01-05 01:30:47 . 2014-01-05 01:30:47 -------- d-----w- C:\ProgramData\NVIDIA Corporation 2014-01-05 01:26:13 . 2014-01-05 01:28:52 -------- d-----w- C:\Windows\system32\MRT 2014-01-05 01:25:06 . 2012-03-01 06:54:38 22896 ----a-w- C:\Windows\system32\drivers\fs_rec.sys 2014-01-05 01:25:06 . 2012-03-01 06:40:14 80896 ----a-w- C:\Windows\system32\imagehlp.dll 2014-01-05 01:25:06 . 2012-03-01 05:45:05 158720 ----a-w- C:\Windows\SysWow64\imagehlp.dll 2014-01-05 01:25:05 . 2012-03-01 06:35:16 5120 ----a-w- C:\Windows\system32\wmi.dll 2014-01-05 01:25:05 . 2012-03-01 05:40:44 5120 ----a-w- C:\Windows\SysWow64\wmi.dll 2014-01-05 01:19:40 . 2010-03-04 04:40:58 184832 ----a-w- C:\Windows\system32\drivers\usbvideo.sys 2014-01-05 01:19:40 . 2010-03-04 04:32:27 243712 ----a-w- C:\Windows\system32\drivers\ks.sys 2014-01-05 01:13:51 . 2012-01-04 09:58:13 509952 ----a-w- C:\Windows\system32\ntshrui.dll 2014-01-05 01:13:51 . 2012-01-04 09:03:07 442880 ----a-w- C:\Windows\SysWow64\ntshrui.dll 2014-01-05 01:13:49 . 2011-04-27 02:57:40 102400 ----a-w- C:\Windows\system32\drivers\dfsc.sys 2014-01-05 01:13:41 . 2012-06-09 05:30:56 14165504 ----a-w- C:\Windows\system32\shell32.dll 2014-01-05 01:11:56 . 2012-11-09 05:34:27 2048 ----a-w- C:\Windows\system32\tzres.dll 2014-01-05 01:10:59 . 2012-04-26 05:34:38 76288 ----a-w- C:\Windows\system32\rdpwsx.dll 2014-01-05 01:09:59 . 2013-01-04 05:37:01 362496 ----a-w- C:\Windows\system32\wow64win.dll 2014-01-05 00:45:20 . 2010-12-18 05:26:55 1034240 ----a-w- C:\Windows\SysWow64\mstsc.exe 2014-01-05 00:45:19 . 2010-12-18 06:08:15 1097216 ----a-w- C:\Windows\system32\mstsc.exe 2014-01-05 00:45:07 . 2011-05-24 11:21:59 404992 ----a-w- C:\Windows\system32\umpnpmgr.dll 2014-01-05 00:45:07 . 2011-05-24 10:34:00 145920 ----a-w- C:\Windows\SysWow64\cfgmgr32.dll 2014-01-05 00:45:07 . 2011-05-24 10:32:46 252928 ----a-w- C:\Windows\SysWow64\drvinst.exe 2014-01-05 00:45:06 . 2011-05-24 10:34:20 64512 ----a-w- C:\Windows\SysWow64\devobj.dll 2014-01-05 00:45:06 . 2011-05-24 10:34:20 44544 ----a-w- C:\Windows\SysWow64\devrtl.dll 2014-01-05 00:43:58 . 2012-05-14 05:20:31 956416 ----a-w- C:\Windows\system32\localspl.dll 2014-01-05 00:42:55 . 2012-06-02 05:25:12 1462784 ----a-w- C:\Windows\system32\crypt32.dll 2014-01-05 00:35:31 . 2012-02-15 06:27:54 1031680 ----a-w- C:\Windows\system32\rdpcore.dll 2014-01-05 00:35:31 . 2012-02-15 05:44:57 826368 ----a-w- C:\Windows\SysWow64\rdpcore.dll 2014-01-05 00:35:30 . 2012-02-15 04:46:59 23552 ----a-w- C:\Windows\system32\drivers\tdtcp.sys 2014-01-04 22:34:04 . 2012-06-02 22:19:43 2428952 ----a-w- C:\Windows\system32\wuaueng.dll 2014-01-04 22:34:04 . 2012-06-02 22:19:42 57880 ----a-w- C:\Windows\system32\wuauclt.exe 2014-01-04 22:34:04 . 2012-06-02 22:19:42 44056 ----a-w- C:\Windows\system32\wups2.dll 2014-01-04 22:34:04 . 2012-06-02 22:15:31 2622464 ----a-w- C:\Windows\system32\wucltux.dll 2014-01-04 22:33:55 . 2012-06-02 22:19:46 38424 ----a-w- C:\Windows\system32\wups.dll 2014-01-04 22:33:55 . 2012-06-02 22:19:23 701976 ----a-w- C:\Windows\system32\wuapi.dll 2014-01-04 22:33:55 . 2012-06-02 22:15:08 99840 ----a-w- C:\Windows\system32\wudriver.dll 2014-01-04 22:33:49 . 2012-06-02 14:19:42 186752 ----a-w- C:\Windows\system32\wuwebv.dll 2014-01-04 22:33:49 . 2012-06-02 14:15:12 36864 ----a-w- C:\Windows\system32\wuapp.exe 2014-01-04 20:06:15 . 2014-01-04 20:06:15 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2014-01-04 20:06:15 . 2014-01-04 20:06:15 692616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe 2014-01-04 20:06:13 . 2014-01-04 20:06:13 -------- d-----w- C:\Windows\SysWow64\Macromed 2014-01-04 20:06:11 . 2014-01-04 20:06:11 -------- d-----w- C:\Windows\system32\Macromed 2014-01-04 18:11:52 . 2014-01-04 18:11:55 -------- d-----w- C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 17:46:23 . 2014-01-05 17:38:53 -------- d-----w- C:\Users\JUPA . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) |
10.01.2014, 14:28 | #6 |
/// the machine /// TB-Ausbilder | Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus |
11.01.2014, 00:43 | #7 |
| Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus Hallo Schrauber, Danke Hier wie gewünscht die Malwarebytes Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.10.09 Windows 7 x64 NTFS (Abgesichertenmodus/Netzwerkfähig) Internet Explorer 9.0.8112.16421 JUPA :: JUPA-PC [Administrator] Schutz: Deaktiviert 11.01.2014 00:06:19 mbam-log-2014-01-11 (00-06-19).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 229398 Laufzeit: 5 Minute(n), 21 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 1 HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc (PUP.Optional.ConduitSearchProtect) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 3 C:\Users\JUPA\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\JUPA\AppData\Roaming\OpenCandy\74E8A34F887E489D88B786074EF8C920 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\JUPA\AppData\Roaming\OpenCandy\F433075251EA46C6B261B8971DE5CB23 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 2 C:\Users\JUPA\AppData\Roaming\OpenCandy\74E8A34F887E489D88B786074EF8C920\WS_p4v2_2CB2.exe (PUP.Optional.Amonetize) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\JUPA\AppData\Roaming\OpenCandy\F433075251EA46C6B261B8971DE5CB23\Trial-14.0.1000.89_de-DE_1004733_DE-2.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 11/01/2014 um 00:21:29 # Aktualisiert 23/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium (64 bits) # Benutzername : JUPA - JUPA-PC # Gestartet von : C:\Users\JUPA\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Users\JUPA\AppData\Local\Searchprotect Datei Gelöscht : C:\Users\JUPA\AppData\Roaming\Mozilla\Firefox\Profiles\fru8xqns.default\searchplugins\conduit-search.xml ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Schlüssel Gelöscht : HKCU\Software\anchorfree Schlüssel Gelöscht : HKLM\Software\SearchProtect Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll ***** [ Browser ] ***** -\\ Internet Explorer v9.0.8112.16526 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\JUPA\AppData\Roaming\Mozilla\Firefox\Profiles\fru8xqns.default\prefs.js ] ************************* AdwCleaner[R0].txt - [3319 octets] - [11/01/2014 00:19:44] AdwCleaner[S0].txt - [3047 octets] - [11/01/2014 00:21:29] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3107 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.0 (01.07.2014:1) OS: Windows 7 Home Premium x64 Ran by JUPA on 11.01.2014 at 0:26:14,16 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-2703416909-3152787025-1394698144-1004\Software\Microsoft\Internet Explorer\Main\\Start Page ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ FireFox Emptied folder: C:\Users\JUPA\AppData\Roaming\mozilla\firefox\profiles\fru8xqns.default\minidumps [4 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 11.01.2014 at 0:35:13,53 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-01-2014 Ran by JUPA (administrator) on JUPA-PC on 11-01-2014 00:36:25 Running from C:\Users\JUPA\Desktop Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Safe Mode (with Networking) ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Verigesture] - C:\Program Files (x86)\Lenovo\Lenovo VeriTouch\Verigesture Dashboard.exe [1199504 2009-11-23] (Lenovo) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2009-12-03] (Realtek Semiconductor) HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [jmekey] - C:\Program Files (x86)\jmesoft\hotkey.exe [114688 2009-07-16] (JME) HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-04] (CyberLink) HKLM\...\Runonce: [GrpConv] - grpconv -o HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\RunOnce: [Report] - C:\AdwCleaner\AdwCleaner[S0].txt [3207 2014-01-11] () HKU\Default\...\RunOnce: [WLStart] - C:\Program Files (x86)\Windows Live\Installer\wlstart.exe [786760 2009-07-26] (Microsoft Corporation) HKU\Default User\...\RunOnce: [WLStart] - C:\Program Files (x86)\Windows Live\Installer\wlstart.exe [786760 2009-07-26] (Microsoft Corporation) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [247144 2012-10-25] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [202600 2012-10-25] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKLM-x32 - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\JUPA\AppData\Roaming\Mozilla\Firefox\Profiles\fru8xqns.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\JUPA\AppData\Roaming\Mozilla\Firefox\Profiles\fru8xqns.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ ==================== Services (Whitelisted) ================= S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29263712 2008-11-24] (Microsoft Corporation) S2 clr_optimization_v4.0.30319_32; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [x] S2 clr_optimization_v4.0.30319_64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] ==================== Drivers (Whitelisted) ==================== R3 FEIExpress; C:\Windows\System32\DRIVERS\fei62x64.sys [187392 2009-10-02] (Intel Corporation) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-11 00:36 - 2014-01-11 00:36 - 00005401 _____ C:\Users\JUPA\Desktop\FRST.txt 2014-01-11 00:36 - 2014-01-11 00:36 - 00000000 ____D C:\Users\JUPA\Desktop\FRST-OlderVersion 2014-01-11 00:35 - 2014-01-11 00:35 - 00001482 _____ C:\Users\JUPA\Desktop\JRT.txt 2014-01-11 00:26 - 2014-01-11 00:26 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 00:25 - 2014-01-11 00:25 - 01037068 _____ (Thisisu) C:\Users\JUPA\Desktop\JRT.exe 2014-01-11 00:14 - 2014-01-11 00:21 - 00000000 ____D C:\AdwCleaner 2014-01-11 00:14 - 2014-01-11 00:14 - 01233962 _____ C:\Users\JUPA\Desktop\adwcleaner.exe 2014-01-11 00:04 - 2014-01-11 00:04 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Malwarebytes 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-11 00:04 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-11 00:03 - 2014-01-11 00:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\JUPA\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-09 22:50 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2014-01-09 22:50 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2014-01-09 22:50 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-01-09 22:50 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-01-09 22:50 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-01-09 22:50 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2014-01-09 22:50 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2014-01-09 22:50 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2014-01-09 22:49 - 2014-01-09 23:06 - 00000000 ____D C:\ComboFix 2014-01-09 22:33 - 2014-01-09 23:02 - 00000000 ____D C:\Windows\erdnt 2014-01-09 22:33 - 2014-01-09 22:40 - 00000000 ____D C:\Qoobox 2014-01-09 22:31 - 2014-01-09 22:31 - 05162489 ____R (Swearware) C:\Users\JUPA\Desktop\ComboFix.exe 2014-01-08 10:23 - 2014-01-11 00:36 - 00000000 ____D C:\FRST 2014-01-08 10:21 - 2014-01-11 00:36 - 01932166 _____ (Farbar) C:\Users\JUPA\Desktop\FRST64.exe 2014-01-07 16:48 - 2014-01-07 17:41 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Nico Mak Computing 2014-01-07 16:47 - 2014-01-07 16:48 - 04892480 _____ (WinZip International LLC ) C:\Users\JUPA\Downloads\wzmp_8.exe 2014-01-06 19:21 - 2014-01-06 19:23 - 48524296 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\NetFx20SP2_x64.exe 2014-01-06 19:11 - 2014-01-06 19:11 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1).zip 2014-01-06 19:11 - 2014-01-06 19:11 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1) 2014-01-06 19:06 - 2014-01-06 19:06 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool.zip 2014-01-06 19:06 - 2014-01-06 19:06 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool 2014-01-05 18:38 - 2014-01-07 19:45 - 00000000 ____D C:\Users\JUPA\dwhelper 2014-01-05 17:54 - 2014-01-05 17:54 - 00000134 _____ C:\Users\JUPA\Desktop\Microsoft Fix*it.url 2014-01-05 14:39 - 2014-01-05 14:39 - 00000000 ____D C:\Users\JUPA\Documents\FormatFactory 2014-01-05 13:59 - 2014-01-05 13:59 - 00347816 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\MicrosoftFixit.wu.LB.63312353662502285.1.1.Run.exe 2014-01-05 11:03 - 2011-02-19 07:37 - 01135104 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-01-05 10:30 - 2014-01-05 10:30 - 00000000 ____D C:\Users\JUPA\Documents\InterVideo 2014-01-05 09:47 - 2014-01-05 09:47 - 00001202 _____ C:\Users\JUPA\Desktop\Format Factory.lnk 2014-01-05 09:47 - 2014-01-05 09:47 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-05 09:45 - 2014-01-05 09:45 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-05 09:38 - 2014-01-05 09:42 - 61746584 _____ (Free Time) C:\Users\JUPA\Downloads\FFSetup3.2.1.0.exe 2014-01-05 09:31 - 2014-01-05 09:31 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-01-05 09:30 - 2014-01-05 09:30 - 00001536 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2014-01-05 09:30 - 2014-01-05 09:30 - 00001243 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-05 09:29 - 2014-01-05 09:31 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\DVDVideoSoft 2014-01-05 09:29 - 2014-01-05 09:30 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2014-01-05 09:18 - 2014-01-05 09:20 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\JUPA\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe 2014-01-05 05:09 - 2010-09-14 07:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2014-01-05 05:09 - 2010-09-14 07:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll 2014-01-05 04:03 - 2012-07-26 05:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-01-05 04:03 - 2012-07-26 05:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-01-05 04:03 - 2012-07-26 03:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2014-01-05 04:03 - 2012-06-02 15:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2014-01-05 03:27 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-05 03:17 - 2014-01-05 03:23 - 00004599 _____ C:\Windows\IE9_main.log 2014-01-05 02:52 - 2012-12-16 17:52 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-01-05 02:52 - 2012-12-16 15:40 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-01-05 02:52 - 2012-12-16 15:25 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-01-05 02:52 - 2012-12-16 15:25 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-01-05 02:50 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-01-05 02:50 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-01-05 02:50 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-01-05 02:50 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-01-05 02:32 - 2012-10-25 20:02 - 00060776 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-01-05 02:32 - 2012-10-25 20:02 - 00052584 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-01-05 02:30 - 2014-01-05 02:30 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2014-01-05 02:26 - 2014-01-05 02:28 - 00000000 ____D C:\Windows\system32\MRT 2014-01-05 02:26 - 2013-12-01 14:42 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-05 02:25 - 2012-03-01 07:54 - 00022896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2014-01-05 02:25 - 2012-03-01 07:40 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-01-05 02:25 - 2012-03-01 07:35 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2014-01-05 02:25 - 2012-03-01 06:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-01-05 02:25 - 2012-03-01 06:40 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2014-01-05 02:20 - 2014-01-05 11:05 - 00260606 _____ C:\Windows\msxml4-KB2758694-enu.LOG 2014-01-05 02:19 - 2010-03-04 05:40 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-01-05 02:19 - 2010-03-04 05:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2014-01-05 02:16 - 2013-02-12 16:42 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-01-05 02:16 - 2013-02-12 16:37 - 03138048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-01-05 02:16 - 2013-02-12 16:31 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2014-01-05 02:16 - 2013-02-12 16:13 - 02691072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-01-05 02:16 - 2013-02-12 16:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2014-01-05 02:16 - 2013-02-12 14:59 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-01-05 02:16 - 2012-12-07 06:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-01-05 02:16 - 2012-12-07 06:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-01-05 02:16 - 2012-12-07 06:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2014-01-05 02:16 - 2012-12-07 05:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2014-01-05 02:16 - 2012-12-07 04:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2014-01-05 02:16 - 2011-03-11 07:19 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2014-01-05 02:16 - 2011-03-11 07:19 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2014-01-05 02:16 - 2011-03-11 06:40 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll 2014-01-05 02:16 - 2011-03-11 06:40 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll 2014-01-05 02:16 - 2010-12-23 07:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2014-01-05 02:16 - 2010-12-23 07:07 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2014-01-05 02:16 - 2010-12-23 07:02 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2014-01-05 02:16 - 2010-12-23 06:28 - 00850432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll 2014-01-05 02:16 - 2010-12-23 06:28 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll 2014-01-05 02:16 - 2010-12-23 06:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax 2014-01-05 02:13 - 2012-06-09 06:30 - 14165504 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-01-05 02:13 - 2012-06-09 05:46 - 12868608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-01-05 02:13 - 2012-01-04 10:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2014-01-05 02:13 - 2012-01-04 10:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2014-01-05 02:13 - 2011-04-27 03:57 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2014-01-05 02:12 - 2013-04-12 15:36 - 01653096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-01-05 02:12 - 2013-03-01 04:32 - 03150848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-05 02:12 - 2012-11-09 06:34 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-01-05 02:12 - 2012-11-09 05:49 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2014-01-05 02:12 - 2012-11-02 06:30 - 02001408 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-01-05 02:12 - 2012-11-02 06:30 - 01880064 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-01-05 02:12 - 2012-11-02 05:50 - 01388544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-01-05 02:12 - 2012-11-02 05:50 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 01837568 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 01074176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-01-05 02:12 - 2011-11-17 08:12 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2014-01-05 02:12 - 2011-11-17 06:39 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2014-01-05 02:12 - 2011-05-04 06:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2014-01-05 02:12 - 2011-05-04 06:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2014-01-05 02:12 - 2011-05-04 06:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2014-01-05 02:12 - 2011-05-04 06:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2014-01-05 02:12 - 2011-05-04 05:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2014-01-05 02:12 - 2011-05-04 05:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2014-01-05 02:12 - 2011-05-04 05:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2014-01-05 02:12 - 2011-05-04 05:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2014-01-05 02:12 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-01-05 02:12 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-01-05 02:12 - 2011-03-12 13:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-01-05 02:12 - 2011-03-12 12:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2014-01-05 02:12 - 2010-12-21 07:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2014-01-05 02:12 - 2010-12-21 07:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2014-01-05 02:12 - 2010-12-21 07:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll 2014-01-05 02:12 - 2010-12-21 06:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-01-05 02:12 - 2010-11-02 06:18 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2014-01-05 02:12 - 2010-11-02 06:17 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2014-01-05 02:12 - 2010-11-02 06:17 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2014-01-05 02:12 - 2010-11-02 06:16 - 01114624 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-01-05 02:12 - 2010-11-02 06:10 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2014-01-05 02:12 - 2010-11-02 06:10 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2014-01-05 02:12 - 2010-11-02 05:40 - 00496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll 2014-01-05 02:12 - 2010-11-02 05:40 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll 2014-01-05 02:12 - 2010-11-02 05:34 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe 2014-01-05 02:12 - 2010-11-02 05:34 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe 2014-01-05 02:12 - 2010-05-05 08:37 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2014-01-05 02:12 - 2010-05-05 07:46 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2014-01-05 02:11 - 2012-11-09 06:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-01-05 02:11 - 2012-11-09 05:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-01-05 02:11 - 2012-01-03 07:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2014-01-05 02:11 - 2012-01-03 06:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2014-01-05 02:11 - 2011-10-26 06:22 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2014-01-05 02:11 - 2011-10-26 06:22 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-01-05 02:11 - 2011-10-26 05:28 - 01328640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2014-01-05 02:11 - 2011-10-26 05:28 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-01-05 02:11 - 2011-07-09 03:44 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2014-01-05 02:11 - 2011-06-16 06:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2014-01-05 02:11 - 2011-06-16 05:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2014-01-05 02:11 - 2011-05-04 03:51 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-01-05 02:11 - 2011-05-04 03:51 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-01-05 02:11 - 2011-04-22 21:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-01-05 02:11 - 2011-02-24 07:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-01-05 02:11 - 2011-02-24 06:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-01-05 02:11 - 2010-08-26 06:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2014-01-05 02:11 - 2010-08-26 05:39 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll 2014-01-05 02:11 - 2010-08-21 07:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-01-05 02:11 - 2010-08-21 06:33 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-01-05 02:10 - 2013-01-04 06:41 - 01893224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-01-05 02:10 - 2013-01-04 06:40 - 00287576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-01-05 02:10 - 2013-01-04 06:30 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-01-05 02:10 - 2013-01-04 06:30 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-01-05 02:10 - 2012-08-11 01:53 - 00714752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-01-05 02:10 - 2012-08-11 00:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-01-05 02:10 - 2012-06-02 06:38 - 00152432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-01-05 02:10 - 2012-06-02 06:38 - 00095088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-01-05 02:10 - 2012-06-02 06:37 - 00459216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-01-05 02:10 - 2012-06-02 06:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-01-05 02:10 - 2012-06-02 05:48 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-01-05 02:10 - 2012-06-02 05:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-01-05 02:10 - 2012-06-02 05:42 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-01-05 02:10 - 2012-04-28 04:50 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-01-05 02:10 - 2012-04-26 06:34 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2014-01-05 02:10 - 2012-04-26 06:34 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2014-01-05 02:10 - 2012-04-26 06:28 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2014-01-05 02:10 - 2012-03-17 08:55 - 00075632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2014-01-05 02:10 - 2011-12-28 04:59 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-01-05 02:10 - 2011-11-17 08:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-01-05 02:10 - 2011-11-17 08:11 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-01-05 02:10 - 2011-11-17 08:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-01-05 02:10 - 2011-11-17 08:08 - 01446912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-01-05 02:10 - 2011-11-17 08:05 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-01-05 02:10 - 2011-04-29 04:13 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-01-05 02:10 - 2011-04-29 04:12 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-01-05 02:10 - 2011-04-29 04:12 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-01-05 02:10 - 2011-01-26 07:53 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-01-05 02:10 - 2011-01-26 07:53 - 00265088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-01-05 02:10 - 2011-01-26 07:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-01-05 02:10 - 2010-11-02 06:18 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2014-01-05 02:10 - 2010-11-02 05:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll 2014-01-05 02:10 - 2010-08-31 05:32 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll 2014-01-05 02:10 - 2010-08-31 05:32 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll 2014-01-05 02:10 - 2010-06-26 06:31 - 01863680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2014-01-05 02:10 - 2010-06-26 06:14 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2014-01-05 02:10 - 2010-05-23 11:15 - 01619456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-01-05 02:10 - 2010-05-23 11:11 - 03181568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-01-05 02:10 - 2010-05-23 11:11 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2014-01-05 02:10 - 2010-05-23 09:37 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-01-05 02:10 - 2010-05-23 09:35 - 04068864 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-01-05 02:10 - 2010-05-23 09:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2014-01-05 02:10 - 2010-05-23 09:35 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-01-05 02:10 - 2010-03-03 00:24 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe 2014-01-05 02:10 - 2010-03-03 00:24 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll 2014-01-05 02:10 - 2010-03-03 00:23 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2014-01-05 02:10 - 2010-03-03 00:23 - 00109928 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2014-01-05 02:09 - 2013-02-12 15:02 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-01-05 02:09 - 2013-01-04 06:37 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-01-05 02:09 - 2013-01-04 06:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-01-05 02:09 - 2013-01-04 06:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-01-05 02:09 - 2013-01-04 06:36 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-01-05 02:09 - 2013-01-04 06:33 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:51 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-01-05 02:09 - 2013-01-04 05:51 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-01-05 02:09 - 2013-01-04 05:51 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 04:19 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-01-05 02:09 - 2013-01-04 03:48 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-01-05 02:09 - 2013-01-04 03:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-01-05 02:09 - 2013-01-04 03:48 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-01-05 02:09 - 2013-01-04 03:48 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-01-05 02:09 - 2013-01-04 03:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 03:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 03:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 03:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-01-05 02:09 - 2012-11-22 11:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-01-05 02:09 - 2012-11-22 10:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-01-05 02:09 - 2012-11-20 06:55 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-01-05 02:09 - 2012-11-20 06:10 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-01-05 02:09 - 2012-11-02 06:27 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-01-05 02:09 - 2012-11-02 05:48 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2014-01-05 02:09 - 2012-09-25 23:39 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2014-01-05 02:09 - 2012-09-25 22:55 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2014-01-05 02:09 - 2012-09-06 18:38 - 00295792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-01-05 02:09 - 2012-08-24 19:05 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-01-05 02:09 - 2012-08-24 18:10 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-01-05 02:09 - 2012-08-02 18:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-01-05 02:09 - 2012-08-02 18:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-01-05 02:09 - 2012-05-02 06:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-01-05 02:09 - 2012-04-07 13:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-01-05 02:09 - 2012-04-07 12:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-01-05 02:09 - 2011-08-17 06:32 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2014-01-05 02:09 - 2011-08-17 06:27 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2014-01-05 02:09 - 2011-08-17 06:27 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2014-01-05 02:09 - 2011-08-17 06:27 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2014-01-05 02:09 - 2011-08-17 06:27 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2014-01-05 02:09 - 2011-08-17 05:26 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2014-01-05 02:09 - 2011-08-17 05:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSNP.ax 2014-01-05 02:09 - 2011-08-17 05:22 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2014-01-05 02:09 - 2011-08-17 05:22 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mpeg2Data.ax 2014-01-05 02:09 - 2011-08-17 05:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSDvbNP.ax 2014-01-05 02:09 - 2011-03-03 07:17 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2014-01-05 02:09 - 2011-03-03 07:17 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2014-01-05 02:09 - 2011-03-03 07:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2014-01-05 02:09 - 2011-03-03 06:29 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2014-01-05 02:09 - 2011-03-03 06:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe 2014-01-05 02:09 - 2011-02-05 13:41 - 00640896 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2014-01-05 02:09 - 2011-02-05 13:41 - 00556928 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2014-01-05 02:09 - 2011-02-05 13:41 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2014-01-05 02:09 - 2011-02-05 13:41 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2014-01-05 02:09 - 2011-02-05 13:41 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2014-01-05 02:09 - 2011-02-05 13:39 - 00603976 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2014-01-05 02:09 - 2011-02-05 13:39 - 00518160 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2014-01-05 02:09 - 2010-08-21 07:38 - 01024512 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2014-01-05 02:09 - 2010-08-21 07:29 - 00558592 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-01-05 02:09 - 2010-08-21 06:36 - 00738816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll 2014-01-05 01:45 - 2011-05-24 12:21 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2014-01-05 01:45 - 2011-05-24 11:34 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2014-01-05 01:45 - 2011-05-24 11:34 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2014-01-05 01:45 - 2011-05-24 11:34 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2014-01-05 01:45 - 2011-05-24 11:32 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2014-01-05 01:45 - 2010-12-18 07:08 - 01097216 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-01-05 01:45 - 2010-12-18 06:26 - 01034240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-01-05 01:44 - 2013-01-24 06:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-01-05 01:44 - 2012-07-04 23:04 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2014-01-05 01:44 - 2012-07-04 23:01 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2014-01-05 01:44 - 2012-07-04 23:01 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2014-01-05 01:44 - 2012-07-04 22:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2014-01-05 01:44 - 2012-07-04 22:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2014-01-05 01:44 - 2012-05-05 09:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-01-05 01:44 - 2012-05-05 08:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2014-01-05 01:44 - 2011-12-16 09:42 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2014-01-05 01:44 - 2011-12-16 08:59 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2014-01-05 01:44 - 2011-05-03 06:21 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2014-01-05 01:44 - 2011-05-03 05:50 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2014-01-05 01:44 - 2011-02-23 06:15 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2014-01-05 01:44 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2014-01-05 01:44 - 2011-02-18 06:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2014-01-05 01:44 - 2011-02-12 07:14 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2014-01-05 01:44 - 2010-10-16 06:23 - 00112000 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-01-05 01:44 - 2010-09-01 06:21 - 14627840 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-01-05 01:44 - 2010-09-01 06:12 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-01-05 01:44 - 2010-09-01 05:29 - 11406848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-01-05 01:44 - 2010-09-01 05:23 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-01-05 01:43 - 2013-03-19 07:19 - 05497688 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-01-05 01:43 - 2013-03-19 06:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-01-05 01:43 - 2013-03-19 06:06 - 03958120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-01-05 01:43 - 2013-03-19 06:06 - 03902312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-01-05 01:43 - 2013-03-19 05:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-01-05 01:43 - 2013-03-19 04:19 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-01-05 01:43 - 2012-05-14 06:20 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-01-05 01:43 - 2011-11-17 08:14 - 01739160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-01-05 01:43 - 2011-11-17 06:41 - 01292592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-01-05 01:43 - 2011-10-15 07:25 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2014-01-05 01:43 - 2011-10-15 06:48 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2014-01-05 01:43 - 2011-08-27 06:40 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-01-05 01:43 - 2011-08-27 06:40 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2014-01-05 01:43 - 2011-08-27 05:43 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-01-05 01:43 - 2011-08-27 05:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2014-01-05 01:42 - 2012-06-02 06:25 - 01462784 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-01-05 01:42 - 2012-06-02 06:25 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-01-05 01:42 - 2012-06-02 06:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-01-05 01:42 - 2012-06-02 05:45 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-01-05 01:42 - 2012-06-02 05:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2014-01-05 01:42 - 2012-06-02 05:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2014-01-05 01:42 - 2011-11-19 16:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-01-05 01:42 - 2011-11-19 15:06 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-01-05 01:42 - 2010-10-16 06:17 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2014-01-05 01:42 - 2010-10-16 05:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll 2014-01-05 01:42 - 2010-08-27 07:14 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2014-01-05 01:42 - 2010-08-27 06:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll 2014-01-05 01:35 - 2012-02-15 07:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-01-05 01:35 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-01-05 01:35 - 2012-02-15 05:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-01-05 01:33 - 2014-01-07 16:50 - 00000000 ____D C:\Users\JUPA\Erst 2014-01-04 23:34 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-01-04 23:34 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-01-04 23:34 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-01-04 23:34 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-01-04 23:33 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-01-04 23:33 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-01-04 23:33 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-01-04 23:33 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-01-04 23:33 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-01-04 23:12 - 2014-01-04 23:12 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm(1).zip 2014-01-04 23:08 - 2013-08-27 09:35 - 00778019 ____R C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx+sm.xpi 2014-01-04 23:07 - 2014-01-04 23:07 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm.zip 2014-01-04 21:06 - 2014-01-04 21:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-04 21:06 - 2014-01-04 21:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\system32\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Macromedia 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Adobe 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Local\Macromedia 2014-01-04 20:14 - 2014-01-04 20:41 - 00000000 ____D C:\Windows\pss 2014-01-04 19:12 - 2014-01-04 19:14 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Mozilla 2014-01-04 19:12 - 2014-01-04 19:14 - 00000000 ____D C:\Users\JUPA\AppData\Local\Mozilla 2014-01-04 19:11 - 2014-01-05 09:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-04 19:11 - 2014-01-04 19:11 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\ProgramData\Mozilla 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 18:51 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Local\Adobe 2014-01-04 18:47 - 2014-01-05 09:30 - 00112176 _____ C:\Users\JUPA\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-04 18:47 - 2014-01-05 08:59 - 00001443 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-04 18:47 - 2014-01-05 08:59 - 00001409 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-04 18:47 - 2014-01-05 08:59 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-04 18:47 - 2014-01-05 08:59 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-04 18:47 - 2014-01-04 18:47 - 00000000 ____D C:\Users\JUPA\AppData\Local\Power2Go 2014-01-04 18:46 - 2014-01-07 20:54 - 00002288 _____ C:\Users\JUPA\Desktop\Lenovo Rescue System.lnk 2014-01-04 18:46 - 2014-01-05 18:38 - 00000000 ____D C:\Users\JUPA 2014-01-04 18:46 - 2014-01-04 18:47 - 00000000 ____D C:\Users\JUPA\AppData\Local\VirtualStore 2014-01-04 18:46 - 2014-01-04 18:46 - 00000020 ___SH C:\Users\JUPA\ntuser.ini 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Vorlagen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Startmenü 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Netzwerkumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Lokale Einstellungen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Eigene Dateien 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Druckumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Musik 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Bilder 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Verlauf 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Anwendungsdaten 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Anwendungsdaten 2014-01-04 18:46 - 2010-04-10 13:01 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2014-01-04 18:46 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-01-04 18:46 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-01-04 18:45 - 2014-01-04 20:35 - 00000000 ____D C:\Recovery 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Favoriten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Dokumente 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Dokumente und Einstellungen ==================== One Month Modified Files and Folders ======= 2014-01-11 00:36 - 2014-01-11 00:36 - 00005401 _____ C:\Users\JUPA\Desktop\FRST.txt 2014-01-11 00:36 - 2014-01-11 00:36 - 00000000 ____D C:\Users\JUPA\Desktop\FRST-OlderVersion 2014-01-11 00:36 - 2014-01-08 10:23 - 00000000 ____D C:\FRST 2014-01-11 00:36 - 2014-01-08 10:21 - 01932166 _____ (Farbar) C:\Users\JUPA\Desktop\FRST64.exe 2014-01-11 00:35 - 2014-01-11 00:35 - 00001482 _____ C:\Users\JUPA\Desktop\JRT.txt 2014-01-11 00:26 - 2014-01-11 00:26 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 00:25 - 2014-01-11 00:25 - 01037068 _____ (Thisisu) C:\Users\JUPA\Desktop\JRT.exe 2014-01-11 00:21 - 2014-01-11 00:14 - 00000000 ____D C:\AdwCleaner 2014-01-11 00:16 - 2010-04-10 13:56 - 00637948 _____ C:\Windows\PFRO.log 2014-01-11 00:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-11 00:15 - 2009-07-14 05:51 - 00023633 _____ C:\Windows\setupact.log 2014-01-11 00:14 - 2014-01-11 00:14 - 01233962 _____ C:\Users\JUPA\Desktop\adwcleaner.exe 2014-01-11 00:04 - 2014-01-11 00:04 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Malwarebytes 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-11 00:03 - 2014-01-11 00:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\JUPA\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-09 23:23 - 2010-04-10 10:38 - 01869061 _____ C:\Windows\WindowsUpdate.log 2014-01-09 23:06 - 2014-01-09 22:49 - 00000000 ____D C:\ComboFix 2014-01-09 23:04 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2014-01-09 23:02 - 2014-01-09 22:33 - 00000000 ____D C:\Windows\erdnt 2014-01-09 23:02 - 2009-07-14 03:34 - 58195968 _____ C:\Windows\system32\config\SOFTWARE.bak 2014-01-09 23:02 - 2009-07-14 03:34 - 20971520 _____ C:\Windows\system32\config\SYSTEM.bak 2014-01-09 23:02 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak 2014-01-09 23:02 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak 2014-01-09 23:02 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\DEFAULT.bak 2014-01-09 22:40 - 2014-01-09 22:33 - 00000000 ____D C:\Qoobox 2014-01-09 22:31 - 2014-01-09 22:31 - 05162489 ____R (Swearware) C:\Users\JUPA\Desktop\ComboFix.exe 2014-01-07 20:54 - 2014-01-04 18:46 - 00002288 _____ C:\Users\JUPA\Desktop\Lenovo Rescue System.lnk 2014-01-07 20:48 - 2009-07-14 18:58 - 00710898 _____ C:\Windows\system32\perfh007.dat 2014-01-07 20:48 - 2009-07-14 18:58 - 00153326 _____ C:\Windows\system32\perfc007.dat 2014-01-07 20:48 - 2009-07-14 06:13 - 01645946 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-07 19:45 - 2014-01-05 18:38 - 00000000 ____D C:\Users\JUPA\dwhelper 2014-01-07 17:41 - 2014-01-07 16:48 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Nico Mak Computing 2014-01-07 16:50 - 2014-01-05 01:33 - 00000000 ____D C:\Users\JUPA\Erst 2014-01-07 16:48 - 2014-01-07 16:47 - 04892480 _____ (WinZip International LLC ) C:\Users\JUPA\Downloads\wzmp_8.exe 2014-01-06 19:57 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-06 19:57 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-06 19:23 - 2014-01-06 19:21 - 48524296 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\NetFx20SP2_x64.exe 2014-01-06 19:11 - 2014-01-06 19:11 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1).zip 2014-01-06 19:11 - 2014-01-06 19:11 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1) 2014-01-06 19:06 - 2014-01-06 19:06 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool.zip 2014-01-06 19:06 - 2014-01-06 19:06 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool 2014-01-06 17:41 - 2010-04-10 12:46 - 00000000 ____D C:\Windows\SysWOW64\NV 2014-01-06 17:41 - 2010-04-10 12:46 - 00000000 ____D C:\Windows\system32\NV 2014-01-05 18:38 - 2014-01-04 18:46 - 00000000 ____D C:\Users\JUPA 2014-01-05 17:54 - 2014-01-05 17:54 - 00000134 _____ C:\Users\JUPA\Desktop\Microsoft Fix*it.url 2014-01-05 17:11 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System 2014-01-05 14:39 - 2014-01-05 14:39 - 00000000 ____D C:\Users\JUPA\Documents\FormatFactory 2014-01-05 13:59 - 2014-01-05 13:59 - 00347816 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\MicrosoftFixit.wu.LB.63312353662502285.1.1.Run.exe 2014-01-05 13:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2014-01-05 12:26 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2014-01-05 11:05 - 2014-01-05 02:20 - 00260606 _____ C:\Windows\msxml4-KB2758694-enu.LOG 2014-01-05 10:30 - 2014-01-05 10:30 - 00000000 ____D C:\Users\JUPA\Documents\InterVideo 2014-01-05 09:48 - 2014-01-04 19:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-05 09:47 - 2014-01-05 09:47 - 00001202 _____ C:\Users\JUPA\Desktop\Format Factory.lnk 2014-01-05 09:47 - 2014-01-05 09:47 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-05 09:45 - 2014-01-05 09:45 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-05 09:42 - 2014-01-05 09:38 - 61746584 _____ (Free Time) C:\Users\JUPA\Downloads\FFSetup3.2.1.0.exe 2014-01-05 09:31 - 2014-01-05 09:31 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-01-05 09:31 - 2014-01-05 09:29 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\DVDVideoSoft 2014-01-05 09:30 - 2014-01-05 09:30 - 00001536 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2014-01-05 09:30 - 2014-01-05 09:30 - 00001243 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-05 09:30 - 2014-01-05 09:29 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2014-01-05 09:30 - 2014-01-04 18:47 - 00112176 _____ C:\Users\JUPA\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-05 09:20 - 2014-01-05 09:18 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\JUPA\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe 2014-01-05 08:59 - 2014-01-04 18:47 - 00001443 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-05 08:59 - 2014-01-04 18:47 - 00001409 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-05 08:59 - 2014-01-04 18:47 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-05 08:59 - 2014-01-04 18:47 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-05 08:58 - 2010-04-10 12:38 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-05 08:55 - 2009-07-14 05:45 - 00431744 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-05 08:50 - 2009-07-14 19:18 - 00000000 ____D C:\Program Files\Windows Journal 2014-01-05 03:23 - 2014-01-05 03:17 - 00004599 _____ C:\Windows\IE9_main.log 2014-01-05 03:20 - 2014-01-05 03:20 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-05 02:33 - 2010-04-10 12:37 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2014-01-05 02:33 - 2010-04-10 12:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2014-01-05 02:30 - 2014-01-05 02:30 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2014-01-05 02:28 - 2014-01-05 02:26 - 00000000 ____D C:\Windows\system32\MRT 2014-01-05 00:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2014-01-04 23:12 - 2014-01-04 23:12 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm(1).zip 2014-01-04 23:07 - 2014-01-04 23:07 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm.zip 2014-01-04 21:06 - 2014-01-04 21:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-04 21:06 - 2014-01-04 21:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\system32\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Macromedia 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Adobe 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Local\Macromedia 2014-01-04 21:06 - 2014-01-04 18:51 - 00000000 ____D C:\Users\JUPA\AppData\Local\Adobe 2014-01-04 21:03 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries 2014-01-04 20:41 - 2014-01-04 20:14 - 00000000 ____D C:\Windows\pss 2014-01-04 20:35 - 2014-01-04 18:45 - 00000000 ____D C:\Recovery 2014-01-04 19:20 - 2010-04-10 12:48 - 00000000 ____D C:\ProgramData\McAfee 2014-01-04 19:14 - 2014-01-04 19:12 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Mozilla 2014-01-04 19:14 - 2014-01-04 19:12 - 00000000 ____D C:\Users\JUPA\AppData\Local\Mozilla 2014-01-04 19:11 - 2014-01-04 19:11 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\ProgramData\Mozilla 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 18:47 - 2014-01-04 18:47 - 00000000 ____D C:\Users\JUPA\AppData\Local\Power2Go 2014-01-04 18:47 - 2014-01-04 18:46 - 00000000 ____D C:\Users\JUPA\AppData\Local\VirtualStore 2014-01-04 18:46 - 2014-01-04 18:46 - 00000020 ___SH C:\Users\JUPA\ntuser.ini 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Vorlagen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Startmenü 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Netzwerkumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Lokale Einstellungen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Eigene Dateien 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Druckumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Musik 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Bilder 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Verlauf 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Anwendungsdaten 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Anwendungsdaten 2014-01-04 18:46 - 2010-04-10 13:25 - 00000000 ____D C:\Program Files (x86)\Windows Live 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Favoriten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Dokumente 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Dokumente und Einstellungen 2014-01-04 18:45 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default 2014-01-04 18:45 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Recovery 2014-01-04 18:45 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT Some content of TEMP: ==================== C:\Users\JUPA\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-04 19:09 ==================== End Of Log ============================ In der Hoffnung alle Anforderung erfüllt zu haben. |
11.01.2014, 15:26 | #8 |
/// the machine /// TB-Ausbilder | Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten ModusESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
11.01.2014, 17:32 | #9 |
| Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus Hi Schrauber, anbei die Logs, zur Frage mit den Problemen, ja leider. Es besteht nach wie vor das Problem, dass ich nur im abgesicherten Modus arbeiten kann. Bei einem normalen Windows Start bleibt der monitor schwarz. Es gibt zwar ein akustisches Plong (wie bei einer Fehlermeldung) leider kann ich diese nicht sehen, da der Bildschirm schwarz bleibt. ESET Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=cf0fa9198c594347a5ab0581e4000326 # engine=16616 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-11 04:09:48 # local_time=2014-01-11 05:09:48 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7600 NT # compatibility_mode=5893 16776573 100 94 153953 141862259 0 0 # scanned=122427 # found=0 # cleaned=0 # scan_time=4718 Code:
ATTFilter Results of screen317's Security Check version 0.99.78 Windows 7 x64 (UAC is enabled) Out of date service pack!! Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Security Center service is not running! This report may not be accurate! Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Flash Player 11.9.900.170 Mozilla Firefox (26.0) ````````Process Check: objlist.exe by Laurent```````` `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2014 03 Ran by JUPA (administrator) on JUPA-PC on 11-01-2014 17:21:29 Running from C:\Users\JUPA\Desktop Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Safe Mode (with Networking) ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Verigesture] - C:\Program Files (x86)\Lenovo\Lenovo VeriTouch\Verigesture Dashboard.exe [1199504 2009-11-23] (Lenovo) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2009-12-03] (Realtek Semiconductor) HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [jmekey] - C:\Program Files (x86)\jmesoft\hotkey.exe [114688 2009-07-16] (JME) HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-04] (CyberLink) HKLM\...\Runonce: [GrpConv] - grpconv -o HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKLM-x32\...\Runonce: [ Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [x] Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\RunOnce: [Report] - C:\AdwCleaner\AdwCleaner[S0].txt [3207 2014-01-11] () HKU\Default\...\RunOnce: [WLStart] - C:\Program Files (x86)\Windows Live\Installer\wlstart.exe [786760 2009-07-26] (Microsoft Corporation) HKU\Default User\...\RunOnce: [WLStart] - C:\Program Files (x86)\Windows Live\Installer\wlstart.exe [786760 2009-07-26] (Microsoft Corporation) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [247144 2012-10-25] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [202600 2012-10-25] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKLM-x32 - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\JUPA\AppData\Roaming\Mozilla\Firefox\Profiles\fru8xqns.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\JUPA\AppData\Roaming\Mozilla\Firefox\Profiles\fru8xqns.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-04] FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ [] ==================== Services (Whitelisted) ================= S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29263712 2008-11-24] (Microsoft Corporation) S2 clr_optimization_v4.0.30319_32; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [x] S2 clr_optimization_v4.0.30319_64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] ==================== Drivers (Whitelisted) ==================== R3 FEIExpress; C:\Windows\System32\DRIVERS\fei62x64.sys [187392 2009-10-02] (Intel Corporation) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-11 17:21 - 2014-01-11 17:21 - 00000496 _____ C:\Users\JUPA\Desktop\FRST.txt 2014-01-11 17:16 - 2014-01-11 17:16 - 00000916 _____ C:\Users\JUPA\Desktop\checkup.txt 2014-01-11 17:14 - 2014-01-11 17:14 - 00987410 _____ C:\Users\JUPA\Desktop\SecurityCheck.exe 2014-01-11 15:46 - 2014-01-11 15:47 - 02347384 _____ (ESET) C:\Users\JUPA\Downloads\esetsmartinstaller_enu.exe 2014-01-11 00:36 - 2014-01-11 17:21 - 00000000 ____D C:\Users\JUPA\Desktop\FRST-OlderVersion 2014-01-11 00:26 - 2014-01-11 00:26 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 00:25 - 2014-01-11 00:25 - 01037068 _____ (Thisisu) C:\Users\JUPA\Desktop\JRT.exe 2014-01-11 00:14 - 2014-01-11 00:21 - 00000000 ____D C:\AdwCleaner 2014-01-11 00:14 - 2014-01-11 00:14 - 01233962 _____ C:\Users\JUPA\Desktop\adwcleaner.exe 2014-01-11 00:04 - 2014-01-11 00:04 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Malwarebytes 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-11 00:04 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-11 00:03 - 2014-01-11 00:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\JUPA\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-09 22:50 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2014-01-09 22:50 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2014-01-09 22:50 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-01-09 22:50 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-01-09 22:50 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-01-09 22:50 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2014-01-09 22:50 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2014-01-09 22:50 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2014-01-09 22:49 - 2014-01-09 23:06 - 00000000 ____D C:\ComboFix 2014-01-09 22:33 - 2014-01-09 23:02 - 00000000 ____D C:\Windows\erdnt 2014-01-09 22:33 - 2014-01-09 22:40 - 00000000 ____D C:\Qoobox 2014-01-09 22:31 - 2014-01-09 22:31 - 05162489 ____R (Swearware) C:\Users\JUPA\Desktop\ComboFix.exe 2014-01-08 10:23 - 2014-01-11 17:21 - 00000000 ____D C:\FRST 2014-01-08 10:21 - 2014-01-11 17:21 - 02076160 _____ (Farbar) C:\Users\JUPA\Desktop\FRST64.exe 2014-01-07 16:48 - 2014-01-07 17:41 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Nico Mak Computing 2014-01-07 16:47 - 2014-01-07 16:48 - 04892480 _____ (WinZip International LLC ) C:\Users\JUPA\Downloads\wzmp_8.exe 2014-01-06 19:21 - 2014-01-06 19:23 - 48524296 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\NetFx20SP2_x64.exe 2014-01-06 19:11 - 2014-01-06 19:11 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1).zip 2014-01-06 19:11 - 2014-01-06 19:11 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1) 2014-01-06 19:06 - 2014-01-06 19:06 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool.zip 2014-01-06 19:06 - 2014-01-06 19:06 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool 2014-01-05 18:38 - 2014-01-07 19:45 - 00000000 ____D C:\Users\JUPA\dwhelper 2014-01-05 17:54 - 2014-01-05 17:54 - 00000134 _____ C:\Users\JUPA\Desktop\Microsoft Fix*it.url 2014-01-05 14:39 - 2014-01-05 14:39 - 00000000 ____D C:\Users\JUPA\Documents\FormatFactory 2014-01-05 13:59 - 2014-01-05 13:59 - 00347816 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\MicrosoftFixit.wu.LB.63312353662502285.1.1.Run.exe 2014-01-05 11:03 - 2011-02-19 07:37 - 01135104 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-01-05 10:30 - 2014-01-05 10:30 - 00000000 ____D C:\Users\JUPA\Documents\InterVideo 2014-01-05 09:47 - 2014-01-05 09:47 - 00001202 _____ C:\Users\JUPA\Desktop\Format Factory.lnk 2014-01-05 09:47 - 2014-01-05 09:47 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-05 09:45 - 2014-01-05 09:45 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-05 09:38 - 2014-01-05 09:42 - 61746584 _____ (Free Time) C:\Users\JUPA\Downloads\FFSetup3.2.1.0.exe 2014-01-05 09:31 - 2014-01-05 09:31 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-01-05 09:30 - 2014-01-05 09:30 - 00001536 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2014-01-05 09:30 - 2014-01-05 09:30 - 00001243 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-05 09:29 - 2014-01-05 09:31 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\DVDVideoSoft 2014-01-05 09:29 - 2014-01-05 09:30 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2014-01-05 09:18 - 2014-01-05 09:20 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\JUPA\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe 2014-01-05 05:09 - 2010-09-14 07:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2014-01-05 05:09 - 2010-09-14 07:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll 2014-01-05 04:03 - 2012-07-26 05:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-01-05 04:03 - 2012-07-26 05:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-01-05 04:03 - 2012-07-26 03:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2014-01-05 04:03 - 2012-06-02 15:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2014-01-05 03:27 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-05 03:17 - 2014-01-05 03:23 - 00004599 _____ C:\Windows\IE9_main.log 2014-01-05 02:52 - 2012-12-16 17:52 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-01-05 02:52 - 2012-12-16 15:40 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-01-05 02:52 - 2012-12-16 15:25 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-01-05 02:52 - 2012-12-16 15:25 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-01-05 02:50 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-01-05 02:50 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-01-05 02:50 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-01-05 02:50 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-01-05 02:50 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-01-05 02:32 - 2012-10-25 20:02 - 00060776 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-01-05 02:32 - 2012-10-25 20:02 - 00052584 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-01-05 02:30 - 2014-01-05 02:30 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2014-01-05 02:26 - 2014-01-05 02:28 - 00000000 ____D C:\Windows\system32\MRT 2014-01-05 02:26 - 2013-12-01 14:42 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-05 02:25 - 2012-03-01 07:54 - 00022896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2014-01-05 02:25 - 2012-03-01 07:40 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-01-05 02:25 - 2012-03-01 07:35 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2014-01-05 02:25 - 2012-03-01 06:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-01-05 02:25 - 2012-03-01 06:40 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2014-01-05 02:20 - 2014-01-05 11:05 - 00260606 _____ C:\Windows\msxml4-KB2758694-enu.LOG 2014-01-05 02:19 - 2010-03-04 05:40 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-01-05 02:19 - 2010-03-04 05:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2014-01-05 02:16 - 2013-02-12 16:42 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-01-05 02:16 - 2013-02-12 16:37 - 03138048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-01-05 02:16 - 2013-02-12 16:31 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2014-01-05 02:16 - 2013-02-12 16:13 - 02691072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-01-05 02:16 - 2013-02-12 16:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2014-01-05 02:16 - 2013-02-12 14:59 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-01-05 02:16 - 2012-12-07 06:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-01-05 02:16 - 2012-12-07 06:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-01-05 02:16 - 2012-12-07 06:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2014-01-05 02:16 - 2012-12-07 05:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2014-01-05 02:16 - 2012-12-07 04:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2014-01-05 02:16 - 2012-12-07 04:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2014-01-05 02:16 - 2012-12-07 04:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2014-01-05 02:16 - 2011-03-11 07:19 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2014-01-05 02:16 - 2011-03-11 07:19 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2014-01-05 02:16 - 2011-03-11 06:40 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll 2014-01-05 02:16 - 2011-03-11 06:40 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll 2014-01-05 02:16 - 2010-12-23 07:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2014-01-05 02:16 - 2010-12-23 07:07 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2014-01-05 02:16 - 2010-12-23 07:02 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2014-01-05 02:16 - 2010-12-23 06:28 - 00850432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll 2014-01-05 02:16 - 2010-12-23 06:28 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll 2014-01-05 02:16 - 2010-12-23 06:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax 2014-01-05 02:13 - 2012-06-09 06:30 - 14165504 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-01-05 02:13 - 2012-06-09 05:46 - 12868608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-01-05 02:13 - 2012-01-04 10:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2014-01-05 02:13 - 2012-01-04 10:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2014-01-05 02:13 - 2011-04-27 03:57 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2014-01-05 02:12 - 2013-04-12 15:36 - 01653096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-01-05 02:12 - 2013-03-01 04:32 - 03150848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-05 02:12 - 2012-11-09 06:34 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-01-05 02:12 - 2012-11-09 05:49 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2014-01-05 02:12 - 2012-11-02 06:30 - 02001408 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-01-05 02:12 - 2012-11-02 06:30 - 01880064 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-01-05 02:12 - 2012-11-02 05:50 - 01388544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-01-05 02:12 - 2012-11-02 05:50 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 01837568 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-01-05 02:12 - 2012-03-03 07:29 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 01074176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-01-05 02:12 - 2012-03-03 06:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-01-05 02:12 - 2011-11-17 08:12 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2014-01-05 02:12 - 2011-11-17 06:39 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2014-01-05 02:12 - 2011-05-04 06:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2014-01-05 02:12 - 2011-05-04 06:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2014-01-05 02:12 - 2011-05-04 06:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2014-01-05 02:12 - 2011-05-04 06:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2014-01-05 02:12 - 2011-05-04 06:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2014-01-05 02:12 - 2011-05-04 05:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2014-01-05 02:12 - 2011-05-04 05:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2014-01-05 02:12 - 2011-05-04 05:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2014-01-05 02:12 - 2011-05-04 05:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2014-01-05 02:12 - 2011-05-04 05:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2014-01-05 02:12 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-01-05 02:12 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-01-05 02:12 - 2011-03-12 13:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-01-05 02:12 - 2011-03-12 12:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll 2014-01-05 02:12 - 2010-12-21 07:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2014-01-05 02:12 - 2010-12-21 07:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2014-01-05 02:12 - 2010-12-21 07:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2014-01-05 02:12 - 2010-12-21 07:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll 2014-01-05 02:12 - 2010-12-21 06:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll 2014-01-05 02:12 - 2010-12-21 06:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-01-05 02:12 - 2010-11-02 06:18 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2014-01-05 02:12 - 2010-11-02 06:17 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2014-01-05 02:12 - 2010-11-02 06:17 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2014-01-05 02:12 - 2010-11-02 06:16 - 01114624 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-01-05 02:12 - 2010-11-02 06:10 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2014-01-05 02:12 - 2010-11-02 06:10 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2014-01-05 02:12 - 2010-11-02 05:40 - 00496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll 2014-01-05 02:12 - 2010-11-02 05:40 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll 2014-01-05 02:12 - 2010-11-02 05:34 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe 2014-01-05 02:12 - 2010-11-02 05:34 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe 2014-01-05 02:12 - 2010-05-05 08:37 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2014-01-05 02:12 - 2010-05-05 07:46 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2014-01-05 02:11 - 2012-11-09 06:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-01-05 02:11 - 2012-11-09 05:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-01-05 02:11 - 2012-01-03 07:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2014-01-05 02:11 - 2012-01-03 06:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2014-01-05 02:11 - 2011-10-26 06:22 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2014-01-05 02:11 - 2011-10-26 06:22 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-01-05 02:11 - 2011-10-26 05:28 - 01328640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2014-01-05 02:11 - 2011-10-26 05:28 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-01-05 02:11 - 2011-07-09 03:44 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2014-01-05 02:11 - 2011-06-16 06:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2014-01-05 02:11 - 2011-06-16 05:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2014-01-05 02:11 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2014-01-05 02:11 - 2011-06-15 10:04 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2014-01-05 02:11 - 2011-05-04 03:51 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-01-05 02:11 - 2011-05-04 03:51 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-01-05 02:11 - 2011-04-22 21:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-01-05 02:11 - 2011-02-24 07:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-01-05 02:11 - 2011-02-24 06:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-01-05 02:11 - 2010-08-26 06:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2014-01-05 02:11 - 2010-08-26 05:39 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll 2014-01-05 02:11 - 2010-08-21 07:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-01-05 02:11 - 2010-08-21 06:33 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-01-05 02:10 - 2013-01-04 06:41 - 01893224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-01-05 02:10 - 2013-01-04 06:40 - 00287576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-01-05 02:10 - 2013-01-04 06:30 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-01-05 02:10 - 2013-01-04 06:30 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-01-05 02:10 - 2012-08-11 01:53 - 00714752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-01-05 02:10 - 2012-08-11 00:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-01-05 02:10 - 2012-06-02 06:38 - 00152432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-01-05 02:10 - 2012-06-02 06:38 - 00095088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-01-05 02:10 - 2012-06-02 06:37 - 00459216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-01-05 02:10 - 2012-06-02 06:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-01-05 02:10 - 2012-06-02 05:48 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-01-05 02:10 - 2012-06-02 05:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-01-05 02:10 - 2012-06-02 05:42 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-01-05 02:10 - 2012-04-28 04:50 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-01-05 02:10 - 2012-04-26 06:34 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2014-01-05 02:10 - 2012-04-26 06:34 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2014-01-05 02:10 - 2012-04-26 06:28 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2014-01-05 02:10 - 2012-03-17 08:55 - 00075632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2014-01-05 02:10 - 2011-12-28 04:59 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-01-05 02:10 - 2011-11-17 08:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-01-05 02:10 - 2011-11-17 08:11 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-01-05 02:10 - 2011-11-17 08:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-01-05 02:10 - 2011-11-17 08:08 - 01446912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-01-05 02:10 - 2011-11-17 08:05 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-01-05 02:10 - 2011-04-29 04:13 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-01-05 02:10 - 2011-04-29 04:12 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-01-05 02:10 - 2011-04-29 04:12 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-01-05 02:10 - 2011-01-26 07:53 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-01-05 02:10 - 2011-01-26 07:53 - 00265088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-01-05 02:10 - 2011-01-26 07:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-01-05 02:10 - 2010-11-02 06:18 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2014-01-05 02:10 - 2010-11-02 05:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll 2014-01-05 02:10 - 2010-08-31 05:32 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll 2014-01-05 02:10 - 2010-08-31 05:32 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll 2014-01-05 02:10 - 2010-06-26 06:31 - 01863680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2014-01-05 02:10 - 2010-06-26 06:14 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2014-01-05 02:10 - 2010-05-23 11:15 - 01619456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-01-05 02:10 - 2010-05-23 11:11 - 03181568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-01-05 02:10 - 2010-05-23 11:11 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2014-01-05 02:10 - 2010-05-23 09:37 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-01-05 02:10 - 2010-05-23 09:35 - 04068864 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-01-05 02:10 - 2010-05-23 09:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2014-01-05 02:10 - 2010-05-23 09:35 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-01-05 02:10 - 2010-03-03 00:24 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe 2014-01-05 02:10 - 2010-03-03 00:24 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll 2014-01-05 02:10 - 2010-03-03 00:23 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2014-01-05 02:10 - 2010-03-03 00:23 - 00109928 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2014-01-05 02:09 - 2013-02-12 15:02 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-01-05 02:09 - 2013-01-04 06:37 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-01-05 02:09 - 2013-01-04 06:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-01-05 02:09 - 2013-01-04 06:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-01-05 02:09 - 2013-01-04 06:36 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-01-05 02:09 - 2013-01-04 06:33 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:51 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-01-05 02:09 - 2013-01-04 05:51 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-01-05 02:09 - 2013-01-04 05:51 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 04:19 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-01-05 02:09 - 2013-01-04 03:48 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-01-05 02:09 - 2013-01-04 03:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-01-05 02:09 - 2013-01-04 03:48 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-01-05 02:09 - 2013-01-04 03:48 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-01-05 02:09 - 2013-01-04 03:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 03:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 03:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-01-05 02:09 - 2013-01-04 03:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-01-05 02:09 - 2012-11-22 11:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-01-05 02:09 - 2012-11-22 10:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-01-05 02:09 - 2012-11-20 06:55 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-01-05 02:09 - 2012-11-20 06:10 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-01-05 02:09 - 2012-11-02 06:27 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-01-05 02:09 - 2012-11-02 05:48 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2014-01-05 02:09 - 2012-09-25 23:39 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2014-01-05 02:09 - 2012-09-25 22:55 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2014-01-05 02:09 - 2012-09-06 18:38 - 00295792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-01-05 02:09 - 2012-08-24 19:05 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-01-05 02:09 - 2012-08-24 18:10 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-01-05 02:09 - 2012-08-02 18:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-01-05 02:09 - 2012-08-02 18:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-01-05 02:09 - 2012-05-02 06:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-01-05 02:09 - 2012-04-07 13:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-01-05 02:09 - 2012-04-07 12:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-01-05 02:09 - 2011-08-17 06:32 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2014-01-05 02:09 - 2011-08-17 06:27 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2014-01-05 02:09 - 2011-08-17 06:27 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2014-01-05 02:09 - 2011-08-17 06:27 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2014-01-05 02:09 - 2011-08-17 06:27 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2014-01-05 02:09 - 2011-08-17 05:26 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2014-01-05 02:09 - 2011-08-17 05:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSNP.ax 2014-01-05 02:09 - 2011-08-17 05:22 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2014-01-05 02:09 - 2011-08-17 05:22 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mpeg2Data.ax 2014-01-05 02:09 - 2011-08-17 05:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSDvbNP.ax 2014-01-05 02:09 - 2011-03-03 07:17 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2014-01-05 02:09 - 2011-03-03 07:17 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2014-01-05 02:09 - 2011-03-03 07:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2014-01-05 02:09 - 2011-03-03 06:29 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2014-01-05 02:09 - 2011-03-03 06:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe 2014-01-05 02:09 - 2011-02-05 13:41 - 00640896 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2014-01-05 02:09 - 2011-02-05 13:41 - 00556928 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2014-01-05 02:09 - 2011-02-05 13:41 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2014-01-05 02:09 - 2011-02-05 13:41 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2014-01-05 02:09 - 2011-02-05 13:41 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2014-01-05 02:09 - 2011-02-05 13:39 - 00603976 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2014-01-05 02:09 - 2011-02-05 13:39 - 00518160 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2014-01-05 02:09 - 2010-08-21 07:38 - 01024512 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2014-01-05 02:09 - 2010-08-21 07:29 - 00558592 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-01-05 02:09 - 2010-08-21 06:36 - 00738816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll 2014-01-05 01:45 - 2011-05-24 12:21 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2014-01-05 01:45 - 2011-05-24 11:34 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2014-01-05 01:45 - 2011-05-24 11:34 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2014-01-05 01:45 - 2011-05-24 11:34 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2014-01-05 01:45 - 2011-05-24 11:32 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2014-01-05 01:45 - 2010-12-18 07:08 - 01097216 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-01-05 01:45 - 2010-12-18 06:26 - 01034240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-01-05 01:44 - 2013-01-24 06:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-01-05 01:44 - 2012-07-04 23:04 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2014-01-05 01:44 - 2012-07-04 23:01 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2014-01-05 01:44 - 2012-07-04 23:01 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2014-01-05 01:44 - 2012-07-04 22:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2014-01-05 01:44 - 2012-07-04 22:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2014-01-05 01:44 - 2012-05-05 09:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-01-05 01:44 - 2012-05-05 08:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2014-01-05 01:44 - 2011-12-16 09:42 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2014-01-05 01:44 - 2011-12-16 08:59 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2014-01-05 01:44 - 2011-05-03 06:21 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2014-01-05 01:44 - 2011-05-03 05:50 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2014-01-05 01:44 - 2011-02-23 06:15 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2014-01-05 01:44 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2014-01-05 01:44 - 2011-02-18 06:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2014-01-05 01:44 - 2011-02-12 07:14 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2014-01-05 01:44 - 2010-10-16 06:23 - 00112000 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-01-05 01:44 - 2010-09-01 06:21 - 14627840 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-01-05 01:44 - 2010-09-01 06:12 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-01-05 01:44 - 2010-09-01 05:29 - 11406848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-01-05 01:44 - 2010-09-01 05:23 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-01-05 01:43 - 2013-03-19 07:19 - 05497688 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-01-05 01:43 - 2013-03-19 06:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-01-05 01:43 - 2013-03-19 06:06 - 03958120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-01-05 01:43 - 2013-03-19 06:06 - 03902312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-01-05 01:43 - 2013-03-19 05:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-01-05 01:43 - 2013-03-19 04:19 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-01-05 01:43 - 2012-05-14 06:20 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-01-05 01:43 - 2011-11-17 08:14 - 01739160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-01-05 01:43 - 2011-11-17 06:41 - 01292592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-01-05 01:43 - 2011-10-15 07:25 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2014-01-05 01:43 - 2011-10-15 06:48 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2014-01-05 01:43 - 2011-08-27 06:40 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-01-05 01:43 - 2011-08-27 06:40 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2014-01-05 01:43 - 2011-08-27 05:43 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-01-05 01:43 - 2011-08-27 05:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2014-01-05 01:42 - 2012-06-02 06:25 - 01462784 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-01-05 01:42 - 2012-06-02 06:25 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-01-05 01:42 - 2012-06-02 06:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-01-05 01:42 - 2012-06-02 05:45 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-01-05 01:42 - 2012-06-02 05:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2014-01-05 01:42 - 2012-06-02 05:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2014-01-05 01:42 - 2011-11-19 16:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-01-05 01:42 - 2011-11-19 15:06 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-01-05 01:42 - 2010-10-16 06:17 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2014-01-05 01:42 - 2010-10-16 05:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll 2014-01-05 01:42 - 2010-08-27 07:14 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2014-01-05 01:42 - 2010-08-27 06:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll 2014-01-05 01:35 - 2012-02-15 07:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-01-05 01:35 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-01-05 01:35 - 2012-02-15 05:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-01-05 01:33 - 2014-01-07 16:50 - 00000000 ____D C:\Users\JUPA\Erst 2014-01-04 23:34 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-01-04 23:34 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-01-04 23:34 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-01-04 23:34 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-01-04 23:33 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-01-04 23:33 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-01-04 23:33 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-01-04 23:33 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-01-04 23:33 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-01-04 23:12 - 2014-01-04 23:12 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm(1).zip 2014-01-04 23:08 - 2013-08-27 09:35 - 00778019 ____R C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx+sm.xpi 2014-01-04 23:07 - 2014-01-04 23:07 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm.zip 2014-01-04 21:06 - 2014-01-04 21:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-04 21:06 - 2014-01-04 21:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\system32\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Macromedia 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Adobe 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Local\Macromedia 2014-01-04 20:14 - 2014-01-04 20:41 - 00000000 ____D C:\Windows\pss 2014-01-04 19:12 - 2014-01-04 19:14 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Mozilla 2014-01-04 19:12 - 2014-01-04 19:14 - 00000000 ____D C:\Users\JUPA\AppData\Local\Mozilla 2014-01-04 19:11 - 2014-01-05 09:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-04 19:11 - 2014-01-04 19:11 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\ProgramData\Mozilla 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 18:51 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Local\Adobe 2014-01-04 18:47 - 2014-01-05 09:30 - 00112176 _____ C:\Users\JUPA\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-04 18:47 - 2014-01-05 08:59 - 00001443 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-04 18:47 - 2014-01-05 08:59 - 00001409 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-04 18:47 - 2014-01-05 08:59 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-04 18:47 - 2014-01-05 08:59 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-04 18:47 - 2014-01-04 18:47 - 00000000 ____D C:\Users\JUPA\AppData\Local\Power2Go 2014-01-04 18:46 - 2014-01-11 17:21 - 00002288 _____ C:\Users\JUPA\Desktop\Lenovo Rescue System.lnk 2014-01-04 18:46 - 2014-01-05 18:38 - 00000000 ____D C:\Users\JUPA 2014-01-04 18:46 - 2014-01-04 18:47 - 00000000 ____D C:\Users\JUPA\AppData\Local\VirtualStore 2014-01-04 18:46 - 2014-01-04 18:46 - 00000020 ___SH C:\Users\JUPA\ntuser.ini 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Vorlagen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Startmenü 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Netzwerkumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Lokale Einstellungen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Eigene Dateien 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Druckumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Musik 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Bilder 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Verlauf 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Anwendungsdaten 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Anwendungsdaten 2014-01-04 18:46 - 2010-04-10 13:01 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2014-01-04 18:46 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-01-04 18:46 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-01-04 18:45 - 2014-01-04 20:35 - 00000000 ____D C:\Recovery 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Favoriten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Dokumente 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Dokumente und Einstellungen ==================== One Month Modified Files and Folders ======= 2014-01-11 17:21 - 2014-01-11 17:21 - 00000496 _____ C:\Users\JUPA\Desktop\FRST.txt 2014-01-11 17:21 - 2014-01-11 00:36 - 00000000 ____D C:\Users\JUPA\Desktop\FRST-OlderVersion 2014-01-11 17:21 - 2014-01-08 10:23 - 00000000 ____D C:\FRST 2014-01-11 17:21 - 2014-01-08 10:21 - 02076160 _____ (Farbar) C:\Users\JUPA\Desktop\FRST64.exe 2014-01-11 17:21 - 2014-01-04 18:46 - 00002288 _____ C:\Users\JUPA\Desktop\Lenovo Rescue System.lnk 2014-01-11 17:17 - 2010-04-10 13:56 - 00638782 _____ C:\Windows\PFRO.log 2014-01-11 17:17 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-11 17:17 - 2009-07-14 05:51 - 00023801 _____ C:\Windows\setupact.log 2014-01-11 17:16 - 2014-01-11 17:16 - 00000916 _____ C:\Users\JUPA\Desktop\checkup.txt 2014-01-11 17:14 - 2014-01-11 17:14 - 00987410 _____ C:\Users\JUPA\Desktop\SecurityCheck.exe 2014-01-11 15:47 - 2014-01-11 15:46 - 02347384 _____ (ESET) C:\Users\JUPA\Downloads\esetsmartinstaller_enu.exe 2014-01-11 10:15 - 2010-04-10 10:38 - 01869549 _____ C:\Windows\WindowsUpdate.log 2014-01-11 00:26 - 2014-01-11 00:26 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 00:25 - 2014-01-11 00:25 - 01037068 _____ (Thisisu) C:\Users\JUPA\Desktop\JRT.exe 2014-01-11 00:21 - 2014-01-11 00:14 - 00000000 ____D C:\AdwCleaner 2014-01-11 00:14 - 2014-01-11 00:14 - 01233962 _____ C:\Users\JUPA\Desktop\adwcleaner.exe 2014-01-11 00:04 - 2014-01-11 00:04 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Malwarebytes 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-11 00:04 - 2014-01-11 00:04 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-11 00:03 - 2014-01-11 00:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\JUPA\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-09 23:06 - 2014-01-09 22:49 - 00000000 ____D C:\ComboFix 2014-01-09 23:04 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2014-01-09 23:02 - 2014-01-09 22:33 - 00000000 ____D C:\Windows\erdnt 2014-01-09 23:02 - 2009-07-14 03:34 - 58195968 _____ C:\Windows\system32\config\SOFTWARE.bak 2014-01-09 23:02 - 2009-07-14 03:34 - 20971520 _____ C:\Windows\system32\config\SYSTEM.bak 2014-01-09 23:02 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak 2014-01-09 23:02 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak 2014-01-09 23:02 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\DEFAULT.bak 2014-01-09 22:40 - 2014-01-09 22:33 - 00000000 ____D C:\Qoobox 2014-01-09 22:31 - 2014-01-09 22:31 - 05162489 ____R (Swearware) C:\Users\JUPA\Desktop\ComboFix.exe 2014-01-07 20:48 - 2009-07-14 18:58 - 00710898 _____ C:\Windows\system32\perfh007.dat 2014-01-07 20:48 - 2009-07-14 18:58 - 00153326 _____ C:\Windows\system32\perfc007.dat 2014-01-07 20:48 - 2009-07-14 06:13 - 01645946 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-07 19:45 - 2014-01-05 18:38 - 00000000 ____D C:\Users\JUPA\dwhelper 2014-01-07 17:41 - 2014-01-07 16:48 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Nico Mak Computing 2014-01-07 16:50 - 2014-01-05 01:33 - 00000000 ____D C:\Users\JUPA\Erst 2014-01-07 16:48 - 2014-01-07 16:47 - 04892480 _____ (WinZip International LLC ) C:\Users\JUPA\Downloads\wzmp_8.exe 2014-01-06 19:57 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-06 19:57 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-06 19:23 - 2014-01-06 19:21 - 48524296 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\NetFx20SP2_x64.exe 2014-01-06 19:11 - 2014-01-06 19:11 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1).zip 2014-01-06 19:11 - 2014-01-06 19:11 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool(1) 2014-01-06 19:06 - 2014-01-06 19:06 - 00265750 _____ C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool.zip 2014-01-06 19:06 - 2014-01-06 19:06 - 00000000 ____D C:\Users\JUPA\Downloads\dotnetfx_cleanup_tool 2014-01-06 17:41 - 2010-04-10 12:46 - 00000000 ____D C:\Windows\SysWOW64\NV 2014-01-06 17:41 - 2010-04-10 12:46 - 00000000 ____D C:\Windows\system32\NV 2014-01-05 18:38 - 2014-01-04 18:46 - 00000000 ____D C:\Users\JUPA 2014-01-05 17:54 - 2014-01-05 17:54 - 00000134 _____ C:\Users\JUPA\Desktop\Microsoft Fix*it.url 2014-01-05 17:11 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System 2014-01-05 14:39 - 2014-01-05 14:39 - 00000000 ____D C:\Users\JUPA\Documents\FormatFactory 2014-01-05 13:59 - 2014-01-05 13:59 - 00347816 _____ (Microsoft Corporation) C:\Users\JUPA\Downloads\MicrosoftFixit.wu.LB.63312353662502285.1.1.Run.exe 2014-01-05 13:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2014-01-05 12:26 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2014-01-05 11:05 - 2014-01-05 02:20 - 00260606 _____ C:\Windows\msxml4-KB2758694-enu.LOG 2014-01-05 10:30 - 2014-01-05 10:30 - 00000000 ____D C:\Users\JUPA\Documents\InterVideo 2014-01-05 09:48 - 2014-01-04 19:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-05 09:47 - 2014-01-05 09:47 - 00001202 _____ C:\Users\JUPA\Desktop\Format Factory.lnk 2014-01-05 09:47 - 2014-01-05 09:47 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-05 09:45 - 2014-01-05 09:45 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-05 09:42 - 2014-01-05 09:38 - 61746584 _____ (Free Time) C:\Users\JUPA\Downloads\FFSetup3.2.1.0.exe 2014-01-05 09:31 - 2014-01-05 09:31 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-01-05 09:31 - 2014-01-05 09:29 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\DVDVideoSoft 2014-01-05 09:30 - 2014-01-05 09:30 - 00001536 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2014-01-05 09:30 - 2014-01-05 09:30 - 00001243 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-05 09:30 - 2014-01-05 09:29 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2014-01-05 09:30 - 2014-01-04 18:47 - 00112176 _____ C:\Users\JUPA\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-05 09:20 - 2014-01-05 09:18 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\JUPA\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe 2014-01-05 08:59 - 2014-01-04 18:47 - 00001443 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-05 08:59 - 2014-01-04 18:47 - 00001409 _____ C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-05 08:59 - 2014-01-04 18:47 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-05 08:59 - 2014-01-04 18:47 - 00000000 ___RD C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-05 08:58 - 2010-04-10 12:38 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-05 08:55 - 2009-07-14 05:45 - 00431744 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-05 08:50 - 2009-07-14 19:18 - 00000000 ____D C:\Program Files\Windows Journal 2014-01-05 03:23 - 2014-01-05 03:17 - 00004599 _____ C:\Windows\IE9_main.log 2014-01-05 03:20 - 2014-01-05 03:20 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-05 03:20 - 2014-01-05 03:20 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-05 03:20 - 2014-01-05 03:20 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-05 03:20 - 2014-01-05 03:20 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-05 03:20 - 2014-01-05 03:20 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-05 03:20 - 2014-01-05 03:20 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-05 03:20 - 2014-01-05 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-05 02:33 - 2010-04-10 12:37 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2014-01-05 02:33 - 2010-04-10 12:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2014-01-05 02:30 - 2014-01-05 02:30 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2014-01-05 02:28 - 2014-01-05 02:26 - 00000000 ____D C:\Windows\system32\MRT 2014-01-05 00:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2014-01-04 23:12 - 2014-01-04 23:12 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm(1).zip 2014-01-04 23:07 - 2014-01-04 23:07 - 00770279 _____ C:\Users\JUPA\Downloads\video_downloadhelper-4.9.21-fx_sm.zip 2014-01-04 21:06 - 2014-01-04 21:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-04 21:06 - 2014-01-04 21:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Windows\system32\Macromed 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Macromedia 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Adobe 2014-01-04 21:06 - 2014-01-04 21:06 - 00000000 ____D C:\Users\JUPA\AppData\Local\Macromedia 2014-01-04 21:06 - 2014-01-04 18:51 - 00000000 ____D C:\Users\JUPA\AppData\Local\Adobe 2014-01-04 21:03 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries 2014-01-04 20:41 - 2014-01-04 20:14 - 00000000 ____D C:\Windows\pss 2014-01-04 20:35 - 2014-01-04 18:45 - 00000000 ____D C:\Recovery 2014-01-04 19:20 - 2010-04-10 12:48 - 00000000 ____D C:\ProgramData\McAfee 2014-01-04 19:14 - 2014-01-04 19:12 - 00000000 ____D C:\Users\JUPA\AppData\Roaming\Mozilla 2014-01-04 19:14 - 2014-01-04 19:12 - 00000000 ____D C:\Users\JUPA\AppData\Local\Mozilla 2014-01-04 19:11 - 2014-01-04 19:11 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\ProgramData\Mozilla 2014-01-04 19:11 - 2014-01-04 19:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 18:47 - 2014-01-04 18:47 - 00000000 ____D C:\Users\JUPA\AppData\Local\Power2Go 2014-01-04 18:47 - 2014-01-04 18:46 - 00000000 ____D C:\Users\JUPA\AppData\Local\VirtualStore 2014-01-04 18:46 - 2014-01-04 18:46 - 00000020 ___SH C:\Users\JUPA\ntuser.ini 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Vorlagen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Startmenü 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Netzwerkumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Lokale Einstellungen 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Eigene Dateien 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Druckumgebung 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Musik 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Documents\Eigene Bilder 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Verlauf 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\AppData\Local\Anwendungsdaten 2014-01-04 18:46 - 2014-01-04 18:46 - 00000000 _SHDL C:\Users\JUPA\Anwendungsdaten 2014-01-04 18:46 - 2010-04-10 13:25 - 00000000 ____D C:\Program Files (x86)\Windows Live 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Programme 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Vorlagen 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Startmenü 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Favoriten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Dokumente 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2014-01-04 18:45 - 2014-01-04 18:45 - 00000000 _SHDL C:\Dokumente und Einstellungen 2014-01-04 18:45 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default 2014-01-04 18:45 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Recovery 2014-01-04 18:45 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT Some content of TEMP: ==================== C:\Users\JUPA\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-04 19:09 ==================== End Of Log ============================ |
12.01.2014, 08:40 | #10 |
/// the machine /// TB-Ausbilder | Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus Downloade dir bitte Windows Repair (All In One) von hier.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.01.2014, 10:44 | #11 |
| Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus Hallo Schrauber, Windows Repair ausgeführt. Zu Beginn (Step 2) kam eine Meckermeldung wegen dem abgesicherten Modus. Den habe ich einfach ignoriert und nach dem erzwungen Neustart bei Step 3 weitergemacht. Die Start Repairs (Reiter) Oberfläche sah etwas anders aus als auf Deinen Screenshots, habe versucht entsprechend der Vorgaben alles einzustellen, und hab es durchlaufen lassen. Der abschließende Neustart brachte keine Änderung, Monitor bleibt immernoch schwarz. Arbeiten nur im abgesicherten Modus möglich :-(. Ich habe dann noch einmal uber die Windows Repair Funktion das System starten wollen, Systemwiederherstellung immernoch inaktiv, Hinweis Meldung nach Fehlerdiagnose: "Das BS ist normal ohne Fehler gestartet......" |
13.01.2014, 09:38 | #12 |
/// the machine /// TB-Ausbilder | Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus Jetzt brauchen wir die WIndows DVD.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
13.01.2014, 19:31 | #13 |
| Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus Hi Schrauber, jetzt haben wir die Herausforderung. Eine DVD gibt es nicht, es ist ein Recovery Tool auf dem Desktop, und das startet nicht (mehr). Ich habe auch keinen Windows KEY, also bin ich auf dieses Recovery Tool angewiesen. Das bekomm ich nicht zum laufen, da er die Fehlermeldung mit den nicht geladenen Treibern beim Start bringt. OneKey App Lenovo Rescue System. |
14.01.2014, 10:15 | #14 | |
/// the machine /// TB-Ausbilder | Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten ModusZitat:
Schau mal auf der Unterseite des gerätes, ein ProduktKey-Aufkleber MUSS da sein.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.01.2014, 11:18 | #15 |
| Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus Hi Schrauber, Danke für Deine Geduld. Du hast vollkommen Recht, auf der Rückseite ist die Windows Serial (sorry). Die Meldung beim starten des Rescue lautet: "Treiberinitialisierung fehlgeschlagen, installieren Sie die Anwendung neu" Gruß Mike |
Themen zu Nach Windows Update läuft der PC (Monitor) nur noch im abgesicherten Modus |
antivir, avira, avira antivir, center, computerschutz, deaktiviert, desktop, fehlermeldung, firefox, folge, free, home, installation, monitor, mozilla, mp3, neustart, nicht mehr, system, update, updates, windows, windows update, windows updates, youtube, zugriff |