|
Log-Analyse und Auswertung: Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser StartWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
08.01.2014, 12:09 | #1 |
| Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start Hallo Betriebssystem Win7 Seit ein paar Tagen stürzt google Chrome bei fast jedem Start ab: Google Chrome ist abgestherzt. Bitte starten sie neu. auch die wlanverbindung ist grauenhaft was kann ich tun? DANKE |
08.01.2014, 12:47 | #2 |
/// the machine /// TB-Ausbilder | Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
09.01.2014, 08:56 | #3 |
| Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start FRST Logfile:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-01-2014 Ran by ASUS (administrator) on ASUS-PC on 08-01-2014 13:02:19 Running from C:\Users\ASUS\Downloads Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= ( Copyrighted © ) C:\Windows\SysWOW64\pupfzeq.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (NVIDIA Corporation) C:\Windows\SysWOW64\nvSCPAPISvr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (hxxp://simple-files.com/) C:\Program Files (x86)\SimpleFiles\SFUpdater.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (ATK) C:\Program Files\P4G\BatteryLife.exe (ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (GARMIN Corp.) C:\Program Files (x86)\Garmin\Training Center\gStart.exe (GARMIN Corp.) C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe (Dropbox, Inc.) C:\Users\ASUS\AppData\Roaming\Dropbox\bin\Dropbox.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (ASUS) C:\Windows\AsScrPro.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation) D:\Office2003\Office14\WINWORD.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.) HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.) HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6998656 2009-10-27] (ASUS) HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2009-08-20] (ASUS) HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SweetIM] - C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-10-04] (SweetIM Technologies Ltd.) HKLM-x32\...\Run: [Sweetpacks Communicator] - C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [231768 2012-08-15] (SweetIM Technologies Ltd.) HKLM-x32\...\Run: [BCSSync] - D:\Office2003\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG) HKCU\...\Run: [gStart] - C:\Program Files (x86)\Garmin\Training Center\gStart.exe [1891416 2008-08-13] (GARMIN Corp.) HKCU\...\Run: [ANT Agent] - C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe [14749544 2012-03-23] (GARMIN Corp.) HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKCU\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\ASUS\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l MountPoints2: {88626bc2-4238-11e3-a540-485b392e4fa6} - F:\start.exe /auto MountPoints2: {abeee6c9-6931-11e1-ad3d-485b392e4fa6} - F:\Startme.exe MountPoints2: {da536248-a058-11e2-8185-485b392e4fa6} - F:\AutoRun.exe MountPoints2: {da53625c-a058-11e2-8185-485b392e4fa6} - F:\AutoRun.exe HKU\Standart 1\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10c.exe [257440 2009-07-18] (Adobe Systems, Inc.) AppInit_DLLs: C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1317152 2013-12-16] (Conduit) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1009440 2013-12-16] (Conduit) Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\ASUS\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?ctid=CT3323737&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP323AF41B-730F-4CC7-A3E5-8CA4D9834A75&SSPV= HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x00CE9CA4E52BCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=94DE74F06D2B9306&affID=122920&tt=230713_18220&tsp=4953 StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3323737&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP323AF41B-730F-4CC7-A3E5-8CA4D9834A75&q={searchTerms}&SSPV= SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3323737&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP323AF41B-730F-4CC7-A3E5-8CA4D9834A75&q={searchTerms}&SSPV= SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=94DE74F06D2B9306&affID=122920&tt=230713_18220&tsp=4953 SearchScopes: HKCU - {2749005E-2445-460F-B027-7D8A2048F70B} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=94de9d6a00000000000074f06d2b9306&r=631 BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office2003\Office14\URLREDIR.DLL (Microsoft Corporation) Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 172.16.1.1 192.168.1.2 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_171.dll () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll () FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\OFFICE~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\OFFICE~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Movie2kDownloader - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\movie2kdownloader@movie2kdownloader.com.xpi FF Extension: DealPly - C:\Program Files (x86)\Mozilla Firefox\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon Chrome: ======= CHR HomePage: hxxp://search.conduit.com/?ctid=CT3323737&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP323AF41B-730F-4CC7-A3E5-8CA4D9834A75&SSPV= CHR RestoreOnStartup: "hxxp://search.conduit.com/?ctid=CT3323737&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP323AF41B-730F-4CC7-A3E5-8CA4D9834A75&SSPV=" CHR DefaultSearchKeyword: conduit.search CHR DefaultSearchProvider: Conduit Search CHR DefaultSearchURL: hxxp://search.conduit.com/Results.aspx?ctid=CT3323737&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP323AF41B-730F-4CC7-A3E5-8CA4D9834A75&q=%s&SSPV= CHR DefaultNewTabURL: CHR Extension: (Google Drive) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1 CHR Extension: (Google Search) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1 CHR Extension: (Google Wallet) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1 CHR Extension: (Gmail) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2 CHR HKLM-x32\...\Chrome\Extension: [blaofbhgbmeikidhlkmjhbkbfohpgekf] - C:\Program Files (x86)\Movie2KDownloader.com\Movie2KDownloader10.crx CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-22] (Avira Operations GmbH & Co. KG) R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2251552 2013-12-16] (Conduit) R2 Stereo Service; C:\Windows\SysWOW64\nvSCPAPISvr.exe [239208 2009-12-11] (NVIDIA Corporation) R2 xohmiewzgtcwxo; c:\windows\SysWOW64\pupfzeq.exe [102400 2012-10-20] ( Copyrighted © ) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-22] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-11-01] (DT Soft Ltd) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [32256 2009-07-07] (hxxp://libusb-win32.sourceforge.net) S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation) S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation) S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation) S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation) S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation) S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation) S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation) S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2009-06-05] () R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2495944 2010-01-31] (Digital Camera) S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [x] S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [x] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x] S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [x] S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [x] U3 tmlwf; U3 tmwfp; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-08 13:02 - 2014-01-08 13:02 - 00017066 _____ C:\Users\ASUS\Downloads\FRST.txt 2014-01-08 13:02 - 2014-01-08 13:02 - 00000000 ____D C:\FRST 2014-01-08 12:59 - 2014-01-08 13:02 - 01931762 _____ (Farbar) C:\Users\ASUS\Downloads\FRST64.exe 2014-01-08 10:03 - 2014-01-08 10:06 - 02336018 _____ C:\Users\ASUS\Downloads\20462436_6144b4a49714d85f0b7a9095bf8750e6e7334992.cab 2014-01-08 09:58 - 2014-01-08 10:07 - 00000000 ____D C:\Users\ASUS\Desktop\Treiber 2014-01-08 09:55 - 2014-01-08 09:57 - 01688966 _____ C:\Users\ASUS\Downloads\win7-9.2.0.113-whql.zip 2014-01-08 07:35 - 2014-01-08 07:35 - 00003562 _____ C:\Windows\PFRO.log 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204736.zip 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204731.zip 2014-01-06 08:39 - 2014-01-06 08:39 - 00000423 _____ C:\Users\Public\Desktop\YTD Video Downloader.lnk 2014-01-06 08:39 - 2014-01-06 08:39 - 00000000 ____D C:\ProgramData\YTD Video Downloader 2014-01-06 08:21 - 2014-01-06 08:21 - 00298954 _____ C:\Users\ASUS\Downloads\Download_33396.zip 2014-01-06 08:15 - 2014-01-06 08:31 - 11617048 _____ C:\Users\ASUS\Downloads\YTD471Setup.exe 2014-01-06 08:07 - 2014-01-06 08:07 - 00002249 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-06 08:01 - 2014-01-08 12:24 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-06 08:01 - 2014-01-08 11:50 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-06 08:01 - 2014-01-06 08:07 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 08:01 - 2014-01-06 08:07 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 08:01 - 2014-01-06 08:06 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-06 07:51 - 2014-01-08 11:50 - 00000482 _____ C:\Windows\setupact.log 2014-01-06 07:51 - 2014-01-06 07:51 - 00000000 _____ C:\Windows\setuperr.log 2014-01-03 14:44 - 2014-01-03 14:44 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk 2014-01-03 14:44 - 2014-01-03 14:44 - 00000000 ___RD C:\Program Files (x86)\Skype 2014-01-02 18:38 - 2014-01-02 18:38 - 00000000 ____D C:\Program Files\Tracker Software 2014-01-02 18:15 - 2014-01-02 18:15 - 00000000 ____D C:\Users\ASUS\AppData\Local\SearchProtect 2014-01-02 18:15 - 2014-01-02 18:15 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2014-01-02 12:41 - 2014-01-02 13:00 - 00000000 ____D C:\Users\ASUS\Documents\My Kindle Content 2014-01-02 12:40 - 2014-01-02 12:41 - 00000000 ____D C:\Users\ASUS\AppData\Local\Amazon 2014-01-02 12:40 - 2014-01-02 12:40 - 00002225 _____ C:\Users\ASUS\Desktop\Kindle.lnk 2014-01-02 12:40 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-12-29 19:13 - 2013-12-29 19:14 - 00000024 _____ C:\Windows\ATKPF.ini 2013-12-27 22:12 - 2014-01-08 11:58 - 00000000 ___RD C:\Users\ASUS\Dropbox 2013-12-27 22:08 - 2013-12-27 22:08 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-12-27 22:07 - 2014-01-08 11:58 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Dropbox 2013-12-27 19:17 - 2014-01-04 15:14 - 00000000 ____D C:\Users\ASUS\Desktop\Steuer 2013-12-22 20:56 - 2014-01-05 15:21 - 00000000 ____D C:\Users\ASUS\Desktop\Neuer Ordner 2013-12-22 19:01 - 2013-12-22 19:01 - 00000000 ____D C:\Users\ASUS\Documents\Steuer-Sparbuch 2013-12-17 11:01 - 2013-12-17 11:01 - 00205372 _____ C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag .htm 2013-12-17 11:01 - 2013-12-17 11:01 - 00000000 ____D C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag _files 2013-12-12 12:38 - 2013-12-23 21:50 - 00000000 ____D C:\Users\ASUS\Desktop\privat 2013-12-11 08:36 - 2013-12-11 08:47 - 00000000 ____D C:\Users\ASUS\Desktop\Meisterbafög 2013-12-09 18:24 - 2014-01-08 11:52 - 00003486 _____ C:\Windows\System32\Tasks\AutoKMS 2013-12-09 18:24 - 2013-12-11 08:18 - 00000000 ____D C:\Windows\AutoKMS 2013-12-09 17:00 - 2013-12-09 17:00 - 00000000 ____D C:\Users\wangjihua\AppData\Local\Mobogenie 2013-12-09 17:00 - 2013-12-09 17:00 - 00000000 ____D C:\Users\wangjihua 2013-12-09 16:57 - 2013-12-09 17:57 - 00000000 ____D C:\Program Files (x86)\Mobogenie 2013-12-09 16:57 - 2013-12-09 16:57 - 00003078 _____ C:\Windows\System32\Tasks\Express FilesUpdate 2013-12-09 16:57 - 2013-12-09 16:57 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\ExpressFiles ==================== One Month Modified Files and Folders ======= 2014-01-08 13:02 - 2014-01-08 13:02 - 00017066 _____ C:\Users\ASUS\Downloads\FRST.txt 2014-01-08 13:02 - 2014-01-08 13:02 - 00000000 ____D C:\FRST 2014-01-08 13:02 - 2014-01-08 12:59 - 01931762 _____ (Farbar) C:\Users\ASUS\Downloads\FRST64.exe 2014-01-08 12:59 - 2012-02-08 09:47 - 00088280 _____ C:\Users\ASUS\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-08 12:34 - 2011-04-18 20:34 - 01798029 _____ C:\Windows\WindowsUpdate.log 2014-01-08 12:24 - 2014-01-06 08:01 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-08 12:06 - 2013-11-01 10:34 - 00000000 ____D C:\ProgramData\Microsoft Help 2014-01-08 11:58 - 2013-12-27 22:12 - 00000000 ___RD C:\Users\ASUS\Dropbox 2014-01-08 11:58 - 2013-12-27 22:07 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Dropbox 2014-01-08 11:57 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-08 11:57 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-08 11:55 - 2013-12-08 21:09 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\newnext.me 2014-01-08 11:52 - 2013-12-09 18:24 - 00003486 _____ C:\Windows\System32\Tasks\AutoKMS 2014-01-08 11:50 - 2014-01-06 08:01 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-08 11:50 - 2014-01-06 07:51 - 00000482 _____ C:\Windows\setupact.log 2014-01-08 11:50 - 2011-04-18 21:09 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-08 11:50 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-08 10:07 - 2014-01-08 09:58 - 00000000 ____D C:\Users\ASUS\Desktop\Treiber 2014-01-08 10:06 - 2014-01-08 10:03 - 02336018 _____ C:\Users\ASUS\Downloads\20462436_6144b4a49714d85f0b7a9095bf8750e6e7334992.cab 2014-01-08 09:57 - 2014-01-08 09:55 - 01688966 _____ C:\Users\ASUS\Downloads\win7-9.2.0.113-whql.zip 2014-01-08 07:38 - 2011-04-18 21:19 - 00001485 _____ C:\Windows\system32\ServiceFilter.ini 2014-01-08 07:35 - 2014-01-08 07:35 - 00003562 _____ C:\Windows\PFRO.log 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204736.zip 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204731.zip 2014-01-07 17:07 - 2013-11-30 17:43 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\vlc 2014-01-06 23:14 - 2012-02-13 16:49 - 00000000 ____D C:\Users\ASUS\AppData\Local\Google 2014-01-06 08:39 - 2014-01-06 08:39 - 00000423 _____ C:\Users\Public\Desktop\YTD Video Downloader.lnk 2014-01-06 08:39 - 2014-01-06 08:39 - 00000000 ____D C:\ProgramData\YTD Video Downloader 2014-01-06 08:31 - 2014-01-06 08:15 - 11617048 _____ C:\Users\ASUS\Downloads\YTD471Setup.exe 2014-01-06 08:21 - 2014-01-06 08:21 - 00298954 _____ C:\Users\ASUS\Downloads\Download_33396.zip 2014-01-06 08:07 - 2014-01-06 08:07 - 00002249 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-06 08:07 - 2014-01-06 08:01 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 08:07 - 2014-01-06 08:01 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 08:06 - 2014-01-06 08:01 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-06 07:51 - 2014-01-06 07:51 - 00000000 _____ C:\Windows\setuperr.log 2014-01-05 17:31 - 2009-07-14 05:45 - 00368712 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-05 15:21 - 2013-12-22 20:56 - 00000000 ____D C:\Users\ASUS\Desktop\Neuer Ordner 2014-01-04 15:14 - 2013-12-27 19:17 - 00000000 ____D C:\Users\ASUS\Desktop\Steuer 2014-01-04 15:04 - 2013-04-13 14:52 - 00000000 ____D C:\Users\ASUS\Desktop\Kontoauszüge Cortal Consors 2014-01-04 12:48 - 2012-07-08 18:46 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Skype 2014-01-03 14:44 - 2014-01-03 14:44 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk 2014-01-03 14:44 - 2014-01-03 14:44 - 00000000 ___RD C:\Program Files (x86)\Skype 2014-01-03 14:44 - 2012-07-08 18:46 - 00000000 ____D C:\ProgramData\Skype 2014-01-02 18:38 - 2014-01-02 18:38 - 00000000 ____D C:\Program Files\Tracker Software 2014-01-02 18:15 - 2014-01-02 18:15 - 00000000 ____D C:\Users\ASUS\AppData\Local\SearchProtect 2014-01-02 18:15 - 2014-01-02 18:15 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2014-01-02 13:00 - 2014-01-02 12:41 - 00000000 ____D C:\Users\ASUS\Documents\My Kindle Content 2014-01-02 12:41 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Local\Amazon 2014-01-02 12:40 - 2014-01-02 12:40 - 00002225 _____ C:\Users\ASUS\Desktop\Kindle.lnk 2014-01-02 12:40 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-12-30 15:24 - 2011-04-18 21:14 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-12-29 19:15 - 2011-04-18 21:19 - 00001802 _____ C:\Windows\system32\AutoRunFilter.ini 2013-12-29 19:14 - 2013-12-29 19:13 - 00000024 _____ C:\Windows\ATKPF.ini 2013-12-27 22:12 - 2012-02-08 09:44 - 00000000 ____D C:\Users\ASUS 2013-12-27 22:09 - 2012-02-08 09:45 - 00000000 ___RD C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-12-27 22:08 - 2013-12-27 22:08 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-12-23 21:50 - 2013-12-12 12:38 - 00000000 ____D C:\Users\ASUS\Desktop\privat 2013-12-22 22:36 - 2013-11-01 10:34 - 00000000 ____D C:\Users\ASUS\AppData\Local\Microsoft Help 2013-12-22 19:01 - 2013-12-22 19:01 - 00000000 ____D C:\Users\ASUS\Documents\Steuer-Sparbuch 2013-12-17 16:16 - 2013-12-08 22:05 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-17 16:16 - 2013-12-08 22:05 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-17 16:16 - 2013-12-08 22:05 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-17 11:01 - 2013-12-17 11:01 - 00205372 _____ C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag .htm 2013-12-17 11:01 - 2013-12-17 11:01 - 00000000 ____D C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag _files 2013-12-11 08:47 - 2013-12-11 08:36 - 00000000 ____D C:\Users\ASUS\Desktop\Meisterbafög 2013-12-11 08:18 - 2013-12-09 18:24 - 00000000 ____D C:\Windows\AutoKMS 2013-12-09 17:57 - 2013-12-09 16:57 - 00000000 ____D C:\Program Files (x86)\Mobogenie 2013-12-09 17:57 - 2013-12-08 21:09 - 00000000 ____D C:\Users\ASUS\AppData\Local\Mobogenie 2013-12-09 17:53 - 2013-12-08 21:09 - 00000000 ____D C:\Users\ASUS\AppData\Local\cache 2013-12-09 17:51 - 2013-12-08 21:09 - 00000000 ____D C:\Users\ASUS\AppData\Local\genienext 2013-12-09 17:00 - 2013-12-09 17:00 - 00000000 ____D C:\Users\wangjihua\AppData\Local\Mobogenie 2013-12-09 17:00 - 2013-12-09 17:00 - 00000000 ____D C:\Users\wangjihua 2013-12-09 16:57 - 2013-12-09 16:57 - 00003078 _____ C:\Windows\System32\Tasks\Express FilesUpdate 2013-12-09 16:57 - 2013-12-09 16:57 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\ExpressFiles Some content of TEMP: ==================== C:\Users\ASUS\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 11:53 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-01-2014 Ran by ASUS at 2014-01-08 13:02:59 Running from C:\Users\ASUS\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Acrobat.com (x32 Version: 1.1.377 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden Adobe Flash Player 10 ActiveX (x32 Version: 10.0.32.18 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.171 - Adobe Systems Incorporated) Adobe Reader X (10.1.3) - Deutsch (x32 Version: 10.1.3 - Adobe Systems Incorporated) Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482 - Alcor Micro Corp.) Hidden All In One - Key logger (x32 Version: - ) Amazon Kindle (HKCU Version: - Amazon) ASUS AI Recovery (x32 Version: 1.0.6 - ASUS) ASUS FancyStart (x32 Version: 1.0.6 - ASUSTeK Computer Inc.) ASUS LifeFrame3 (x32 Version: 3.0.20 - ASUS) ASUS Live Update (x32 Version: 2.5.9 - ASUS) ASUS MultiFrame (x32 Version: 1.0.0019 - ASUS) ASUS Power4Gear Hybrid (Version: 1.1.30 - ASUS) ASUS SmartLogon (x32 Version: 1.0.0008 - ASUS) ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0028 - ASUS) ASUS Virtual Camera (x32 Version: 1.0.19 - asus) ASUS_Screensaver (x32 Version: - ) ATK Package (x32 Version: 1.0.0001 - ASUS) Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira) CCleaner (Version: 4.07 - Piriform) ControlDeck (x32 Version: 1.0.5 - ASUS) CPUID CPU-Z 1.59 (Version: - ) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd) Dropbox (HKCU Version: 2.4.10 - Dropbox, Inc.) ETDWare PS/2-x64 7.0.5.9_WHQL (Version: - ) Fast Boot (Version: 1.0.4 - ASUS) FileParade Bundle (x32 Version: 1.0.0.0 - FileParade Bundle) FotoSketcher 2.35 (x32 Version: - David THOIRON) Garmin ANT Agent (x32 Version: 2.3.3 - Garmin Ltd or its subsidiaries) Garmin Communicator Plugin (x32 Version: 4.0.3 - Garmin Ltd or its subsidiaries) Garmin Communicator Plugin x64 (Version: 4.0.3 - Garmin Ltd or its subsidiaries) Garmin Training Center (x32 Version: 3.6.5 - Garmin Ltd or its subsidiaries) Garmin USB Drivers (x32 Version: 2.3.0.0 - Garmin Ltd or its subsidiaries) GIMP 2.8.2 (Version: 2.8.2 - The GIMP Team) GoforFiles (HKCU Version: 1.9.5 - hxxp://www.goforfiles.com/) <==== ATTENTION Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät (Version: 22.0.334.0 - Hewlett-Packard Co.) HP Deskjet 3050 J610 series Hilfe (x32 Version: 140.0.63.63 - Hewlett Packard) IrfanView (remove only) (x32 Version: 4.32 - Irfan Skiljan) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Excel 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Excel 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Edition 2003 (x32 Version: 11.0.5614.0 - Microsoft Corporation) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Word 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office XP Web Components (x32 Version: 11.0.5614.0 - Microsoft Corporation) Microsoft PowerPoint 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Word 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0 - Microsoft Corporation) MyPhoneExplorer (x32 Version: 1.8.2 - F.J. Wechselberger) NVIDIA Drivers (Version: 1.9 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.16.11.8836 - NVIDIA Corporation) PDFCreator (x32 Version: 1.3.2 - Frank Heindörfer, Philip Chinery) PDF-Viewer (Version: 2.5.214.0 - Tracker Software Products Ltd) PhotoScape (x32 Version: - ) Product Support 1.74.b1377 (x32 Version: - ) <==== ATTENTION Realtek Ethernet Controller Driver (x32 Version: 1.00.0008 - Realtek) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6010 - Realtek Semiconductor Corp.) Search Protect (x32 Version: 2.9.8.2 - Conduit) <==== ATTENTION SimpleFiles (HKCU Version: 1.2.0 - hxxp://www.simple-files.com/) Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) SRS Premium Sound Control Panel (Version: 1.8.2900 - SRS Labs, Inc.) SweetIM for Messenger 3.7 (x32 Version: 3.7.0007 - SweetIM Technologies Ltd.) Hidden <==== ATTENTION TrueCrypt (x32 Version: 7.1a - TrueCrypt Foundation) Update Manager for SweetPacks 1.1 (x32 Version: 1.1.0008 - SweetIM Technologies Ltd.) Hidden <==== ATTENTION USB 2.0 1.3M UVC WebCam (Version: - ) USB Video Device (Version: - ) VLC media player 2.1.1 (x32 Version: 2.1.1 - VideoLAN) Windows Driver Package - Dynastream Innovations (libusb0) LibUsbDevices (07/07/2009 1.12.2) (Version: 07/07/2009 1.12.2 - Dynastream Innovations) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0) (Version: 06/03/2009 2.3.0.0 - Garmin) Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden WinFlash (x32 Version: 2.29.0 - ASUS) WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH) Wireless Console 3 (x32 Version: 3.0.14 - ASUS) WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137 - Buhl Data Service GmbH) YTD Video Downloader 4.7.1 (x32 Version: 4.7.1 - GreenTree Applications SRL) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {05F52D68-801D-42FB-BB94-3FEAD32CC32D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-06] (Google Inc.) Task: {071FE861-32A4-4832-83A4-4F26AEAD72A9} - System32\Tasks\YourFile DownloaderUpdate => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe <==== ATTENTION Task: {074503FA-7374-47D7-9286-44E8AE8BEFA4} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-01-30] (ATK) Task: {19557A78-321E-4EF2-973C-E2AB0F509777} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-11-24] () Task: {20304C0F-59E4-4D98-A008-DCE30D120294} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-06] (Google Inc.) Task: {3922324D-75C5-4B67-B2E9-0C5A4F354DBE} - System32\Tasks\SimpleFilesUpdate => C:\Program Files (x86)\SimpleFiles\SFUpdater.exe [2013-10-09] (hxxp://simple-files.com/) Task: {3F416D76-6F69-44F1-9D4D-6AEE12A2E71F} - System32\Tasks\hpwebreg_CN0AC2B22K05HX => C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\hpwebreg.exe [2010-06-14] (Hewlett-Packard Co.) Task: {5AACF631-C5C5-440E-8AC8-0984130F9A41} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2009-09-11] (ASUSTek Computer Inc.) Task: {6A0AA3FC-677C-437E-BF2B-7075B1D1CBA9} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2013-12-09] () Task: {717575CA-D5EC-4DE0-BAB6-FECE3161119E} - System32\Tasks\DealPly => C:\Users\ASUS\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {78E75380-B6EC-4DE9-8805-B9A3CF18154E} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK) Task: {A8C3349A-6E25-4735-B30F-560D14D8AF72} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe [2013-11-30] (hxxp://goforfiles.com/) <==== ATTENTION Task: {ACEC6609-74E8-489A-B137-C44BC373D073} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS) Task: {CBE07097-BA57-458C-B88D-77DEBC5DFC33} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2009-11-12] () Task: {D3C26EE2-C14F-44EB-93C3-9935E4047F09} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {EDF481B8-7C55-45C4-BED3-77DF69383993} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd) Task: {FBDBA5B4-BDDD-49E4-A579-B7D424C87C99} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\hpwebreg_CN0AC2B22K05HX.job => C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HpWebReg.exe ==================== Loaded Modules (whitelisted) ============= 2010-01-11 18:27 - 2010-01-11 18:27 - 00017920 _____ () C:\Program Files\P4G\DevMng.dll 2010-01-26 22:21 - 2010-01-26 22:21 - 00032768 _____ () C:\Program Files\P4G\OvrClk.dll 2008-10-01 07:02 - 2008-10-01 07:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2013-12-08 22:05 - 2013-11-22 12:01 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2013-12-01 10:30 - 2012-11-01 14:47 - 08748696 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\wgui13.dll 2013-12-01 10:30 - 2012-11-01 14:46 - 00028672 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsdcom48.dll 2013-12-01 10:30 - 2012-11-01 14:46 - 00308376 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\rscorewinapi48.dll 2013-12-01 10:30 - 2012-11-01 14:46 - 00320664 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsguiwinapi48.dll 2013-12-01 10:30 - 2012-11-01 14:47 - 02950296 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\wcore13.dll 2013-12-01 10:30 - 2012-11-01 14:46 - 00135832 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsodbc48.dll 2013-12-01 10:30 - 2012-11-01 19:00 - 02025624 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfvie13.dll 2013-12-01 10:30 - 2012-11-01 14:46 - 01596568 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\wsteu13.dll 2013-12-01 10:30 - 2012-11-01 14:46 - 01710232 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\wreli13.dll 2013-12-01 10:30 - 2012-11-01 14:46 - 04070040 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\wauff13.dll 2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\ASUS\AppData\Roaming\Dropbox\bin\libcef.dll 2014-01-06 08:07 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll 2014-01-06 08:07 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll 2014-01-06 08:07 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll 2014-01-06 08:07 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll 2014-01-06 08:07 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll 2010-01-30 02:41 - 2010-01-30 02:41 - 04254560 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:8927A071 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/08/2014 11:54:24 AM) (Source: Chrome) (User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\785b529b-e83a-4e4c-86b1-91cec08ffa04.dmp Error: (01/08/2014 11:50:56 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: nvvsvc.exe, Version: 8.16.11.8836, Zeitstempel: 0x4b22783f Name des fehlerhaften Moduls: NVSVC64.DLL, Version: 8.16.11.8836, Zeitstempel: 0x4b22782f Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000004517 ID des fehlerhaften Prozesses: 0x438 Startzeit der fehlerhaften Anwendung: 0xnvvsvc.exe0 Pfad der fehlerhaften Anwendung: nvvsvc.exe1 Pfad des fehlerhaften Moduls: nvvsvc.exe2 Berichtskennung: nvvsvc.exe3 Error: (01/08/2014 09:54:06 AM) (Source: Chrome) (User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\924f3caf-c025-467c-8bdc-aec038cfa880.dmp Error: (01/08/2014 09:49:11 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: nvvsvc.exe, Version: 8.16.11.8836, Zeitstempel: 0x4b22783f Name des fehlerhaften Moduls: NVSVC64.DLL, Version: 8.16.11.8836, Zeitstempel: 0x4b22782f Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000004517 ID des fehlerhaften Prozesses: 0x448 Startzeit der fehlerhaften Anwendung: 0xnvvsvc.exe0 Pfad der fehlerhaften Anwendung: nvvsvc.exe1 Pfad des fehlerhaften Moduls: nvvsvc.exe2 Berichtskennung: nvvsvc.exe3 Error: (01/08/2014 09:05:02 AM) (Source: Chrome) (User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\9f7f6d35-0160-4754-8c5b-c69fcf010757.dmp Error: (01/08/2014 09:04:47 AM) (Source: Chrome) (User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\75e43d35-41f3-4488-af20-1a4007abc58b.dmp Error: (01/08/2014 07:56:51 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: nvvsvc.exe, Version: 8.16.11.8836, Zeitstempel: 0x4b22783f Name des fehlerhaften Moduls: NVSVC64.DLL, Version: 8.16.11.8836, Zeitstempel: 0x4b22782f Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000004517 ID des fehlerhaften Prozesses: 0x444 Startzeit der fehlerhaften Anwendung: 0xnvvsvc.exe0 Pfad der fehlerhaften Anwendung: nvvsvc.exe1 Pfad des fehlerhaften Moduls: nvvsvc.exe2 Berichtskennung: nvvsvc.exe3 Error: (01/07/2014 11:08:05 PM) (Source: Chrome) (User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\f39e35b9-a151-46f0-b3fb-670c515afca2.dmp Error: (01/07/2014 09:59:50 PM) (Source: Chrome) (User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\91388e27-57f1-438a-a347-130b55206508.dmp Error: (01/07/2014 09:59:46 PM) (Source: Chrome) (User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\4658a264-3f94-4960-8dfe-920e5bcf64a0.dmp System errors: ============= Error: (01/08/2014 11:54:59 AM) (Source: NetBT) (User: ) Description: Der Name "ASUS-PC :20" konnte nicht auf der Schnittstelle mit IP-Adresse 172.16.5.47 registriert werden. Der Computer mit IP-Adresse 172.16.1.134 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Error: (01/08/2014 11:54:59 AM) (Source: NetBT) (User: ) Description: Der Name "ASUS-PC :0" konnte nicht auf der Schnittstelle mit IP-Adresse 172.16.5.47 registriert werden. Der Computer mit IP-Adresse 172.16.1.134 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Error: (01/08/2014 11:54:59 AM) (Source: Server) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{D1B7AF4E-77AC-4701-B292-92FCC6A31DA9} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (01/08/2014 10:23:37 AM) (Source: NetBT) (User: ) Description: Der Name "ASUS-PC :20" konnte nicht auf der Schnittstelle mit IP-Adresse 172.16.5.47 registriert werden. Der Computer mit IP-Adresse 172.16.1.134 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Error: (01/08/2014 10:23:37 AM) (Source: Server) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{D1B7AF4E-77AC-4701-B292-92FCC6A31DA9} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (01/08/2014 09:48:08 AM) (Source: NetBT) (User: ) Description: Der Name "ASUS-PC :20" konnte nicht auf der Schnittstelle mit IP-Adresse 172.16.5.47 registriert werden. Der Computer mit IP-Adresse 172.16.1.134 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Error: (01/08/2014 09:48:08 AM) (Source: Server) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{D1B7AF4E-77AC-4701-B292-92FCC6A31DA9} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (01/08/2014 09:48:07 AM) (Source: NetBT) (User: ) Description: Der Name "ASUS-PC :0" konnte nicht auf der Schnittstelle mit IP-Adresse 172.16.5.47 registriert werden. Der Computer mit IP-Adresse 172.16.1.134 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Error: (01/08/2014 09:03:04 AM) (Source: NetBT) (User: ) Description: Der Name "WORKGROUP :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 172.16.5.47 registriert werden. Der Computer mit IP-Adresse 172.16.4.0 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Error: (01/08/2014 08:08:54 AM) (Source: NetBT) (User: ) Description: Der Name "ASUS-PC :0" konnte nicht auf der Schnittstelle mit IP-Adresse 172.16.5.47 registriert werden. Der Computer mit IP-Adresse 172.16.1.134 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Microsoft Office Sessions: ========================= Error: (01/08/2014 11:54:24 AM) (Source: Chrome)(User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\785b529b-e83a-4e4c-86b1-91cec08ffa04.dmp Error: (01/08/2014 11:50:56 AM) (Source: Application Error)(User: ) Description: nvvsvc.exe8.16.11.88364b22783fNVSVC64.DLL8.16.11.88364b22782fc0000005000000000000451743801cf0c5f7005abc0C:\Windows\system32\nvvsvc.exeC:\Windows\system32\NVSVC64.DLLbffa1d50-7852-11e3-8769-485b392e4fa6 Error: (01/08/2014 09:54:06 AM) (Source: Chrome)(User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\924f3caf-c025-467c-8bdc-aec038cfa880.dmp Error: (01/08/2014 09:49:11 AM) (Source: Application Error)(User: ) Description: nvvsvc.exe8.16.11.88364b22783fNVSVC64.DLL8.16.11.88364b22782fc0000005000000000000451744801cf0c4e5663a8e0C:\Windows\system32\nvvsvc.exeC:\Windows\system32\NVSVC64.DLLbe13c1a0-7841-11e3-8663-485b392e4fa6 Error: (01/08/2014 09:05:02 AM) (Source: Chrome)(User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\9f7f6d35-0160-4754-8c5b-c69fcf010757.dmp Error: (01/08/2014 09:04:47 AM) (Source: Chrome)(User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\75e43d35-41f3-4488-af20-1a4007abc58b.dmp Error: (01/08/2014 07:56:51 AM) (Source: Application Error)(User: ) Description: nvvsvc.exe8.16.11.88364b22783fNVSVC64.DLL8.16.11.88364b22782fc0000005000000000000451744401cf0c3eacd6f520C:\Windows\system32\nvvsvc.exeC:\Windows\system32\NVSVC64.DLL0c64e6a0-7832-11e3-82f8-485b392e4fa6 Error: (01/07/2014 11:08:05 PM) (Source: Chrome)(User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\f39e35b9-a151-46f0-b3fb-670c515afca2.dmp Error: (01/07/2014 09:59:50 PM) (Source: Chrome)(User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\91388e27-57f1-438a-a347-130b55206508.dmp Error: (01/07/2014 09:59:46 PM) (Source: Chrome)(User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\4658a264-3f94-4960-8dfe-920e5bcf64a0.dmp ==================== Memory info =========================== Percentage of memory in use: 38% Total physical RAM: 4095.27 MB Available physical RAM: 2503.5 MB Total Pagefile: 8188.68 MB Available Pagefile: 6096.4 MB Total Virtual: 8192 MB Available Virtual: 8191.77 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:70.21 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (Data) (Fixed) (Total:336.27 GB) (Free:125.32 GB) NTFS Drive f: (ST2013) (CDROM) (Total:0.53 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 47C275B7) Partition 1: (Not Active) - (Size=13 GB) - (Type=1C) Partition 2: (Active) - (Size=116 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=336 GB) - (Type=OF Extended) ==================== End Of Log ============================ |
10.01.2014, 09:10 | #4 |
/// the machine /// TB-Ausbilder | Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
10.01.2014, 20:48 | #5 |
| Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-01-2014 Ran by ASUS (administrator) on ASUS-PC on 10-01-2014 19:35:58 Running from C:\Users\ASUS\Downloads\FRST-OlderVersion Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= ( Copyrighted © ) C:\Windows\SysWOW64\pupfzeq.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (NVIDIA Corporation) C:\Windows\SysWOW64\nvSCPAPISvr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (ATK) C:\Program Files\P4G\BatteryLife.exe (hxxp://simple-files.com/) C:\Program Files (x86)\SimpleFiles\SFUpdater.exe () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe (ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (GARMIN Corp.) C:\Program Files (x86)\Garmin\Training Center\gStart.exe (GARMIN Corp.) C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (ASUS) C:\Windows\AsScrPro.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe (Dropbox, Inc.) C:\Users\ASUS\AppData\Roaming\Dropbox\bin\Dropbox.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\splwow64.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.) HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.) HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6998656 2009-10-27] (ASUS) HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2009-08-20] (ASUS) HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BCSSync] - D:\Office2003\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKCU\...\Run: [gStart] - C:\Program Files (x86)\Garmin\Training Center\gStart.exe [1891416 2008-08-13] (GARMIN Corp.) HKCU\...\Run: [ANT Agent] - C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe [14749544 2012-03-23] (GARMIN Corp.) HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) MountPoints2: {88626bc2-4238-11e3-a540-485b392e4fa6} - F:\start.exe /auto MountPoints2: {abeee6c9-6931-11e1-ad3d-485b392e4fa6} - F:\Startme.exe MountPoints2: {da536248-a058-11e2-8185-485b392e4fa6} - F:\AutoRun.exe MountPoints2: {da53625c-a058-11e2-8185-485b392e4fa6} - F:\AutoRun.exe HKU\Standart 1\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10c.exe [257440 2009-07-18] (Adobe Systems, Inc.) Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\ASUS\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x00CE9CA4E52BCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office2003\Office14\URLREDIR.DLL (Microsoft Corporation) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_171.dll () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll () FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\OFFICE~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\OFFICE~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Movie2kDownloader - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\movie2kdownloader@movie2kdownloader.com.xpi FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.com" CHR Extension: (Google Drive) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1 CHR Extension: (Google Search) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1 CHR Extension: (Google Wallet) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1 CHR Extension: (Gmail) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2 ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-22] (Avira Operations GmbH & Co. KG) R2 Stereo Service; C:\Windows\SysWOW64\nvSCPAPISvr.exe [239208 2009-12-11] (NVIDIA Corporation) R2 xohmiewzgtcwxo; c:\windows\SysWOW64\pupfzeq.exe [102400 2012-10-20] ( Copyrighted © ) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-22] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-11-01] (DT Soft Ltd) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [32256 2009-07-07] (hxxp://libusb-win32.sourceforge.net) S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation) S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation) S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation) S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation) S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation) S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation) S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation) S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2009-06-05] () R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2495944 2010-01-31] (Digital Camera) S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [x] S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [x] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x] S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [x] S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [x] U3 tmlwf; U3 tmwfp; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-10 19:27 - 2014-01-10 19:27 - 00002255 _____ C:\Users\ASUS\Desktop\JRT.txt 2014-01-10 19:20 - 2014-01-10 19:20 - 00000000 ____D C:\Windows\ERUNT 2014-01-10 19:19 - 2014-01-10 19:20 - 01037068 _____ (Thisisu) C:\Users\ASUS\Downloads\JRT.exe 2014-01-10 19:17 - 2014-01-10 19:17 - 00012100 _____ C:\Users\ASUS\Desktop\AdwCleaner[S0].txt 2014-01-10 19:12 - 2014-01-10 19:14 - 00000000 ____D C:\AdwCleaner 2014-01-10 19:11 - 2014-01-10 19:11 - 01233962 _____ C:\Users\ASUS\Downloads\adwcleaner.exe 2014-01-10 17:52 - 2014-01-10 17:52 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Malwarebytes 2014-01-10 17:51 - 2014-01-10 17:52 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-10 17:51 - 2014-01-10 17:51 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-10 17:51 - 2014-01-10 17:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-10 17:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-10 17:02 - 2014-01-10 17:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ASUS\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-10 17:00 - 2014-01-10 19:35 - 00000000 ____D C:\Users\ASUS\Downloads\FRST-OlderVersion 2014-01-09 20:56 - 2014-01-09 21:12 - 38364774 _____ C:\Users\ASUS\Desktop\Präsentation.pptx 2014-01-09 19:32 - 2014-01-10 16:39 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Apple Computer 2014-01-09 19:32 - 2014-01-09 19:32 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple Computer 2014-01-09 19:27 - 2014-01-09 19:28 - 00000000 ____D C:\Program Files (x86)\QuickTime 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple Computer 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller.exe 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller (1).exe 2014-01-09 12:46 - 2014-01-09 12:46 - 00000968 _____ C:\Users\ASUS\Desktop\Dropbox - Verknüpfung.lnk 2014-01-09 00:48 - 2014-01-09 00:48 - 00001200 _____ C:\Users\ASUS\Desktop\Format Factory.lnk 2014-01-09 00:48 - 2014-01-09 00:48 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-09 00:47 - 2014-01-09 00:47 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-09 00:46 - 2014-01-09 00:46 - 61746584 _____ (Free Time) C:\Users\ASUS\Downloads\FFSetup3.2.1.0.exe 2014-01-09 00:07 - 2014-01-09 00:43 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Youtube Downloader HD 2014-01-09 00:05 - 2014-01-09 00:05 - 09663232 _____ (YoutubeDownloaderHD.com ) C:\Users\ASUS\Downloads\youtube_downloader_hd_setup.exe 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\Documents\Aiseesoft Studio 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\AppData\Local\Aiseesoft Studio 2014-01-08 23:59 - 2014-01-09 00:01 - 24615784 _____ (Aiseesoft Studio ) C:\Users\ASUS\Downloads\as-total-video-converter.exe 2014-01-08 23:47 - 2014-01-08 23:58 - 00000000 ____D C:\Program Files (x86)\Free mp3 Wma Converter 2014-01-08 23:47 - 2014-01-08 23:47 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\FreeAudioPack 2014-01-08 23:47 - 2011-09-29 14:20 - 02084864 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudDesign.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 01986560 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudFile.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 01212416 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioInfos.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00479232 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioVisu.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00458752 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudPlayer.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00454656 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioRecord.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00417792 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudDisplay.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00348160 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\WMAFile.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00164144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMCT232.OCX 2014-01-08 23:47 - 2011-09-29 14:20 - 00116296 _____ C:\Windows\SysWOW64\NCTWMAProfiles.prx 2014-01-08 23:47 - 2011-09-29 14:19 - 00224016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TABCTL32.OCX 2014-01-08 23:47 - 2011-09-29 14:19 - 00152848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMDLG32.OCX 2014-01-08 23:47 - 2011-09-29 14:19 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCFR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00119568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6FR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.OCX 2014-01-08 23:47 - 2011-09-29 14:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscc2fr.dll 2014-01-08 23:47 - 2011-09-29 14:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CMDLGFR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TABCTFR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetfr.DLL 2014-01-08 23:46 - 2014-01-08 23:46 - 00458744 _____ (Bandoo Media Inc) C:\Users\ASUS\Downloads\Setup21_FreeConverter.exe 2014-01-08 13:02 - 2014-01-10 19:35 - 00000000 ____D C:\FRST 2014-01-08 13:02 - 2014-01-08 13:03 - 00029834 _____ C:\Users\ASUS\Downloads\FRST.txt 2014-01-08 13:02 - 2014-01-08 13:03 - 00026161 _____ C:\Users\ASUS\Downloads\Addition.txt 2014-01-08 12:59 - 2014-01-10 17:00 - 00214016 _____ C:\Users\ASUS\Downloads\FRST64.exe 2014-01-08 10:03 - 2014-01-08 10:06 - 02336018 _____ C:\Users\ASUS\Downloads\20462436_6144b4a49714d85f0b7a9095bf8750e6e7334992.cab 2014-01-08 09:55 - 2014-01-08 09:57 - 01688966 _____ C:\Users\ASUS\Downloads\win7-9.2.0.113-whql.zip 2014-01-08 07:35 - 2014-01-10 19:08 - 00063560 _____ C:\Windows\PFRO.log 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204736.zip 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204731.zip 2014-01-06 08:39 - 2014-01-06 08:39 - 00000423 _____ C:\Users\Public\Desktop\YTD Video Downloader.lnk 2014-01-06 08:21 - 2014-01-06 08:21 - 00298954 _____ C:\Users\ASUS\Downloads\Download_33396.zip 2014-01-06 08:07 - 2014-01-10 19:14 - 00001280 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-06 08:01 - 2014-01-10 19:16 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-06 08:01 - 2014-01-10 19:12 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-06 08:01 - 2014-01-06 08:07 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 08:01 - 2014-01-06 08:07 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 08:01 - 2014-01-06 08:06 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-06 07:51 - 2014-01-10 19:16 - 00001558 _____ C:\Windows\setupact.log 2014-01-06 07:51 - 2014-01-06 07:51 - 00000000 _____ C:\Windows\setuperr.log 2014-01-03 14:44 - 2014-01-03 14:44 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk 2014-01-03 14:44 - 2014-01-03 14:44 - 00000000 ___RD C:\Program Files (x86)\Skype 2014-01-02 18:38 - 2014-01-02 18:38 - 00000000 ____D C:\Program Files\Tracker Software 2014-01-02 12:41 - 2014-01-02 13:00 - 00000000 ____D C:\Users\ASUS\Documents\My Kindle Content 2014-01-02 12:40 - 2014-01-02 12:41 - 00000000 ____D C:\Users\ASUS\AppData\Local\Amazon 2014-01-02 12:40 - 2014-01-02 12:40 - 00002225 _____ C:\Users\ASUS\Desktop\Kindle.lnk 2014-01-02 12:40 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-12-29 19:13 - 2013-12-29 19:14 - 00000024 _____ C:\Windows\ATKPF.ini 2013-12-27 22:12 - 2014-01-10 19:23 - 00000000 ___RD C:\Users\ASUS\Dropbox 2013-12-27 22:08 - 2014-01-10 19:23 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-12-27 22:07 - 2014-01-10 19:23 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Dropbox 2013-12-27 19:17 - 2014-01-04 15:14 - 00000000 ____D C:\Users\ASUS\Desktop\Steuer 2013-12-22 20:56 - 2014-01-10 19:06 - 00000000 ____D C:\Users\ASUS\Desktop\Neuer Ordner 2013-12-22 19:01 - 2013-12-22 19:01 - 00000000 ____D C:\Users\ASUS\Documents\Steuer-Sparbuch 2013-12-17 11:01 - 2013-12-17 11:01 - 00205372 _____ C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag .htm 2013-12-17 11:01 - 2013-12-17 11:01 - 00000000 ____D C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag _files 2013-12-12 12:38 - 2013-12-23 21:50 - 00000000 ____D C:\Users\ASUS\Desktop\privat 2013-12-11 08:36 - 2013-12-11 08:47 - 00000000 ____D C:\Users\ASUS\Desktop\Meisterbafög ==================== One Month Modified Files and Folders ======= 2014-01-10 19:35 - 2014-01-10 17:00 - 00000000 ____D C:\Users\ASUS\Downloads\FRST-OlderVersion 2014-01-10 19:35 - 2014-01-08 13:02 - 00000000 ____D C:\FRST 2014-01-10 19:27 - 2014-01-10 19:27 - 00002255 _____ C:\Users\ASUS\Desktop\JRT.txt 2014-01-10 19:23 - 2013-12-27 22:12 - 00000000 ___RD C:\Users\ASUS\Dropbox 2014-01-10 19:23 - 2013-12-27 22:08 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-10 19:23 - 2013-12-27 22:07 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Dropbox 2014-01-10 19:23 - 2012-02-08 09:45 - 00000000 ___RD C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-10 19:23 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-10 19:23 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-10 19:20 - 2014-01-10 19:20 - 00000000 ____D C:\Windows\ERUNT 2014-01-10 19:20 - 2014-01-10 19:19 - 01037068 _____ (Thisisu) C:\Users\ASUS\Downloads\JRT.exe 2014-01-10 19:18 - 2013-12-09 18:24 - 00003486 _____ C:\Windows\System32\Tasks\AutoKMS 2014-01-10 19:17 - 2014-01-10 19:17 - 00012100 _____ C:\Users\ASUS\Desktop\AdwCleaner[S0].txt 2014-01-10 19:16 - 2014-01-06 08:01 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-10 19:16 - 2014-01-06 07:51 - 00001558 _____ C:\Windows\setupact.log 2014-01-10 19:16 - 2011-04-18 21:09 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-10 19:16 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-10 19:15 - 2011-04-18 20:34 - 01817747 _____ C:\Windows\WindowsUpdate.log 2014-01-10 19:14 - 2014-01-10 19:12 - 00000000 ____D C:\AdwCleaner 2014-01-10 19:14 - 2014-01-06 08:07 - 00001280 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-10 19:14 - 2012-02-08 09:46 - 00000983 _____ C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-10 19:14 - 2012-02-08 09:45 - 00001166 _____ C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-10 19:12 - 2014-01-06 08:01 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-10 19:11 - 2014-01-10 19:11 - 01233962 _____ C:\Users\ASUS\Downloads\adwcleaner.exe 2014-01-10 19:08 - 2014-01-08 07:35 - 00063560 _____ C:\Windows\PFRO.log 2014-01-10 19:06 - 2013-12-22 20:56 - 00000000 ____D C:\Users\ASUS\Desktop\Neuer Ordner 2014-01-10 19:06 - 2013-11-30 19:31 - 00000000 ____D C:\Program Files (x86)\PSupport 2014-01-10 17:52 - 2014-01-10 17:52 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Malwarebytes 2014-01-10 17:52 - 2014-01-10 17:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-10 17:51 - 2014-01-10 17:51 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-10 17:51 - 2014-01-10 17:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-10 17:25 - 2014-01-10 17:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ASUS\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-10 17:00 - 2014-01-08 12:59 - 00214016 _____ C:\Users\ASUS\Downloads\FRST64.exe 2014-01-10 16:39 - 2014-01-09 19:32 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Apple Computer 2014-01-10 16:39 - 2011-04-18 21:19 - 00001852 _____ C:\Windows\system32\AutoRunFilter.ini 2014-01-09 21:12 - 2014-01-09 20:56 - 38364774 _____ C:\Users\ASUS\Desktop\Präsentation.pptx 2014-01-09 19:32 - 2014-01-09 19:32 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple Computer 2014-01-09 19:28 - 2014-01-09 19:27 - 00000000 ____D C:\Program Files (x86)\QuickTime 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple Computer 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller.exe 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller (1).exe 2014-01-09 12:46 - 2014-01-09 12:46 - 00000968 _____ C:\Users\ASUS\Desktop\Dropbox - Verknüpfung.lnk 2014-01-09 08:36 - 2013-11-30 17:43 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\vlc 2014-01-09 01:29 - 2009-07-14 05:45 - 00368712 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-09 00:48 - 2014-01-09 00:48 - 00001200 _____ C:\Users\ASUS\Desktop\Format Factory.lnk 2014-01-09 00:48 - 2014-01-09 00:48 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-09 00:47 - 2014-01-09 00:47 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-09 00:46 - 2014-01-09 00:46 - 61746584 _____ (Free Time) C:\Users\ASUS\Downloads\FFSetup3.2.1.0.exe 2014-01-09 00:43 - 2014-01-09 00:07 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Youtube Downloader HD 2014-01-09 00:05 - 2014-01-09 00:05 - 09663232 _____ (YoutubeDownloaderHD.com ) C:\Users\ASUS\Downloads\youtube_downloader_hd_setup.exe 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\Documents\Aiseesoft Studio 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\AppData\Local\Aiseesoft Studio 2014-01-09 00:01 - 2014-01-08 23:59 - 24615784 _____ (Aiseesoft Studio ) C:\Users\ASUS\Downloads\as-total-video-converter.exe 2014-01-08 23:58 - 2014-01-08 23:47 - 00000000 ____D C:\Program Files (x86)\Free mp3 Wma Converter 2014-01-08 23:47 - 2014-01-08 23:47 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\FreeAudioPack 2014-01-08 23:46 - 2014-01-08 23:46 - 00458744 _____ (Bandoo Media Inc) C:\Users\ASUS\Downloads\Setup21_FreeConverter.exe 2014-01-08 23:41 - 2013-11-01 10:34 - 00000000 ____D C:\Users\ASUS\AppData\Local\Microsoft Help 2014-01-08 13:03 - 2014-01-08 13:02 - 00029834 _____ C:\Users\ASUS\Downloads\FRST.txt 2014-01-08 13:03 - 2014-01-08 13:02 - 00026161 _____ C:\Users\ASUS\Downloads\Addition.txt 2014-01-08 12:59 - 2012-02-08 09:47 - 00088280 _____ C:\Users\ASUS\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-08 12:06 - 2013-11-01 10:34 - 00000000 ____D C:\ProgramData\Microsoft Help 2014-01-08 10:06 - 2014-01-08 10:03 - 02336018 _____ C:\Users\ASUS\Downloads\20462436_6144b4a49714d85f0b7a9095bf8750e6e7334992.cab 2014-01-08 09:57 - 2014-01-08 09:55 - 01688966 _____ C:\Users\ASUS\Downloads\win7-9.2.0.113-whql.zip 2014-01-08 07:38 - 2011-04-18 21:19 - 00001485 _____ C:\Windows\system32\ServiceFilter.ini 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204736.zip 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204731.zip 2014-01-06 23:14 - 2012-02-13 16:49 - 00000000 ____D C:\Users\ASUS\AppData\Local\Google 2014-01-06 08:39 - 2014-01-06 08:39 - 00000423 _____ C:\Users\Public\Desktop\YTD Video Downloader.lnk 2014-01-06 08:21 - 2014-01-06 08:21 - 00298954 _____ C:\Users\ASUS\Downloads\Download_33396.zip 2014-01-06 08:07 - 2014-01-06 08:01 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 08:07 - 2014-01-06 08:01 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 08:06 - 2014-01-06 08:01 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-06 07:51 - 2014-01-06 07:51 - 00000000 _____ C:\Windows\setuperr.log 2014-01-04 15:14 - 2013-12-27 19:17 - 00000000 ____D C:\Users\ASUS\Desktop\Steuer 2014-01-04 15:04 - 2013-04-13 14:52 - 00000000 ____D C:\Users\ASUS\Desktop\Kontoauszüge Cortal Consors 2014-01-04 12:48 - 2012-07-08 18:46 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Skype 2014-01-03 14:44 - 2014-01-03 14:44 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk 2014-01-03 14:44 - 2014-01-03 14:44 - 00000000 ___RD C:\Program Files (x86)\Skype 2014-01-03 14:44 - 2012-07-08 18:46 - 00000000 ____D C:\ProgramData\Skype 2014-01-02 18:38 - 2014-01-02 18:38 - 00000000 ____D C:\Program Files\Tracker Software 2014-01-02 13:00 - 2014-01-02 12:41 - 00000000 ____D C:\Users\ASUS\Documents\My Kindle Content 2014-01-02 12:41 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Local\Amazon 2014-01-02 12:40 - 2014-01-02 12:40 - 00002225 _____ C:\Users\ASUS\Desktop\Kindle.lnk 2014-01-02 12:40 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-12-30 15:24 - 2011-04-18 21:14 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-12-29 19:14 - 2013-12-29 19:13 - 00000024 _____ C:\Windows\ATKPF.ini 2013-12-27 22:12 - 2012-02-08 09:44 - 00000000 ____D C:\Users\ASUS 2013-12-23 21:50 - 2013-12-12 12:38 - 00000000 ____D C:\Users\ASUS\Desktop\privat 2013-12-22 19:01 - 2013-12-22 19:01 - 00000000 ____D C:\Users\ASUS\Documents\Steuer-Sparbuch 2013-12-17 16:16 - 2013-12-08 22:05 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-17 16:16 - 2013-12-08 22:05 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-17 16:16 - 2013-12-08 22:05 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-17 11:01 - 2013-12-17 11:01 - 00205372 _____ C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag .htm 2013-12-17 11:01 - 2013-12-17 11:01 - 00000000 ____D C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag _files 2013-12-11 08:47 - 2013-12-11 08:36 - 00000000 ____D C:\Users\ASUS\Desktop\Meisterbafög 2013-12-11 08:18 - 2013-12-09 18:24 - 00000000 ____D C:\Windows\AutoKMS Some content of TEMP: ==================== C:\Users\ASUS\AppData\Local\Temp\AskPIP_FF_.exe C:\Users\ASUS\AppData\Local\Temp\avgnt.exe C:\Users\ASUS\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 11:53 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.0 (01.07.2014:1) OS: Windows 7 Home Premium x64 Ran by ASUS on 10.01.2014 at 19:20:58,32 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1520434037-777585975-991718145-1000\Software\sweetim Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\BobyLyrics-1-codedownloader_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\BobyLyrics-1-codedownloader_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Softonic_chr_1_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Softonic_chr_1_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\BobyLyrics-1-codedownloader_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\BobyLyrics-1-codedownloader_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\Softonic_chr_1_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\Softonic_chr_1_RASMANCS Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{2749005E-2445-460F-B027-7D8A2048F70B} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\apn" Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader" Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader" ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 10.01.2014 at 19:27:59,31 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 10/01/2014 um 19:14:06 # Aktualisiert 23/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium (64 bits) # Benutzername : ASUS - ASUS-PC # Gestartet von : C:\Users\ASUS\Downloads\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** [!] Ordner Gelöscht : C:\ProgramData\Babylon [!] Ordner Gelöscht : C:\ProgramData\boost_interprocess [!] Ordner Gelöscht : C:\ProgramData\Tarma Installer [!] Ordner Gelöscht : C:\ProgramData\WPM [!] Ordner Gelöscht : C:\Program Files (x86)\goforfiles [!] Ordner Gelöscht : C:\Program Files (x86)\Mobogenie [!] Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup [!] Ordner Gelöscht : C:\Program Files (x86)\SweetIM [!] Ordner Gelöscht : C:\Program Files (x86)\Common Files\337 [!] Ordner Gelöscht : C:\Users\ASUS\AppData\Local\lollipop [!] Ordner Gelöscht : C:\Users\ASUS\AppData\Local\Mobogenie [!] Ordner Gelöscht : C:\Users\ASUS\AppData\Local\PutLockerDownloader [!] Ordner Gelöscht : C:\Users\ASUS\AppData\Local\Temp\Desk365 [!] Ordner Gelöscht : C:\Users\ASUS\AppData\LocalLow\Delta [!] Ordner Gelöscht : C:\Users\ASUS\AppData\LocalLow\Softonic [!] Ordner Gelöscht : C:\Users\ASUS\AppData\Roaming\ExpressFiles [!] Ordner Gelöscht : C:\Users\ASUS\AppData\Roaming\goforfiles [!] Ordner Gelöscht : C:\Users\ASUS\AppData\Roaming\iSafe [!] Ordner Gelöscht : C:\Users\ASUS\AppData\Roaming\pdfforge [!] Ordner Gelöscht : C:\Users\ASUS\AppData\Roaming\yourfiledownloader [!] Ordner Gelöscht : C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movie2KDownloader.com [!] Ordner Gelöscht : C:\Users\ASUS\Documents\Mobogenie [!] Ordner Gelöscht : C:\Users\Standart 1\AppData\LocalLow\SweetIM [!] Ordner Gelöscht : C:\Program Files (x86)\Mozilla Firefox\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [!] Ordner Gelöscht : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml Datei Gelöscht : C:\Users\Public\Desktop\Get The Best Facebook Chat Messenger.lnk Datei Gelöscht : C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js Datei Gelöscht : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx Datei Gelöscht : C:\Windows\System32\Tasks\Dealply Datei Gelöscht : C:\Windows\System32\Tasks\Desk 365 RunAsStdUser Datei Gelöscht : C:\Windows\System32\Tasks\Express FilesUpdate Datei Gelöscht : C:\Windows\System32\Tasks\GoforFilesUpdate ***** [ Verknüpfungen ] ***** Verknüpfung Desinfiziert : C:\Users\Public\Desktop\Google Chrome.lnk Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk Verknüpfung Desinfiziert : C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk Verknüpfung Desinfiziert : C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Verknüpfung Desinfiziert : C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk Verknüpfung Desinfiziert : C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk Verknüpfung Desinfiziert : C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Verknüpfung Desinfiziert : C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk Verknüpfung Desinfiziert : C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\blaofbhgbmeikidhlkmjhbkbfohpgekf Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Movie2KDownloader Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\desk365_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\desk365_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Mobogenie_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Mobogenie_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Movie2KDownloader_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Movie2KDownloader_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon] Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_963508d2 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ASUS_Screensaver Schlüssel Gelöscht : HKCU\Software\5228a8cbd68ea10 Schlüssel Gelöscht : HKLM\SOFTWARE\5228a8cbd68ea10 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_abbyy-pdf-transformer_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_abbyy-pdf-transformer_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command Schlüssel Gelöscht : HKCU\Software\APN PIP Schlüssel Gelöscht : HKCU\Software\BabSolution Schlüssel Gelöscht : HKCU\Software\Conduit Schlüssel Gelöscht : HKCU\Software\Delta Schlüssel Gelöscht : HKCU\Software\ExpressFiles Schlüssel Gelöscht : HKCU\Software\GoforFiles Schlüssel Gelöscht : HKCU\Software\IM Schlüssel Gelöscht : HKCU\Software\InstalledThirdPartyPrograms Schlüssel Gelöscht : HKCU\Software\lollipop Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\PIP Schlüssel Gelöscht : HKCU\Software\YourFileDownloader Schlüssel Gelöscht : HKLM\Software\DataMngr Schlüssel Gelöscht : HKLM\Software\Delta Schlüssel Gelöscht : HKLM\Software\Desksvc Schlüssel Gelöscht : HKLM\Software\ExpressFiles Schlüssel Gelöscht : HKLM\Software\GoforFiles Schlüssel Gelöscht : HKLM\Software\hdcode Schlüssel Gelöscht : HKLM\Software\PIP Schlüssel Gelöscht : HKLM\Software\SP Global Schlüssel Gelöscht : HKLM\Software\SProtector Schlüssel Gelöscht : HKLM\Software\supWPM Schlüssel Gelöscht : HKLM\Software\V9 Schlüssel Gelöscht : HKLM\Software\YourFileDownloader Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\GoforFiles Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2F603A45-D956-496B-81B5-50D782424976} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B85C4CB2-B352-4BD8-818C-BCE353599107} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Tarma Installer Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2F603A45-D956-496B-81B5-50D782424976} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B85C4CB2-B352-4BD8-818C-BCE353599107} ***** [ Browser ] ***** -\\ Internet Explorer v8.0.7600.16700 Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] -\\ Mozilla Firefox v -\\ Google Chrome v31.0.1650.63 [ Datei : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\preferences ] Gelöscht : homepage Gelöscht : urls_to_restore_on_startup ************************* AdwCleaner[R0].txt - [14132 octets] - [10/01/2014 19:12:14] AdwCleaner[S0].txt - [11910 octets] - [10/01/2014 19:14:06] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11971 octets] ########## Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.10.05 Windows 7 x64 NTFS Internet Explorer 8.0.7600.16385 ASUS :: ASUS-PC [Administrator] 10.01.2014 18:03:42 mbam-log-2014-01-10 (18-03-42).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|F:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 379050 Laufzeit: 1 Stunde(n), 24 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 1 C:\Users\ASUS\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart. Infizierte Registrierungsschlüssel: 21 HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847} (PUP.Optional.SweetPacks) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847} (PUP.Optional.SweetPacks) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1D2ABF6A-2B19-3E94-0991-5B5BDB7134DA} (PUP.Optional.ShoppingChip) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\AppDataLow\SProtector (PUP.Optional.SProtector.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\AppDataLow\Software\Crossrider (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\nationzoomSoftware (PUP.Optional.NationZoom.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo (PUP.Optional.Elex.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\Software\Iminent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 6 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|bProtector Start Page (PUP.BProtector) -> Daten: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=94DE74F06D2B9306&affID=122920&tt=230713_18220&tsp=4953 -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|bProtectorDefaultScope (PUP.BProtector) -> Daten: {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|NextLive (PUP.Optional.NextLive.A) -> Daten: C:\Windows\SysWOW64\rundll32.exe "C:\Users\ASUS\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: 1763663206601195519 -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs|bProtectTabs (PUP.Optional.BrowserProtect.A) -> Daten: hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=94DE74F06D2B9306&affID=122920&tt=230713_18220&tsp=4953 -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: 1763663206601195519 -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 8 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Conduit.A) -> Bösartig: (hxxp://search.conduit.com/?ctid=CT3323737&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP323AF41B-730F-4CC7-A3E5-8CA4D9834A75&SSPV=) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.NationZoom.A) -> Bösartig: (hxxp://www.nationzoom.com/?type=hp&ts=1389221481&from=adks&uid=3219913727_67194_94DE9D6A) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command| (PUP.Optional.NationZoom.A) -> Bösartig: ("c:\program files (x86)\internet explorer\iexplore.exe" hxxp://www.nationzoom.com/?type=sc&ts=1389221481&from=adks&uid=3219913727_67194_94DE9D6A) Gut: (iexplore.exe) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL (PUP.Optional.NationZoom.A) -> Bösartig: (hxxp://www.nationzoom.com/web/?type=ds&ts=1389221481&from=adks&uid=3219913727_67194_94DE9D6A&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.NationZoom.A) -> Bösartig: (hxxp://www.nationzoom.com/?type=hp&ts=1389221481&from=adks&uid=3219913727_67194_94DE9D6A) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|DefaultScope (PUP.Optional.Qone8) -> Bösartig: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}) Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\Software\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.NationZoom.A) -> Bösartig: (hxxp://www.nationzoom.com/?type=hp&ts=1389221481&from=adks&uid=3219913727_67194_94DE9D6A) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\Software\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.NationZoom) -> Bösartig: (hxxp://www.nationzoom.com/web/?type=ds&ts=1389221481&from=adks&uid=3219913727_67194_94DE9D6A&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 50 C:\Users\ASUS\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365 (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\1 (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\3 (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\35 (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\36 (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\39 (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\4 (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\41 (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\42 (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\62 (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\components (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\desk_bkg (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\sysicons (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\wp (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Desk 365 (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly (PUP.OPtional.Dealply.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\MPK (Refog.Keylogger) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\MPK (Refog.Keylogger) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\SysWOW64\MPK (Refog.Keylogger) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\OpenCandy\A5B7E706995540FDA9229F30F7BB39FC (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\OpenCandy\ECE993D11C6D4572B1F3646397FD1BA2 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\Install (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language\en_us (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language\es_es (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language\pt_br (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language\tr_tr (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language\zh_cn (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language\zh_tw (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\layout (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\layout\default (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\style (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Common Files\337\libcef (PUP.Optional.337Technologies.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123 (PUP.Optional.337Technologies.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\locales (PUP.Optional.337Technologies.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\SweetIM\Toolbars (PUP.Optional.SweetIM.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer (PUP.Optional.SweetIM.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT (PUP.Optional.SweetIM.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\ShoppingChip (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Löschen bei Neustart. C:\Users\ASUS\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 158 C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst-saudi-forf.exe (PUP.Optional.Hao123.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\PSupport\psupport.dll (PUP.Optional.SProtect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7KCSC6H4\component_libcef_1.1364.1123[1].exe (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\nsz9841.exe (PUP.Optional.SearchProtect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\eInstall.exe (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\fullpackage_temp1389221473\tmp\desk365.exe (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\fullpackage_temp1389221473\tmp\NewGdp.exe (PUP.Optional.WpManager.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\components\component_libcef_1.1364.1123.exe (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\Desktop\Downloads\iLividSetup-r1236-n-bc.exe (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\Desktop\Downloads\Microsoft Office 2010 Toolkit and EZ.Activator v2.2.3 (Keygen Passwords)__2963_il19303.exe (PUP.Optional.Monetizer) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\Desktop\Neuer Ordner\PDFXChange_Viewer_TSV1I3TT.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\Downloads\Groovestream.exe (PUP.Optional.Ibryte) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\Downloads\YTD471Setup.exe (PUP.Optional.Spigot.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\accelerate (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\desk_bkg_list.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\desk_list.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\desk_settings.ini (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\firstrun (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\process_mgr.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\1\angrybirds.db (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\1\angrybirds.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\3\BigFarm.db (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\3\BigFarm.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\35\Gmail.db (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\35\Gmail.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\36\Outlook.db (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\36\Outlook.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\39\ESPN.db (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\39\ESPN.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\4\Empire.db (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\4\Empire.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\41\gcalendar.db (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\41\gcalendar.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\42\pulse.db (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\42\pulse.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\62\ddtank2.db (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\app\config\62\ddtank2.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_1.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_2.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_3.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_4.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_5.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_default.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\337_7c9140b13c049fd26989f7fa25b77cb1_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\angrybirds_00ff92c12703baaf0130d6aec427d047_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\Barbie_00a67ff4ef657679a6c88553135d62ad_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\BigFarm_de933b0e5218a4db24bebe3d55ed3558_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\chrome_9116a236e403e0c532e1d035ac1c896b.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\chrome_9116a236e403e0c532e1d035ac1c896b_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\ddtank2_5d02d177c73d12e7ceb1811a8c30f9c5_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\Empire_22b42f57d1c467841280810e218d5510_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\ESPN_a7b078f5f5f5b87efcef66ab5783cf9d_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\Facebook_aab07bc79cf599b25c0110f32d46a3ef_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\gcalendar_50b3e3c5fc202f0cfcae8032b2465c1b_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\Gmail_731b6d011bd9f67463a916a496775935_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\Google_1eed88936b91d2b6bc341da82c727a8f_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\iexplore_d0a2518463b58ed5bb15e20c1c9ffcfc.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\iexplore_d0a2518463b58ed5bb15e20c1c9ffcfc_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\Mario_52934d81761dc31187a93a3a0be7fecc_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\Outlook_6f817b67fa6af1a9c8abfa3813a8595c_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\pulse_b5a242da04cc06eacd02b1ca41e3583c_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\sys_computer_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\sys_control_panel_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\sys_my_documents_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\icons\Youtube_bf18fdfc4aefd6417a8bacae4be5b415_48_48.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\337.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\337_7c9140b13c049fd26989f7fa25b77cb1.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\barbie.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\Barbie_00a67ff4ef657679a6c88553135d62ad.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\facebook.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\Facebook_aab07bc79cf599b25c0110f32d46a3ef.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\GameCenter.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\google.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\Google_1eed88936b91d2b6bc341da82c727a8f.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\mario.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\Mario_52934d81761dc31187a93a3a0be7fecc.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\twitter.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\v9.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\youtube.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\promote\Youtube_bf18fdfc4aefd6417a8bacae4be5b415.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\sysicons\07584c03a5dd11a6104e45e8ad03b3fe_104.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\sysicons\07584c03a5dd11a6104e45e8ad03b3fe_107.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\sysicons\0ee97b8fd2dcf7a76b5be19fd6fef3ea_21.ico (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\wp\r0.jpg (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\wp\r1.jpg (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\wp\r2.jpg (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\wp\r3.jpg (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\wp\r4.jpg (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\wp\r5.jpg (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\wp\r6.jpg (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\wp\r7.jpg (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\wp\r8.jpg (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\Desk 365\wp\r9.jpg (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Desk 365\promote.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Desk 365\desk_bkg_list.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Desk 365\desk_list.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Desk 365\desk_settings.ini (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Desk 365\process_mgr.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Desk 365\recent.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\Uninstall DealPly.lnk (PUP.OPtional.Dealply.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly Help.lnk (PUP.OPtional.Dealply.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly.lnk (PUP.OPtional.Dealply.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data (PUP.Optional.BProtector.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences (PUP.Optional.BProtector.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart. C:\Users\ASUS\AppData\Roaming\OpenCandy\A5B7E706995540FDA9229F30F7BB39FC\Setupsft_chr_p1v7.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\OpenCandy\ECE993D11C6D4572B1F3646397FD1BA2\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\main (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\msvcp100.dll (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\msvcr100.dll (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\segoeui.ttf (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\segoeuib.ttf (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\app_icon.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\change_skin.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\combo_skin.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\edit_skin.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\install_back.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\install_button_skin.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\install_check_checked.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\install_check_intermediate.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\install_check_uncheck.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\install_logo.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\install_resource.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\patch_file_icon.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\pic-error.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\pic-info.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\pic-question.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\pic-warning.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\popup_dialog_bk.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\progressbar_bk.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\progressbar_image.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\radio_normal.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\radio_selected.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\image\default\sys_close.png (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\Install\4zip.inst (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\Install\AirZip.inst (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\Install\edesk.inst (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\Install\gamelogin.inst (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language\protocol.txt (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language\en_us\install_lang.ini (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language\es_es\install_lang.ini (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language\pt_br\install_lang.ini (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\language\tr_tr\install_lang.ini (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\layout\default\eDeskInstall.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\layout\default\gamelogin.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\layout\default\install_msgbox.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\layout\default\languageSelect.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\layout\default\uninstgl.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Local\Temp\Desk365\eInstall\style\install_style.xml (PUP.Optional.Desk365.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\icudt.dll (PUP.Optional.337Technologies.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\libcef.dll (PUP.Optional.337Technologies.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\locales\en-US.pak (PUP.Optional.337Technologies.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\ASUS\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Hoffe habe alles richtig gemacht. Und schonmal riesen DANKE Falls es das jetzt war! Wie kann ich in Zukunft verhinder, dass ich mir solch unerwünschte Besucher erspare? Habe nur das normale AntiVir laufen |
11.01.2014, 13:32 | #6 |
/// the machine /// TB-Ausbilder | Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start Ich empfehle immer Emsisoft. ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start |
11.01.2014, 23:18 | #7 |
| Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser StartFRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2014 05 Ran by ASUS (administrator) on ASUS-PC on 11-01-2014 23:14:53 Running from C:\Users\ASUS\Downloads\FRST-OlderVersion Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= ( Copyrighted © ) C:\Windows\SysWOW64\pupfzeq.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (NVIDIA Corporation) C:\Windows\SysWOW64\nvSCPAPISvr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (ATK) C:\Program Files\P4G\BatteryLife.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (hxxp://simple-files.com/) C:\Program Files (x86)\SimpleFiles\SFUpdater.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (GARMIN Corp.) C:\Program Files (x86)\Garmin\Training Center\gStart.exe (GARMIN Corp.) C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (Dropbox, Inc.) C:\Users\ASUS\AppData\Roaming\Dropbox\bin\Dropbox.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (ASUS) C:\Windows\AsScrPro.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [16414824 2009-12-11] (NVIDIA Corporation) HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.) HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.) HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6998656 2009-10-27] (ASUS) HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2009-08-20] (ASUS) HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BCSSync] - D:\Office2003\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKCU\...\Run: [gStart] - C:\Program Files (x86)\Garmin\Training Center\gStart.exe [1891416 2008-08-13] (GARMIN Corp.) HKCU\...\Run: [ANT Agent] - C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe [14749544 2012-03-23] (GARMIN Corp.) HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) MountPoints2: {88626bc2-4238-11e3-a540-485b392e4fa6} - F:\start.exe /auto MountPoints2: {abeee6c9-6931-11e1-ad3d-485b392e4fa6} - F:\Startme.exe MountPoints2: {da536248-a058-11e2-8185-485b392e4fa6} - F:\AutoRun.exe MountPoints2: {da53625c-a058-11e2-8185-485b392e4fa6} - F:\AutoRun.exe HKU\Standart 1\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWow64\Macromed\Flash\FlashUtil10c.exe [257440 2009-07-18] (Adobe Systems, Inc.) Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\ASUS\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x00CE9CA4E52BCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office2003\Office14\URLREDIR.DLL (Microsoft Corporation) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_171.dll () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll () FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\OFFICE~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\OFFICE~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Movie2kDownloader - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\movie2kdownloader@movie2kdownloader.com.xpi [2012-12-13] FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.com" CHR Extension: (Google Drive) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 [2014-01-06] CHR Extension: (YouTube) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1 [2014-01-06] CHR Extension: (Google Search) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1 [2014-01-06] CHR Extension: (Google Wallet) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1 [2014-01-06] CHR Extension: (Gmail) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2 [2014-01-06] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-22] (Avira Operations GmbH & Co. KG) R2 Stereo Service; C:\Windows\SysWOW64\nvSCPAPISvr.exe [239208 2009-12-11] (NVIDIA Corporation) R2 xohmiewzgtcwxo; c:\windows\SysWOW64\pupfzeq.exe [102400 2012-10-20] ( Copyrighted © ) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-22] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-11-01] (DT Soft Ltd) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [32256 2009-07-07] (hxxp://libusb-win32.sourceforge.net) S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation) S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation) S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation) S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation) S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation) S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation) S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation) S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2009-06-05] () R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2495944 2010-01-31] (Digital Camera) S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [x] S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [x] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x] S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [x] S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [x] U3 tmlwf; U3 tmwfp; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-11 23:14 - 2014-01-11 23:14 - 00001032 _____ C:\Users\ASUS\Desktop\checkup.txt 2014-01-11 23:11 - 2014-01-11 23:12 - 00987410 _____ C:\Users\ASUS\Desktop\SecurityCheck.exe 2014-01-11 21:46 - 2014-01-11 21:47 - 02347384 _____ (ESET) C:\Users\ASUS\Downloads\esetsmartinstaller_enu (1).exe 2014-01-11 20:23 - 2014-01-11 20:24 - 02347384 _____ (ESET) C:\Users\ASUS\Downloads\esetsmartinstaller_enu.exe 2014-01-10 19:37 - 2014-01-10 19:37 - 00033883 _____ C:\Users\ASUS\Desktop\FRST.txt 2014-01-10 19:27 - 2014-01-10 19:27 - 00002255 _____ C:\Users\ASUS\Desktop\JRT.txt 2014-01-10 19:20 - 2014-01-10 19:20 - 00000000 ____D C:\Windows\ERUNT 2014-01-10 19:19 - 2014-01-10 19:20 - 01037068 _____ (Thisisu) C:\Users\ASUS\Downloads\JRT.exe 2014-01-10 19:17 - 2014-01-10 19:17 - 00012100 _____ C:\Users\ASUS\Desktop\AdwCleaner[S0].txt 2014-01-10 19:12 - 2014-01-10 19:14 - 00000000 ____D C:\AdwCleaner 2014-01-10 19:11 - 2014-01-10 19:11 - 01233962 _____ C:\Users\ASUS\Downloads\adwcleaner.exe 2014-01-10 17:52 - 2014-01-10 17:52 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Malwarebytes 2014-01-10 17:51 - 2014-01-10 17:52 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-10 17:51 - 2014-01-10 17:51 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-10 17:51 - 2014-01-10 17:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-10 17:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-10 17:02 - 2014-01-10 17:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ASUS\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-10 17:00 - 2014-01-11 23:14 - 00000000 ____D C:\Users\ASUS\Downloads\FRST-OlderVersion 2014-01-09 20:56 - 2014-01-09 21:12 - 38364774 _____ C:\Users\ASUS\Desktop\Präsentation.pptx 2014-01-09 19:32 - 2014-01-10 16:39 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Apple Computer 2014-01-09 19:32 - 2014-01-09 19:32 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple Computer 2014-01-09 19:27 - 2014-01-09 19:28 - 00000000 ____D C:\Program Files (x86)\QuickTime 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple Computer 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller.exe 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller (1).exe 2014-01-09 12:46 - 2014-01-09 12:46 - 00000968 _____ C:\Users\ASUS\Desktop\Dropbox - Verknüpfung.lnk 2014-01-09 00:48 - 2014-01-09 00:48 - 00001200 _____ C:\Users\ASUS\Desktop\Format Factory.lnk 2014-01-09 00:48 - 2014-01-09 00:48 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-09 00:47 - 2014-01-09 00:47 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-09 00:46 - 2014-01-09 00:46 - 61746584 _____ (Free Time) C:\Users\ASUS\Downloads\FFSetup3.2.1.0.exe 2014-01-09 00:07 - 2014-01-09 00:43 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Youtube Downloader HD 2014-01-09 00:05 - 2014-01-09 00:05 - 09663232 _____ (YoutubeDownloaderHD.com ) C:\Users\ASUS\Downloads\youtube_downloader_hd_setup.exe 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\Documents\Aiseesoft Studio 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\AppData\Local\Aiseesoft Studio 2014-01-08 23:59 - 2014-01-09 00:01 - 24615784 _____ (Aiseesoft Studio ) C:\Users\ASUS\Downloads\as-total-video-converter.exe 2014-01-08 23:47 - 2014-01-08 23:58 - 00000000 ____D C:\Program Files (x86)\Free mp3 Wma Converter 2014-01-08 23:47 - 2014-01-08 23:47 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\FreeAudioPack 2014-01-08 23:47 - 2011-09-29 14:20 - 02084864 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudDesign.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 01986560 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudFile.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 01212416 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioInfos.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00479232 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioVisu.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00458752 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudPlayer.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00454656 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioRecord.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00417792 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudDisplay.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00348160 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\WMAFile.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00164144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMCT232.OCX 2014-01-08 23:47 - 2011-09-29 14:20 - 00116296 _____ C:\Windows\SysWOW64\NCTWMAProfiles.prx 2014-01-08 23:47 - 2011-09-29 14:19 - 00224016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TABCTL32.OCX 2014-01-08 23:47 - 2011-09-29 14:19 - 00152848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMDLG32.OCX 2014-01-08 23:47 - 2011-09-29 14:19 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCFR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00119568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6FR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.OCX 2014-01-08 23:47 - 2011-09-29 14:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscc2fr.dll 2014-01-08 23:47 - 2011-09-29 14:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CMDLGFR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TABCTFR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetfr.DLL 2014-01-08 23:46 - 2014-01-08 23:46 - 00458744 _____ (Bandoo Media Inc) C:\Users\ASUS\Downloads\Setup21_FreeConverter.exe 2014-01-08 13:02 - 2014-01-11 23:14 - 00000000 ____D C:\FRST 2014-01-08 13:02 - 2014-01-08 13:03 - 00029834 _____ C:\Users\ASUS\Downloads\FRST.txt 2014-01-08 13:02 - 2014-01-08 13:03 - 00026161 _____ C:\Users\ASUS\Downloads\Addition.txt 2014-01-08 12:59 - 2014-01-10 17:00 - 00214016 _____ C:\Users\ASUS\Downloads\FRST64.exe 2014-01-08 10:03 - 2014-01-08 10:06 - 02336018 _____ C:\Users\ASUS\Downloads\20462436_6144b4a49714d85f0b7a9095bf8750e6e7334992.cab 2014-01-08 09:55 - 2014-01-08 09:57 - 01688966 _____ C:\Users\ASUS\Downloads\win7-9.2.0.113-whql.zip 2014-01-08 07:35 - 2014-01-10 19:08 - 00063560 _____ C:\Windows\PFRO.log 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204736.zip 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204731.zip 2014-01-06 08:39 - 2014-01-06 08:39 - 00000423 _____ C:\Users\Public\Desktop\YTD Video Downloader.lnk 2014-01-06 08:21 - 2014-01-06 08:21 - 00298954 _____ C:\Users\ASUS\Downloads\Download_33396.zip 2014-01-06 08:07 - 2014-01-10 19:14 - 00001280 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-06 08:01 - 2014-01-11 23:12 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-06 08:01 - 2014-01-11 17:34 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-06 08:01 - 2014-01-06 08:07 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 08:01 - 2014-01-06 08:07 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 08:01 - 2014-01-06 08:06 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-06 07:51 - 2014-01-11 20:20 - 00001838 _____ C:\Windows\setupact.log 2014-01-06 07:51 - 2014-01-06 07:51 - 00000000 _____ C:\Windows\setuperr.log 2014-01-03 14:44 - 2014-01-03 14:44 - 00000000 ___RD C:\Program Files (x86)\Skype 2014-01-02 18:38 - 2014-01-02 18:38 - 00000000 ____D C:\Program Files\Tracker Software 2014-01-02 12:41 - 2014-01-02 13:00 - 00000000 ____D C:\Users\ASUS\Documents\My Kindle Content 2014-01-02 12:40 - 2014-01-02 12:41 - 00000000 ____D C:\Users\ASUS\AppData\Local\Amazon 2014-01-02 12:40 - 2014-01-02 12:40 - 00002225 _____ C:\Users\ASUS\Desktop\Kindle.lnk 2014-01-02 12:40 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-12-29 19:13 - 2013-12-29 19:14 - 00000024 _____ C:\Windows\ATKPF.ini 2013-12-27 22:12 - 2014-01-11 17:34 - 00000000 ___RD C:\Users\ASUS\Dropbox 2013-12-27 22:08 - 2014-01-10 19:23 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-12-27 22:07 - 2014-01-11 17:34 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Dropbox 2013-12-27 19:17 - 2014-01-04 15:14 - 00000000 ____D C:\Users\ASUS\Desktop\Steuer 2013-12-22 20:56 - 2014-01-10 19:06 - 00000000 ____D C:\Users\ASUS\Desktop\Neuer Ordner 2013-12-22 19:01 - 2013-12-22 19:01 - 00000000 ____D C:\Users\ASUS\Documents\Steuer-Sparbuch 2013-12-17 11:01 - 2013-12-17 11:01 - 00205372 _____ C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag .htm 2013-12-17 11:01 - 2013-12-17 11:01 - 00000000 ____D C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag _files 2013-12-12 12:38 - 2013-12-23 21:50 - 00000000 ____D C:\Users\ASUS\Desktop\privat ==================== One Month Modified Files and Folders ======= 2014-01-11 23:14 - 2014-01-11 23:14 - 00001032 _____ C:\Users\ASUS\Desktop\checkup.txt 2014-01-11 23:14 - 2014-01-10 17:00 - 00000000 ____D C:\Users\ASUS\Downloads\FRST-OlderVersion 2014-01-11 23:14 - 2014-01-08 13:02 - 00000000 ____D C:\FRST 2014-01-11 23:12 - 2014-01-11 23:11 - 00987410 _____ C:\Users\ASUS\Desktop\SecurityCheck.exe 2014-01-11 23:12 - 2014-01-06 08:01 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-11 21:47 - 2014-01-11 21:46 - 02347384 _____ (ESET) C:\Users\ASUS\Downloads\esetsmartinstaller_enu (1).exe 2014-01-11 20:25 - 2010-08-13 16:45 - 00696370 _____ C:\Windows\system32\perfh007.dat 2014-01-11 20:25 - 2010-08-13 16:45 - 00147634 _____ C:\Windows\system32\perfc007.dat 2014-01-11 20:25 - 2009-07-14 06:13 - 01611160 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-11 20:24 - 2014-01-11 20:23 - 02347384 _____ (ESET) C:\Users\ASUS\Downloads\esetsmartinstaller_enu.exe 2014-01-11 20:20 - 2014-01-06 07:51 - 00001838 _____ C:\Windows\setupact.log 2014-01-11 20:20 - 2011-04-18 20:34 - 01825160 _____ C:\Windows\WindowsUpdate.log 2014-01-11 17:42 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-11 17:42 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-11 17:37 - 2013-12-09 18:24 - 00003484 _____ C:\Windows\System32\Tasks\AutoKMS 2014-01-11 17:34 - 2014-01-06 08:01 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-11 17:34 - 2013-12-27 22:12 - 00000000 ___RD C:\Users\ASUS\Dropbox 2014-01-11 17:34 - 2013-12-27 22:07 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Dropbox 2014-01-11 17:33 - 2011-04-18 21:09 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-11 17:33 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-10 19:37 - 2014-01-10 19:37 - 00033883 _____ C:\Users\ASUS\Desktop\FRST.txt 2014-01-10 19:27 - 2014-01-10 19:27 - 00002255 _____ C:\Users\ASUS\Desktop\JRT.txt 2014-01-10 19:23 - 2013-12-27 22:08 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-10 19:23 - 2012-02-08 09:45 - 00000000 ___RD C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-10 19:20 - 2014-01-10 19:20 - 00000000 ____D C:\Windows\ERUNT 2014-01-10 19:20 - 2014-01-10 19:19 - 01037068 _____ (Thisisu) C:\Users\ASUS\Downloads\JRT.exe 2014-01-10 19:17 - 2014-01-10 19:17 - 00012100 _____ C:\Users\ASUS\Desktop\AdwCleaner[S0].txt 2014-01-10 19:14 - 2014-01-10 19:12 - 00000000 ____D C:\AdwCleaner 2014-01-10 19:14 - 2014-01-06 08:07 - 00001280 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-10 19:14 - 2012-02-08 09:46 - 00000983 _____ C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-10 19:14 - 2012-02-08 09:45 - 00001166 _____ C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-10 19:11 - 2014-01-10 19:11 - 01233962 _____ C:\Users\ASUS\Downloads\adwcleaner.exe 2014-01-10 19:08 - 2014-01-08 07:35 - 00063560 _____ C:\Windows\PFRO.log 2014-01-10 19:06 - 2013-12-22 20:56 - 00000000 ____D C:\Users\ASUS\Desktop\Neuer Ordner 2014-01-10 19:06 - 2013-11-30 19:31 - 00000000 ____D C:\Program Files (x86)\PSupport 2014-01-10 17:52 - 2014-01-10 17:52 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Malwarebytes 2014-01-10 17:52 - 2014-01-10 17:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-10 17:51 - 2014-01-10 17:51 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-10 17:51 - 2014-01-10 17:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-10 17:25 - 2014-01-10 17:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ASUS\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-10 17:00 - 2014-01-08 12:59 - 00214016 _____ C:\Users\ASUS\Downloads\FRST64.exe 2014-01-10 16:39 - 2014-01-09 19:32 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Apple Computer 2014-01-10 16:39 - 2011-04-18 21:19 - 00001852 _____ C:\Windows\system32\AutoRunFilter.ini 2014-01-09 21:12 - 2014-01-09 20:56 - 38364774 _____ C:\Users\ASUS\Desktop\Präsentation.pptx 2014-01-09 19:32 - 2014-01-09 19:32 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple Computer 2014-01-09 19:28 - 2014-01-09 19:27 - 00000000 ____D C:\Program Files (x86)\QuickTime 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple Computer 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller.exe 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller (1).exe 2014-01-09 12:46 - 2014-01-09 12:46 - 00000968 _____ C:\Users\ASUS\Desktop\Dropbox - Verknüpfung.lnk 2014-01-09 08:36 - 2013-11-30 17:43 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\vlc 2014-01-09 01:29 - 2009-07-14 05:45 - 00368712 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-09 00:48 - 2014-01-09 00:48 - 00001200 _____ C:\Users\ASUS\Desktop\Format Factory.lnk 2014-01-09 00:48 - 2014-01-09 00:48 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-09 00:47 - 2014-01-09 00:47 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-09 00:46 - 2014-01-09 00:46 - 61746584 _____ (Free Time) C:\Users\ASUS\Downloads\FFSetup3.2.1.0.exe 2014-01-09 00:43 - 2014-01-09 00:07 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Youtube Downloader HD 2014-01-09 00:05 - 2014-01-09 00:05 - 09663232 _____ (YoutubeDownloaderHD.com ) C:\Users\ASUS\Downloads\youtube_downloader_hd_setup.exe 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\Documents\Aiseesoft Studio 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\AppData\Local\Aiseesoft Studio 2014-01-09 00:01 - 2014-01-08 23:59 - 24615784 _____ (Aiseesoft Studio ) C:\Users\ASUS\Downloads\as-total-video-converter.exe 2014-01-08 23:58 - 2014-01-08 23:47 - 00000000 ____D C:\Program Files (x86)\Free mp3 Wma Converter 2014-01-08 23:47 - 2014-01-08 23:47 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\FreeAudioPack 2014-01-08 23:46 - 2014-01-08 23:46 - 00458744 _____ (Bandoo Media Inc) C:\Users\ASUS\Downloads\Setup21_FreeConverter.exe 2014-01-08 23:41 - 2013-11-01 10:34 - 00000000 ____D C:\Users\ASUS\AppData\Local\Microsoft Help 2014-01-08 13:03 - 2014-01-08 13:02 - 00029834 _____ C:\Users\ASUS\Downloads\FRST.txt 2014-01-08 13:03 - 2014-01-08 13:02 - 00026161 _____ C:\Users\ASUS\Downloads\Addition.txt 2014-01-08 12:59 - 2012-02-08 09:47 - 00088280 _____ C:\Users\ASUS\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-08 12:06 - 2013-11-01 10:34 - 00000000 ____D C:\ProgramData\Microsoft Help 2014-01-08 10:06 - 2014-01-08 10:03 - 02336018 _____ C:\Users\ASUS\Downloads\20462436_6144b4a49714d85f0b7a9095bf8750e6e7334992.cab 2014-01-08 09:57 - 2014-01-08 09:55 - 01688966 _____ C:\Users\ASUS\Downloads\win7-9.2.0.113-whql.zip 2014-01-08 07:38 - 2011-04-18 21:19 - 00001485 _____ C:\Windows\system32\ServiceFilter.ini 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204736.zip 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204731.zip 2014-01-06 23:14 - 2012-02-13 16:49 - 00000000 ____D C:\Users\ASUS\AppData\Local\Google 2014-01-06 08:39 - 2014-01-06 08:39 - 00000423 _____ C:\Users\Public\Desktop\YTD Video Downloader.lnk 2014-01-06 08:21 - 2014-01-06 08:21 - 00298954 _____ C:\Users\ASUS\Downloads\Download_33396.zip 2014-01-06 08:07 - 2014-01-06 08:01 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 08:07 - 2014-01-06 08:01 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 08:06 - 2014-01-06 08:01 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-06 07:51 - 2014-01-06 07:51 - 00000000 _____ C:\Windows\setuperr.log 2014-01-04 15:14 - 2013-12-27 19:17 - 00000000 ____D C:\Users\ASUS\Desktop\Steuer 2014-01-04 15:04 - 2013-04-13 14:52 - 00000000 ____D C:\Users\ASUS\Desktop\Kontoauszüge Cortal Consors 2014-01-04 12:48 - 2012-07-08 18:46 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Skype 2014-01-03 14:44 - 2014-01-03 14:44 - 00000000 ___RD C:\Program Files (x86)\Skype 2014-01-03 14:44 - 2012-07-08 18:46 - 00000000 ____D C:\ProgramData\Skype 2014-01-02 18:38 - 2014-01-02 18:38 - 00000000 ____D C:\Program Files\Tracker Software 2014-01-02 13:00 - 2014-01-02 12:41 - 00000000 ____D C:\Users\ASUS\Documents\My Kindle Content 2014-01-02 12:41 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Local\Amazon 2014-01-02 12:40 - 2014-01-02 12:40 - 00002225 _____ C:\Users\ASUS\Desktop\Kindle.lnk 2014-01-02 12:40 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-12-30 15:24 - 2011-04-18 21:14 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-12-29 19:14 - 2013-12-29 19:13 - 00000024 _____ C:\Windows\ATKPF.ini 2013-12-27 22:12 - 2012-02-08 09:44 - 00000000 ____D C:\Users\ASUS 2013-12-23 21:50 - 2013-12-12 12:38 - 00000000 ____D C:\Users\ASUS\Desktop\privat 2013-12-22 19:01 - 2013-12-22 19:01 - 00000000 ____D C:\Users\ASUS\Documents\Steuer-Sparbuch 2013-12-17 16:16 - 2013-12-08 22:05 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-17 16:16 - 2013-12-08 22:05 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-17 16:16 - 2013-12-08 22:05 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-17 11:01 - 2013-12-17 11:01 - 00205372 _____ C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag .htm 2013-12-17 11:01 - 2013-12-17 11:01 - 00000000 ____D C:\Users\ASUS\Desktop\inSüdthüringen.de Gibt´s den nächsten Paukenschlag _files Some content of TEMP: ==================== C:\Users\ASUS\AppData\Local\Temp\AskPIP_FF_.exe C:\Users\ASUS\AppData\Local\Temp\avgnt.exe C:\Users\ASUS\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-11 13:06 ==================== End Of Log ============================ Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=1439da357febe642a16748d3d32a7873 # engine=16619 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-11 08:45:28 # local_time=2014-01-11 09:45:28 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7600 NT # compatibility_mode=1799 16775165 100 94 13893 4358655 6645 0 # compatibility_mode=5893 16776574 66 85 59818795 141102978 0 0 # scanned=116864 # found=3 # cleaned=0 # scan_time=4206 sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll.vir" sh=8DCC20DD8C68CA221028902EAC4DED54E4A83C1B ft=1 fh=c71c0011726bcc1b vn="a variant of Win32/KeyLogger.Beyond.B application" ac=I fn="C:\Windows\System32\msuuncern.dll" sh=8DCC20DD8C68CA221028902EAC4DED54E4A83C1B ft=1 fh=c71c0011726bcc1b vn="a variant of Win32/KeyLogger.Beyond.B application" ac=I fn="C:\Windows\SysWOW64\msuuncern.dll" ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=1439da357febe642a16748d3d32a7873 # engine=16619 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-11 10:05:46 # local_time=2014-01-11 11:05:46 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7600 NT # compatibility_mode=1799 16775165 100 94 18711 4363473 11463 0 # compatibility_mode=5893 16776574 66 85 59823613 141107796 0 0 # scanned=126216 # found=3 # cleaned=0 # scan_time=4570 sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll.vir" sh=8DCC20DD8C68CA221028902EAC4DED54E4A83C1B ft=1 fh=c71c0011726bcc1b vn="a variant of Win32/KeyLogger.Beyond.B application" ac=I fn="C:\Windows\System32\msuuncern.dll" sh=8DCC20DD8C68CA221028902EAC4DED54E4A83C1B ft=1 fh=c71c0011726bcc1b vn="a variant of Win32/KeyLogger.Beyond.B application" ac=I fn="C:\Windows\SysWOW64\msuuncern.dll" Code:
ATTFilter Results of screen317's Security Check version 0.99.78 Windows 7 x64 (UAC is enabled) Out of date service pack!! ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Flash Player 10 Flash Player out of Date! Adobe Flash Player 11.6.602.171 Adobe Reader 10.1.3 Adobe Reader out of Date! Google Chrome 31.0.1650.63 ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` |
12.01.2014, 09:16 | #8 |
/// the machine /// TB-Ausbilder | Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start Flash, Adobe und Windows updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter R2 xohmiewzgtcwxo; c:\windows\SysWOW64\pupfzeq.exe [102400 2012-10-20] ( Copyrighted © ) c:\windows\SysWOW64\pupfzeq.exe C:\Windows\System32\msuuncern.dll C:\Windows\SysWOW64\msuuncern.dll Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Frisches FRST Log bitte. Noch probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
18.01.2014, 19:54 | #9 |
| Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser StartCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-01-2014 03 Ran by ASUS at 2014-01-18 19:46:07 Run:1 Running from C:\Users\ASUS\Downloads\FRST-OlderVersion Boot Mode: Normal ============================================== Content of fixlist: ***************** R2 xohmiewzgtcwxo; c:\windows\SysWOW64\pupfzeq.exe [102400 2012-10-20] ( Copyrighted © ) c:\windows\SysWOW64\pupfzeq.exe C:\Windows\System32\msuuncern.dll C:\Windows\SysWOW64\msuuncern.dll ***************** xohmiewzgtcwxo => Service deleted successfully. c:\windows\SysWOW64\pupfzeq.exe => Moved successfully. "C:\Windows\System32\msuuncern.dll" => File/Directory not found. C:\Windows\SysWOW64\msuuncern.dll => Moved successfully. The system needs a manual reboot. ==== End of Fixlog ==== FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-01-2014 03 Ran by ASUS (administrator) on ASUS-PC on 18-01-2014 19:47:26 Running from C:\Users\ASUS\Downloads\FRST-OlderVersion Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= () c:\windows\SysWOW64\pupfzeq.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (NVIDIA Corporation) C:\Windows\SysWOW64\nvSCPAPISvr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (ATK) C:\Program Files\P4G\BatteryLife.exe () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe (hxxp://simple-files.com/) C:\Program Files (x86)\SimpleFiles\SFUpdater.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (GARMIN Corp.) C:\Program Files (x86)\Garmin\Training Center\gStart.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (GARMIN Corp.) C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (Dropbox, Inc.) C:\Users\ASUS\AppData\Roaming\Dropbox\bin\Dropbox.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (ASUS) C:\Windows\AsScrPro.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [16414824 2009-12-11] (NVIDIA Corporation) HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.) HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.) HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6998656 2009-10-27] (ASUS) HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2009-08-20] (ASUS) HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BCSSync] - D:\Office2003\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKCU\...\Run: [gStart] - C:\Program Files (x86)\Garmin\Training Center\gStart.exe [1891416 2008-08-13] (GARMIN Corp.) HKCU\...\Run: [ANT Agent] - C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe [14749544 2012-03-23] (GARMIN Corp.) HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) MountPoints2: {88626bc2-4238-11e3-a540-485b392e4fa6} - F:\start.exe /auto MountPoints2: {abeee6c9-6931-11e1-ad3d-485b392e4fa6} - F:\Startme.exe MountPoints2: {da536248-a058-11e2-8185-485b392e4fa6} - F:\AutoRun.exe MountPoints2: {da53625c-a058-11e2-8185-485b392e4fa6} - F:\AutoRun.exe HKU\Standart 1\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWow64\Macromed\Flash\FlashUtil10c.exe Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\ASUS\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x00CE9CA4E52BCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office2003\Office14\URLREDIR.DLL (Microsoft Corporation) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\OFFICE~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\OFFICE~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Movie2kDownloader - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\movie2kdownloader@movie2kdownloader.com.xpi [2012-12-13] FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon Chrome: ======= CHR HomePage: hxxp://www.google.com CHR Plugin: (Widevine Content Decryption Module) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\widevinecdmadapter.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\pdf.dll () CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll No File CHR Plugin: (Microsoft Office 2010) - D:\OFFICE~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - D:\OFFICE~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Extension: (Google Drive) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-06] CHR Extension: (YouTube) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-13] CHR Extension: (Google-Suche) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-13] CHR Extension: (Google Wallet) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01] CHR Extension: (Google Mail) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-13] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-22] (Avira Operations GmbH & Co. KG) R2 Stereo Service; C:\Windows\SysWOW64\nvSCPAPISvr.exe [239208 2009-12-11] (NVIDIA Corporation) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-22] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-11-01] (DT Soft Ltd) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [32256 2009-07-07] (hxxp://libusb-win32.sourceforge.net) S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation) S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation) S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation) S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation) S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation) S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation) S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation) S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2009-06-05] () R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2495944 2010-01-31] (Digital Camera) S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [x] S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [x] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x] S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [x] S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [x] U3 tmlwf; U3 tmwfp; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-18 19:31 - 2011-02-19 07:37 - 01135104 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-01-18 17:23 - 2010-09-14 07:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2014-01-18 17:23 - 2010-09-14 07:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll 2014-01-18 16:38 - 2012-07-26 05:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-01-18 16:38 - 2012-07-26 05:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-01-18 16:38 - 2012-07-26 03:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2014-01-18 16:38 - 2012-06-02 15:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2014-01-18 16:20 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-18 16:17 - 2014-01-18 16:17 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-18 16:17 - 2014-01-18 16:17 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-18 16:17 - 2014-01-18 16:17 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-18 16:17 - 2014-01-18 16:17 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-18 16:17 - 2014-01-18 16:17 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-18 16:17 - 2014-01-18 16:17 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-18 16:17 - 2014-01-18 16:17 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-18 16:17 - 2014-01-18 16:17 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-18 16:17 - 2014-01-18 16:17 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-18 16:17 - 2014-01-18 16:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-18 16:07 - 2014-01-18 16:19 - 00004599 _____ C:\Windows\IE9_main.log 2014-01-18 15:46 - 2012-12-16 17:52 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-01-18 15:46 - 2012-12-16 15:40 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-01-18 15:46 - 2012-12-16 15:25 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-01-18 15:46 - 2012-12-16 15:25 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-01-18 15:45 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-01-18 15:45 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-01-18 15:45 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-01-18 15:45 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-01-18 15:45 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-01-18 15:45 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-01-18 15:45 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-01-18 15:45 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-01-18 15:30 - 2012-03-01 07:54 - 00022896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2014-01-18 15:30 - 2012-03-01 07:40 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-01-18 15:30 - 2012-03-01 07:35 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2014-01-18 15:30 - 2012-03-01 06:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-01-18 15:30 - 2012-03-01 06:40 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2014-01-18 15:22 - 2014-01-18 15:22 - 00261760 _____ C:\Windows\msxml4-KB2758694-enu.LOG 2014-01-18 15:19 - 2014-01-18 15:22 - 00000000 ____D C:\Windows\system32\MRT 2014-01-18 15:19 - 2014-01-06 16:20 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-18 15:06 - 2014-01-18 15:07 - 00510317 _____ C:\Users\ASUS\Downloads\4002641001404_0924.zip 2014-01-18 14:46 - 2013-02-12 16:42 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-01-18 14:46 - 2013-02-12 16:37 - 03138048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-01-18 14:46 - 2013-02-12 16:31 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2014-01-18 14:46 - 2013-02-12 16:13 - 02691072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-01-18 14:46 - 2013-02-12 16:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2014-01-18 14:46 - 2013-02-12 14:59 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-01-18 14:46 - 2012-01-04 10:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2014-01-18 14:46 - 2012-01-04 10:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2014-01-18 14:45 - 2012-11-30 00:21 - 00420032 _____ C:\Windows\SysWOW64\locale.nls 2014-01-18 14:45 - 2012-11-30 00:19 - 00420032 _____ C:\Windows\system32\locale.nls 2014-01-18 14:44 - 2013-04-12 15:36 - 01653096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-01-18 14:44 - 2012-12-07 06:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-01-18 14:44 - 2012-12-07 06:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-01-18 14:44 - 2012-12-07 06:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2014-01-18 14:44 - 2012-12-07 05:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2014-01-18 14:44 - 2012-12-07 04:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2014-01-18 14:44 - 2012-12-07 04:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2014-01-18 14:44 - 2012-12-07 04:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2014-01-18 14:44 - 2012-06-09 06:30 - 14165504 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-01-18 14:44 - 2012-06-09 05:46 - 12868608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-01-18 14:44 - 2010-12-21 07:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2014-01-18 14:44 - 2010-12-21 07:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-01-18 14:44 - 2010-12-21 07:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll 2014-01-18 14:44 - 2010-12-21 07:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2014-01-18 14:44 - 2010-12-21 07:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2014-01-18 14:44 - 2010-12-21 07:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2014-01-18 14:44 - 2010-12-21 07:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-01-18 14:44 - 2010-12-21 06:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2014-01-18 14:44 - 2010-12-21 06:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-01-18 14:44 - 2010-12-21 06:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll 2014-01-18 14:44 - 2010-12-21 06:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll 2014-01-18 14:44 - 2010-12-21 06:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll 2014-01-18 14:44 - 2010-12-21 06:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-01-18 14:43 - 2013-03-01 04:32 - 03150848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-18 14:43 - 2013-02-12 15:02 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-01-18 14:43 - 2012-11-09 06:34 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-01-18 14:43 - 2012-11-09 06:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-01-18 14:43 - 2012-11-09 05:49 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2014-01-18 14:43 - 2012-11-09 05:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-01-18 14:43 - 2012-11-02 06:30 - 02001408 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-01-18 14:43 - 2012-11-02 06:30 - 01880064 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-01-18 14:43 - 2012-11-02 05:50 - 01388544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-01-18 14:43 - 2012-11-02 05:50 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-01-18 14:43 - 2012-06-02 06:38 - 00152432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-01-18 14:43 - 2012-06-02 06:38 - 00095088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-01-18 14:43 - 2012-06-02 06:37 - 00459216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-01-18 14:43 - 2012-06-02 06:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-01-18 14:43 - 2012-06-02 05:48 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-01-18 14:43 - 2012-06-02 05:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-01-18 14:43 - 2012-06-02 05:42 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-01-18 14:43 - 2012-04-26 06:34 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2014-01-18 14:43 - 2012-04-26 06:34 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2014-01-18 14:43 - 2012-04-26 06:28 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2014-01-18 14:43 - 2011-11-17 08:12 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2014-01-18 14:43 - 2011-11-17 08:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-01-18 14:43 - 2011-11-17 08:11 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-01-18 14:43 - 2011-11-17 08:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-01-18 14:43 - 2011-11-17 08:08 - 01446912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-01-18 14:43 - 2011-11-17 08:05 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-01-18 14:43 - 2011-11-17 06:39 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2014-01-18 14:43 - 2011-05-04 06:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2014-01-18 14:43 - 2011-05-04 06:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2014-01-18 14:43 - 2011-05-04 06:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2014-01-18 14:43 - 2011-05-04 06:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2014-01-18 14:43 - 2011-05-04 06:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2014-01-18 14:43 - 2011-05-04 06:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2014-01-18 14:43 - 2011-05-04 06:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2014-01-18 14:43 - 2011-05-04 06:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2014-01-18 14:43 - 2011-05-04 06:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2014-01-18 14:43 - 2011-05-04 05:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2014-01-18 14:43 - 2011-05-04 05:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2014-01-18 14:43 - 2011-05-04 05:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2014-01-18 14:43 - 2011-05-04 05:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2014-01-18 14:43 - 2011-05-04 05:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2014-01-18 14:43 - 2011-05-04 05:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2014-01-18 14:43 - 2011-05-04 05:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2014-01-18 14:43 - 2011-05-04 05:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2014-01-18 14:43 - 2011-05-04 05:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2014-01-18 14:43 - 2011-03-11 07:19 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2014-01-18 14:43 - 2011-03-11 07:19 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2014-01-18 14:43 - 2011-03-11 06:40 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll 2014-01-18 14:43 - 2011-03-11 06:40 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll 2014-01-18 14:43 - 2011-01-26 07:53 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-01-18 14:43 - 2011-01-26 07:53 - 00265088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-01-18 14:43 - 2011-01-26 07:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-01-18 14:42 - 2012-08-02 18:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-01-18 14:42 - 2012-08-02 18:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-01-18 14:42 - 2012-04-07 13:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-01-18 14:42 - 2012-04-07 12:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-01-18 14:42 - 2012-03-03 07:29 - 01837568 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-01-18 14:42 - 2012-03-03 07:29 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-01-18 14:42 - 2012-03-03 07:29 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-01-18 14:42 - 2012-03-03 07:29 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-01-18 14:42 - 2012-03-03 07:29 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-01-18 14:42 - 2012-03-03 06:40 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-01-18 14:42 - 2012-03-03 06:40 - 01074176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-01-18 14:42 - 2012-03-03 06:40 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-01-18 14:42 - 2012-03-03 06:40 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-01-18 14:42 - 2012-03-03 06:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-01-18 14:42 - 2012-01-03 07:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2014-01-18 14:42 - 2012-01-03 06:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2014-01-18 14:42 - 2011-10-26 06:22 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2014-01-18 14:42 - 2011-10-26 06:22 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-01-18 14:42 - 2011-10-26 05:28 - 01328640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2014-01-18 14:42 - 2011-10-26 05:28 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-01-18 14:42 - 2011-07-09 03:44 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2014-01-18 14:42 - 2011-06-16 06:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2014-01-18 14:42 - 2011-06-16 05:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2014-01-18 14:42 - 2011-06-15 10:58 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2014-01-18 14:42 - 2011-06-15 10:58 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2014-01-18 14:42 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2014-01-18 14:42 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2014-01-18 14:42 - 2011-06-15 10:04 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2014-01-18 14:42 - 2011-06-15 10:04 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2014-01-18 14:42 - 2011-06-15 10:04 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2014-01-18 14:42 - 2011-06-15 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2014-01-18 14:42 - 2011-06-15 10:04 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2014-01-18 14:42 - 2011-05-04 03:51 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-01-18 14:42 - 2011-05-04 03:51 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-01-18 14:42 - 2011-04-27 03:57 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2014-01-18 14:42 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-01-18 14:42 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-01-18 14:42 - 2011-03-12 13:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-01-18 14:42 - 2011-03-12 12:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-01-18 14:42 - 2011-02-24 07:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-01-18 14:42 - 2011-02-24 06:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-01-18 14:42 - 2010-12-23 07:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2014-01-18 14:42 - 2010-12-23 07:07 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2014-01-18 14:42 - 2010-12-23 07:02 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2014-01-18 14:42 - 2010-12-23 06:28 - 00850432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll 2014-01-18 14:42 - 2010-12-23 06:28 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll 2014-01-18 14:42 - 2010-12-23 06:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax 2014-01-18 14:41 - 2013-01-04 06:41 - 01893224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-01-18 14:41 - 2013-01-04 06:40 - 00287576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-01-18 14:39 - 2012-04-28 04:50 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-01-18 14:38 - 2013-03-19 07:19 - 05497688 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-01-18 14:38 - 2013-03-19 06:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-01-18 14:38 - 2013-03-19 06:06 - 03958120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-01-18 14:38 - 2013-03-19 06:06 - 03902312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-01-18 14:38 - 2013-03-19 05:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-01-18 14:38 - 2013-03-19 04:19 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-01-18 14:38 - 2013-01-24 06:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-01-18 14:38 - 2013-01-04 06:37 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-01-18 14:38 - 2013-01-04 06:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-01-18 14:38 - 2013-01-04 06:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-01-18 14:38 - 2013-01-04 06:36 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-01-18 14:38 - 2013-01-04 06:33 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-01-18 14:38 - 2013-01-04 06:30 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-01-18 14:38 - 2013-01-04 06:30 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-01-18 14:38 - 2013-01-04 06:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:51 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-01-18 14:38 - 2013-01-04 05:51 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-01-18 14:38 - 2013-01-04 05:51 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 04:19 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-01-18 14:38 - 2013-01-04 03:48 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-01-18 14:38 - 2013-01-04 03:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-01-18 14:38 - 2013-01-04 03:48 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-01-18 14:38 - 2013-01-04 03:48 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-01-18 14:38 - 2013-01-04 03:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 03:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 03:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-01-18 14:38 - 2013-01-04 03:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-01-18 14:38 - 2012-11-22 11:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-01-18 14:38 - 2012-11-22 10:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-01-18 14:38 - 2012-11-20 06:55 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-01-18 14:38 - 2012-11-20 06:10 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-01-18 14:38 - 2012-11-02 06:27 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-01-18 14:38 - 2012-11-02 05:48 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2014-01-18 14:38 - 2012-09-25 23:39 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2014-01-18 14:38 - 2012-09-25 22:55 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2014-01-18 14:38 - 2012-09-06 18:38 - 00295792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-01-18 14:38 - 2012-08-24 19:05 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-01-18 14:38 - 2012-08-24 18:10 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-01-18 14:38 - 2012-08-11 01:53 - 00714752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-01-18 14:38 - 2012-08-11 00:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-01-18 14:38 - 2012-07-04 23:04 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2014-01-18 14:38 - 2012-07-04 23:01 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2014-01-18 14:38 - 2012-07-04 23:01 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2014-01-18 14:38 - 2012-07-04 22:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2014-01-18 14:38 - 2012-07-04 22:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2014-01-18 14:38 - 2012-05-02 06:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-01-18 14:38 - 2012-03-17 08:55 - 00075632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2014-01-18 14:38 - 2011-12-28 04:59 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-01-18 14:38 - 2011-12-16 09:42 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2014-01-18 14:38 - 2011-12-16 08:59 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2014-01-18 14:38 - 2011-08-17 06:32 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2014-01-18 14:38 - 2011-08-17 06:27 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2014-01-18 14:38 - 2011-08-17 06:27 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2014-01-18 14:38 - 2011-08-17 06:27 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2014-01-18 14:38 - 2011-08-17 06:27 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2014-01-18 14:38 - 2011-08-17 05:26 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2014-01-18 14:38 - 2011-08-17 05:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSNP.ax 2014-01-18 14:38 - 2011-08-17 05:22 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2014-01-18 14:38 - 2011-08-17 05:22 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mpeg2Data.ax 2014-01-18 14:38 - 2011-08-17 05:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSDvbNP.ax 2014-01-18 14:38 - 2011-05-24 12:21 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2014-01-18 14:38 - 2011-05-24 11:34 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2014-01-18 14:38 - 2011-05-24 11:34 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2014-01-18 14:38 - 2011-05-24 11:34 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2014-01-18 14:38 - 2011-05-24 11:32 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2014-01-18 14:38 - 2011-04-29 04:13 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-01-18 14:38 - 2011-04-29 04:12 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-01-18 14:38 - 2011-04-29 04:12 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-01-18 14:38 - 2011-04-22 21:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-01-18 14:38 - 2011-03-03 07:17 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2014-01-18 14:38 - 2011-03-03 07:17 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2014-01-18 14:38 - 2011-03-03 07:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2014-01-18 14:38 - 2011-03-03 06:29 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2014-01-18 14:38 - 2011-03-03 06:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe 2014-01-18 14:38 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2014-01-18 14:38 - 2011-02-18 06:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2014-01-18 14:38 - 2011-02-05 13:41 - 00640896 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2014-01-18 14:38 - 2011-02-05 13:41 - 00556928 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2014-01-18 14:38 - 2011-02-05 13:41 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2014-01-18 14:38 - 2011-02-05 13:41 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2014-01-18 14:38 - 2011-02-05 13:41 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2014-01-18 14:38 - 2011-02-05 13:39 - 00603976 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2014-01-18 14:38 - 2011-02-05 13:39 - 00518160 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2014-01-18 14:38 - 2010-10-16 06:17 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2014-01-18 14:38 - 2010-10-16 05:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll 2014-01-18 14:35 - 2010-12-18 07:08 - 01097216 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-01-18 14:35 - 2010-12-18 06:26 - 01034240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-01-18 14:34 - 2012-05-05 09:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-01-18 14:34 - 2012-05-05 08:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2014-01-18 14:34 - 2011-11-17 08:14 - 01739160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-01-18 14:34 - 2011-11-17 06:41 - 01292592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-01-18 14:34 - 2011-08-27 06:40 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-01-18 14:34 - 2011-08-27 06:40 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2014-01-18 14:34 - 2011-08-27 05:43 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-01-18 14:34 - 2011-08-27 05:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2014-01-18 14:34 - 2011-05-03 06:21 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2014-01-18 14:34 - 2011-05-03 05:50 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2014-01-18 14:34 - 2011-02-12 07:14 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2014-01-18 14:34 - 2009-10-24 05:28 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-18 14:34 - 2009-10-24 05:27 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-18 14:30 - 2012-05-14 06:20 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-01-18 14:30 - 2011-10-15 07:25 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2014-01-18 14:30 - 2011-10-15 06:48 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2014-01-18 14:29 - 2012-06-02 06:25 - 01462784 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-01-18 14:29 - 2012-06-02 06:25 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-01-18 14:29 - 2012-06-02 06:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-01-18 14:29 - 2012-06-02 05:45 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-01-18 14:29 - 2012-06-02 05:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2014-01-18 14:29 - 2012-06-02 05:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2014-01-18 14:29 - 2012-02-15 07:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-01-18 14:29 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-01-18 14:29 - 2012-02-15 05:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-01-18 14:29 - 2011-02-23 06:15 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2014-01-18 14:23 - 2011-11-19 16:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-01-18 14:23 - 2011-11-19 15:06 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-01-18 14:15 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-01-18 14:15 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-01-18 14:15 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-01-18 14:15 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-01-18 14:15 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-01-18 14:15 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-01-18 14:15 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-01-18 14:15 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-01-18 14:15 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-01-18 13:10 - 2014-01-18 19:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-18 13:10 - 2014-01-18 14:14 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-01-11 23:16 - 2014-01-11 23:16 - 00035273 _____ C:\Users\ASUS\Desktop\FRST2.txt 2014-01-11 23:14 - 2014-01-11 23:14 - 00001032 _____ C:\Users\ASUS\Desktop\checkup.txt 2014-01-11 23:11 - 2014-01-11 23:12 - 00987410 _____ C:\Users\ASUS\Desktop\SecurityCheck.exe 2014-01-11 21:46 - 2014-01-11 21:47 - 02347384 _____ (ESET) C:\Users\ASUS\Downloads\esetsmartinstaller_enu (1).exe 2014-01-11 20:23 - 2014-01-11 20:24 - 02347384 _____ (ESET) C:\Users\ASUS\Downloads\esetsmartinstaller_enu.exe 2014-01-10 19:37 - 2014-01-10 19:37 - 00033883 _____ C:\Users\ASUS\Desktop\FRST.txt 2014-01-10 19:27 - 2014-01-10 19:27 - 00002255 _____ C:\Users\ASUS\Desktop\JRT.txt 2014-01-10 19:20 - 2014-01-10 19:20 - 00000000 ____D C:\Windows\ERUNT 2014-01-10 19:19 - 2014-01-10 19:20 - 01037068 _____ (Thisisu) C:\Users\ASUS\Downloads\JRT.exe 2014-01-10 19:17 - 2014-01-10 19:17 - 00012100 _____ C:\Users\ASUS\Desktop\AdwCleaner[S0].txt 2014-01-10 19:12 - 2014-01-10 19:14 - 00000000 ____D C:\AdwCleaner 2014-01-10 19:11 - 2014-01-10 19:11 - 01233962 _____ C:\Users\ASUS\Downloads\adwcleaner.exe 2014-01-10 17:52 - 2014-01-10 17:52 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Malwarebytes 2014-01-10 17:51 - 2014-01-10 17:52 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-10 17:51 - 2014-01-10 17:51 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-10 17:51 - 2014-01-10 17:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-10 17:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-10 17:02 - 2014-01-10 17:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ASUS\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-10 17:00 - 2014-01-18 19:47 - 00000000 ____D C:\Users\ASUS\Downloads\FRST-OlderVersion 2014-01-09 20:56 - 2014-01-09 21:12 - 38364774 _____ C:\Users\ASUS\Desktop\Präsentation.pptx 2014-01-09 19:32 - 2014-01-10 16:39 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Apple Computer 2014-01-09 19:32 - 2014-01-09 19:32 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple Computer 2014-01-09 19:27 - 2014-01-09 19:28 - 00000000 ____D C:\Program Files (x86)\QuickTime 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple Computer 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller.exe 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller (1).exe 2014-01-09 12:46 - 2014-01-09 12:46 - 00000968 _____ C:\Users\ASUS\Desktop\Dropbox - Verknüpfung.lnk 2014-01-09 00:48 - 2014-01-09 00:48 - 00001200 _____ C:\Users\ASUS\Desktop\Format Factory.lnk 2014-01-09 00:48 - 2014-01-09 00:48 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-09 00:47 - 2014-01-09 00:47 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-09 00:46 - 2014-01-09 00:46 - 61746584 _____ (Free Time) C:\Users\ASUS\Downloads\FFSetup3.2.1.0.exe 2014-01-09 00:07 - 2014-01-09 00:43 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Youtube Downloader HD 2014-01-09 00:05 - 2014-01-09 00:05 - 09663232 _____ (YoutubeDownloaderHD.com ) C:\Users\ASUS\Downloads\youtube_downloader_hd_setup.exe 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\Documents\Aiseesoft Studio 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\AppData\Local\Aiseesoft Studio 2014-01-08 23:59 - 2014-01-09 00:01 - 24615784 _____ (Aiseesoft Studio ) C:\Users\ASUS\Downloads\as-total-video-converter.exe 2014-01-08 23:47 - 2014-01-08 23:58 - 00000000 ____D C:\Program Files (x86)\Free mp3 Wma Converter 2014-01-08 23:47 - 2014-01-08 23:47 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\FreeAudioPack 2014-01-08 23:47 - 2011-09-29 14:20 - 02084864 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudDesign.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 01986560 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudFile.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 01212416 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioInfos.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00479232 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioVisu.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00458752 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudPlayer.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00454656 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioRecord.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00417792 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudDisplay.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00348160 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\WMAFile.dll 2014-01-08 23:47 - 2011-09-29 14:20 - 00164144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMCT232.OCX 2014-01-08 23:47 - 2011-09-29 14:20 - 00116296 _____ C:\Windows\SysWOW64\NCTWMAProfiles.prx 2014-01-08 23:47 - 2011-09-29 14:19 - 00224016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TABCTL32.OCX 2014-01-08 23:47 - 2011-09-29 14:19 - 00152848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMDLG32.OCX 2014-01-08 23:47 - 2011-09-29 14:19 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCFR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00119568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6FR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.OCX 2014-01-08 23:47 - 2011-09-29 14:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscc2fr.dll 2014-01-08 23:47 - 2011-09-29 14:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CMDLGFR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TABCTFR.DLL 2014-01-08 23:47 - 2011-09-29 14:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetfr.DLL 2014-01-08 23:46 - 2014-01-08 23:46 - 00458744 _____ (Bandoo Media Inc) C:\Users\ASUS\Downloads\Setup21_FreeConverter.exe 2014-01-08 13:02 - 2014-01-18 19:46 - 00000000 ____D C:\FRST 2014-01-08 13:02 - 2014-01-08 13:03 - 00029834 _____ C:\Users\ASUS\Downloads\FRST.txt 2014-01-08 13:02 - 2014-01-08 13:03 - 00026161 _____ C:\Users\ASUS\Downloads\Addition.txt 2014-01-08 12:59 - 2014-01-10 17:00 - 00214016 _____ C:\Users\ASUS\Downloads\FRST64.exe 2014-01-08 10:03 - 2014-01-08 10:06 - 02336018 _____ C:\Users\ASUS\Downloads\20462436_6144b4a49714d85f0b7a9095bf8750e6e7334992.cab 2014-01-08 09:55 - 2014-01-08 09:57 - 01688966 _____ C:\Users\ASUS\Downloads\win7-9.2.0.113-whql.zip 2014-01-08 07:35 - 2014-01-12 11:29 - 00064394 _____ C:\Windows\PFRO.log 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204736.zip 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204731.zip 2014-01-06 08:39 - 2014-01-06 08:39 - 00000423 _____ C:\Users\Public\Desktop\YTD Video Downloader.lnk 2014-01-06 08:21 - 2014-01-06 08:21 - 00298954 _____ C:\Users\ASUS\Downloads\Download_33396.zip 2014-01-06 08:07 - 2014-01-15 09:34 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-06 08:01 - 2014-01-18 19:41 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-06 08:01 - 2014-01-18 19:12 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-06 08:01 - 2014-01-06 08:07 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 08:01 - 2014-01-06 08:07 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 08:01 - 2014-01-06 08:06 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-06 07:51 - 2014-01-18 19:32 - 00002848 _____ C:\Windows\setupact.log 2014-01-06 07:51 - 2014-01-06 07:51 - 00000000 _____ C:\Windows\setuperr.log 2014-01-03 14:44 - 2014-01-03 14:44 - 00000000 ___RD C:\Program Files (x86)\Skype 2014-01-02 18:38 - 2014-01-02 18:38 - 00000000 ____D C:\Program Files\Tracker Software 2014-01-02 12:41 - 2014-01-02 13:00 - 00000000 ____D C:\Users\ASUS\Documents\My Kindle Content 2014-01-02 12:40 - 2014-01-02 12:41 - 00000000 ____D C:\Users\ASUS\AppData\Local\Amazon 2014-01-02 12:40 - 2014-01-02 12:40 - 00002225 _____ C:\Users\ASUS\Desktop\Kindle.lnk 2014-01-02 12:40 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-12-29 19:13 - 2013-12-29 19:14 - 00000024 _____ C:\Windows\ATKPF.ini 2013-12-27 22:12 - 2014-01-18 19:42 - 00000000 ___RD C:\Users\ASUS\Dropbox 2013-12-27 22:08 - 2014-01-10 19:23 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-12-27 22:07 - 2014-01-18 19:42 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Dropbox 2013-12-27 19:17 - 2014-01-04 15:14 - 00000000 ____D C:\Users\ASUS\Desktop\Steuer 2013-12-22 20:56 - 2014-01-10 19:06 - 00000000 ____D C:\Users\ASUS\Desktop\Neuer Ordner 2013-12-22 19:01 - 2013-12-22 19:01 - 00000000 ____D C:\Users\ASUS\Documents\Steuer-Sparbuch ==================== One Month Modified Files and Folders ======= 2014-01-18 19:47 - 2014-01-10 17:00 - 00000000 ____D C:\Users\ASUS\Downloads\FRST-OlderVersion 2014-01-18 19:46 - 2014-01-08 13:02 - 00000000 ____D C:\FRST 2014-01-18 19:42 - 2013-12-27 22:12 - 00000000 ___RD C:\Users\ASUS\Dropbox 2014-01-18 19:42 - 2013-12-27 22:07 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Dropbox 2014-01-18 19:41 - 2014-01-06 08:01 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-18 19:39 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-18 19:39 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-18 19:34 - 2013-12-09 18:24 - 00003486 _____ C:\Windows\System32\Tasks\AutoKMS 2014-01-18 19:32 - 2014-01-06 07:51 - 00002848 _____ C:\Windows\setupact.log 2014-01-18 19:32 - 2011-04-18 21:09 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-18 19:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-18 19:31 - 2011-04-18 20:34 - 01609486 _____ C:\Windows\WindowsUpdate.log 2014-01-18 19:26 - 2012-02-08 09:46 - 00001407 _____ C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-18 19:26 - 2012-02-08 09:45 - 00001441 _____ C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-18 19:26 - 2012-02-08 09:45 - 00000000 ___RD C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-18 19:26 - 2012-02-08 09:45 - 00000000 ___RD C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-18 19:25 - 2012-02-08 09:47 - 00088736 _____ C:\Users\ASUS\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-18 19:23 - 2009-07-29 07:03 - 00000000 ____D C:\Windows\Panther 2014-01-18 19:22 - 2009-07-14 05:45 - 00368712 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-18 19:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2014-01-18 19:19 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System 2014-01-18 19:18 - 2009-07-14 08:45 - 00000000 ____D C:\Program Files\Windows Journal 2014-01-18 19:12 - 2014-01-06 08:01 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-18 19:10 - 2014-01-18 13:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-18 17:22 - 2012-10-13 13:50 - 01589650 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2014-01-18 17:22 - 2010-08-13 16:45 - 00696690 _____ C:\Windows\system32\perfh007.dat 2014-01-18 17:22 - 2010-08-13 16:45 - 00147954 _____ C:\Windows\system32\perfc007.dat 2014-01-18 17:22 - 2009-07-14 06:13 - 01589650 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-18 16:19 - 2014-01-18 16:07 - 00004599 _____ C:\Windows\IE9_main.log 2014-01-18 16:17 - 2014-01-18 16:17 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-18 16:17 - 2014-01-18 16:17 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-18 16:17 - 2014-01-18 16:17 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-18 16:17 - 2014-01-18 16:17 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-18 16:17 - 2014-01-18 16:17 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-18 16:17 - 2014-01-18 16:17 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-18 16:17 - 2014-01-18 16:17 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-18 16:17 - 2014-01-18 16:17 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-18 16:17 - 2014-01-18 16:17 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-18 16:17 - 2014-01-18 16:17 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-18 16:17 - 2014-01-18 16:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-18 16:17 - 2014-01-18 16:17 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-18 16:17 - 2014-01-18 16:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-18 15:22 - 2014-01-18 15:22 - 00261760 _____ C:\Windows\msxml4-KB2758694-enu.LOG 2014-01-18 15:22 - 2014-01-18 15:19 - 00000000 ____D C:\Windows\system32\MRT 2014-01-18 15:07 - 2014-01-18 15:06 - 00510317 _____ C:\Users\ASUS\Downloads\4002641001404_0924.zip 2014-01-18 14:14 - 2014-01-18 13:10 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-01-18 14:14 - 2013-03-05 17:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-18 14:14 - 2013-03-05 17:19 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-18 14:10 - 2011-04-18 21:19 - 00001537 _____ C:\Windows\system32\ServiceFilter.ini 2014-01-18 13:20 - 2013-04-13 14:52 - 00000000 ____D C:\Users\ASUS\Desktop\Kontoauszüge Cortal Consors 2014-01-17 23:43 - 2013-12-01 10:31 - 00000000 ____D C:\Users\ASUS\Documents\Mein Steuer-Sparbuch Heute 2014-01-15 09:34 - 2014-01-06 08:07 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-15 08:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2014-01-12 11:29 - 2014-01-08 07:35 - 00064394 _____ C:\Windows\PFRO.log 2014-01-11 23:45 - 2013-11-30 17:43 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\vlc 2014-01-11 23:16 - 2014-01-11 23:16 - 00035273 _____ C:\Users\ASUS\Desktop\FRST2.txt 2014-01-11 23:14 - 2014-01-11 23:14 - 00001032 _____ C:\Users\ASUS\Desktop\checkup.txt 2014-01-11 23:12 - 2014-01-11 23:11 - 00987410 _____ C:\Users\ASUS\Desktop\SecurityCheck.exe 2014-01-11 21:47 - 2014-01-11 21:46 - 02347384 _____ (ESET) C:\Users\ASUS\Downloads\esetsmartinstaller_enu (1).exe 2014-01-11 20:24 - 2014-01-11 20:23 - 02347384 _____ (ESET) C:\Users\ASUS\Downloads\esetsmartinstaller_enu.exe 2014-01-10 19:37 - 2014-01-10 19:37 - 00033883 _____ C:\Users\ASUS\Desktop\FRST.txt 2014-01-10 19:27 - 2014-01-10 19:27 - 00002255 _____ C:\Users\ASUS\Desktop\JRT.txt 2014-01-10 19:23 - 2013-12-27 22:08 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-10 19:20 - 2014-01-10 19:20 - 00000000 ____D C:\Windows\ERUNT 2014-01-10 19:20 - 2014-01-10 19:19 - 01037068 _____ (Thisisu) C:\Users\ASUS\Downloads\JRT.exe 2014-01-10 19:17 - 2014-01-10 19:17 - 00012100 _____ C:\Users\ASUS\Desktop\AdwCleaner[S0].txt 2014-01-10 19:14 - 2014-01-10 19:12 - 00000000 ____D C:\AdwCleaner 2014-01-10 19:11 - 2014-01-10 19:11 - 01233962 _____ C:\Users\ASUS\Downloads\adwcleaner.exe 2014-01-10 19:06 - 2013-12-22 20:56 - 00000000 ____D C:\Users\ASUS\Desktop\Neuer Ordner 2014-01-10 19:06 - 2013-11-30 19:31 - 00000000 ____D C:\Program Files (x86)\PSupport 2014-01-10 17:52 - 2014-01-10 17:52 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Malwarebytes 2014-01-10 17:52 - 2014-01-10 17:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-10 17:51 - 2014-01-10 17:51 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-10 17:51 - 2014-01-10 17:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-10 17:25 - 2014-01-10 17:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ASUS\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-10 17:00 - 2014-01-08 12:59 - 00214016 _____ C:\Users\ASUS\Downloads\FRST64.exe 2014-01-10 16:39 - 2014-01-09 19:32 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Apple Computer 2014-01-10 16:39 - 2011-04-18 21:19 - 00001852 _____ C:\Windows\system32\AutoRunFilter.ini 2014-01-09 21:12 - 2014-01-09 20:56 - 38364774 _____ C:\Users\ASUS\Desktop\Präsentation.pptx 2014-01-09 19:32 - 2014-01-09 19:32 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple Computer 2014-01-09 19:28 - 2014-01-09 19:27 - 00000000 ____D C:\Program Files (x86)\QuickTime 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Users\ASUS\AppData\Local\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple Computer 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\ProgramData\Apple 2014-01-09 19:27 - 2014-01-09 19:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller.exe 2014-01-09 19:26 - 2014-01-09 19:26 - 41404760 _____ (Apple Inc.) C:\Users\ASUS\Downloads\QuickTimeInstaller (1).exe 2014-01-09 12:46 - 2014-01-09 12:46 - 00000968 _____ C:\Users\ASUS\Desktop\Dropbox - Verknüpfung.lnk 2014-01-09 00:48 - 2014-01-09 00:48 - 00001200 _____ C:\Users\ASUS\Desktop\Format Factory.lnk 2014-01-09 00:48 - 2014-01-09 00:48 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2014-01-09 00:47 - 2014-01-09 00:47 - 00000000 ____D C:\Program Files (x86)\FreeTime 2014-01-09 00:46 - 2014-01-09 00:46 - 61746584 _____ (Free Time) C:\Users\ASUS\Downloads\FFSetup3.2.1.0.exe 2014-01-09 00:43 - 2014-01-09 00:07 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Youtube Downloader HD 2014-01-09 00:05 - 2014-01-09 00:05 - 09663232 _____ (YoutubeDownloaderHD.com ) C:\Users\ASUS\Downloads\youtube_downloader_hd_setup.exe 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\Documents\Aiseesoft Studio 2014-01-09 00:02 - 2014-01-09 00:02 - 00000000 ____D C:\Users\ASUS\AppData\Local\Aiseesoft Studio 2014-01-09 00:01 - 2014-01-08 23:59 - 24615784 _____ (Aiseesoft Studio ) C:\Users\ASUS\Downloads\as-total-video-converter.exe 2014-01-08 23:58 - 2014-01-08 23:47 - 00000000 ____D C:\Program Files (x86)\Free mp3 Wma Converter 2014-01-08 23:47 - 2014-01-08 23:47 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\FreeAudioPack 2014-01-08 23:46 - 2014-01-08 23:46 - 00458744 _____ (Bandoo Media Inc) C:\Users\ASUS\Downloads\Setup21_FreeConverter.exe 2014-01-08 23:41 - 2013-11-01 10:34 - 00000000 ____D C:\Users\ASUS\AppData\Local\Microsoft Help 2014-01-08 13:03 - 2014-01-08 13:02 - 00029834 _____ C:\Users\ASUS\Downloads\FRST.txt 2014-01-08 13:03 - 2014-01-08 13:02 - 00026161 _____ C:\Users\ASUS\Downloads\Addition.txt 2014-01-08 12:06 - 2013-11-01 10:34 - 00000000 ____D C:\ProgramData\Microsoft Help 2014-01-08 10:06 - 2014-01-08 10:03 - 02336018 _____ C:\Users\ASUS\Downloads\20462436_6144b4a49714d85f0b7a9095bf8750e6e7334992.cab 2014-01-08 09:57 - 2014-01-08 09:55 - 01688966 _____ C:\Users\ASUS\Downloads\win7-9.2.0.113-whql.zip 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204736.zip 2014-01-07 20:47 - 2014-01-07 20:47 - 00063552 _____ C:\Users\ASUS\Downloads\sammeldownload_20140107_204731.zip 2014-01-06 23:14 - 2012-02-13 16:49 - 00000000 ____D C:\Users\ASUS\AppData\Local\Google 2014-01-06 16:20 - 2014-01-18 15:19 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-06 08:39 - 2014-01-06 08:39 - 00000423 _____ C:\Users\Public\Desktop\YTD Video Downloader.lnk 2014-01-06 08:21 - 2014-01-06 08:21 - 00298954 _____ C:\Users\ASUS\Downloads\Download_33396.zip 2014-01-06 08:07 - 2014-01-06 08:01 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 08:07 - 2014-01-06 08:01 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 08:06 - 2014-01-06 08:01 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-06 07:51 - 2014-01-06 07:51 - 00000000 _____ C:\Windows\setuperr.log 2014-01-04 15:14 - 2013-12-27 19:17 - 00000000 ____D C:\Users\ASUS\Desktop\Steuer 2014-01-04 12:48 - 2012-07-08 18:46 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Skype 2014-01-03 14:44 - 2014-01-03 14:44 - 00000000 ___RD C:\Program Files (x86)\Skype 2014-01-03 14:44 - 2012-07-08 18:46 - 00000000 ____D C:\ProgramData\Skype 2014-01-02 18:38 - 2014-01-02 18:38 - 00000000 ____D C:\Program Files\Tracker Software 2014-01-02 13:00 - 2014-01-02 12:41 - 00000000 ____D C:\Users\ASUS\Documents\My Kindle Content 2014-01-02 12:41 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Local\Amazon 2014-01-02 12:40 - 2014-01-02 12:40 - 00002225 _____ C:\Users\ASUS\Desktop\Kindle.lnk 2014-01-02 12:40 - 2014-01-02 12:40 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-12-30 15:24 - 2011-04-18 21:14 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-12-29 19:14 - 2013-12-29 19:13 - 00000024 _____ C:\Windows\ATKPF.ini 2013-12-27 22:12 - 2012-02-08 09:44 - 00000000 ____D C:\Users\ASUS 2013-12-23 21:50 - 2013-12-12 12:38 - 00000000 ____D C:\Users\ASUS\Desktop\privat 2013-12-22 19:01 - 2013-12-22 19:01 - 00000000 ____D C:\Users\ASUS\Documents\Steuer-Sparbuch Some content of TEMP: ==================== C:\Users\ASUS\AppData\Local\Temp\AskPIP_FF_.exe C:\Users\ASUS\AppData\Local\Temp\avgnt.exe C:\Users\ASUS\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-11 13:06 ==================== End Of Log ============================ Probleme hab ich ab und zu nur noch mit der Wlanverbindung. Kann meinen aktuellen treiber für wireless iwie nicht aktualisieren. Und riesen Danke schön für die Hilfe bisher. Hoffe der Rechner ist jetzt Clean. Welchen Flash Player kannst du denn empfehlen. Habe zwar die aktuellste Version von Adobe Flash installiert, allerdings ruckeln manche gestreamte Filme bsp über watchever. DANKE |
19.01.2014, 10:38 | #10 |
/// the machine /// TB-Ausbilder | Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter c:\windows\SysWOW64\pupfzeq.exe Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Flash ruckelt manhcmal, da kann man fast nix machen. In welchem Browser?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
19.01.2014, 12:50 | #11 |
| Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser StartCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 19-01-2014 Ran by ASUS at 2014-01-19 12:48:29 Run:3 Running from C:\Users\ASUS\Downloads\FRST-OlderVersion\Neuer Ordner Boot Mode: Normal ============================================== Content of fixlist: ***************** c:\windows\SysWOW64\pupfzeq.exe ***************** "c:\windows\SysWOW64\pupfzeq.exe" => File/Directory not found. ==== End of Fixlog ==== auch die cpu auslastung liegt bei max 40% |
20.01.2014, 09:58 | #12 |
/// the machine /// TB-Ausbilder | Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start Frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
20.01.2014, 18:10 | #13 |
| Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start konnte leider nicht mit # arbeiten.Funktionierte nicht. Habs im Anhang gezippt |
21.01.2014, 10:56 | #14 |
/// the machine /// TB-Ausbilder | Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser Start Warum ging es nit? Ich kann auf Arbeit keine Anhänge öffnen, sorry. Bitte nochmal versuchen , Log is Stücke teilen wenn nötig
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
26.01.2014, 16:32 | #15 |
| Google Chrome ist abgestherzt...Meldung erscheint bei jedem Browser StartCode:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2014 04 Ran by ASUS (administrator) on ASUS-PC on 20-01-2014 17:57:05 Running from C:\Users\ASUS\Downloads\FRST-OlderVersion\FRST-OlderVersion Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (NVIDIA Corporation) C:\Windows\SysWOW64\nvSCPAPISvr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (ATK) C:\Program Files\P4G\BatteryLife.exe () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe (hxxp://simple-files.com/) C:\Program Files (x86)\SimpleFiles\SFUpdater.exe (ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (GARMIN Corp.) C:\Program Files (x86)\Garmin\Training Center\gStart.exe (GARMIN Corp.) C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Dropbox, Inc.) C:\Users\ASUS\AppData\Roaming\Dropbox\bin\Dropbox.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (ASUS) C:\Windows\AsScrPro.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8100\Bin\HP Officejet Pro 8100.exe (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe (Adobe Systems Incorporated) C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_38_ActiveX.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [16414824 2009-12-11] (NVIDIA Corporation) HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.) HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.) HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6998656 2009-10-27] (ASUS) HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2009-08-20] (ASUS) HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BCSSync] - D:\Office2003\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKCU\...\Run: [gStart] - C:\Program Files (x86)\Garmin\Training Center\gStart.exe [1891416 2008-08-13] (GARMIN Corp.) HKCU\...\Run: [ANT Agent] - C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe [14749544 2012-03-23] (GARMIN Corp.) HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) MountPoints2: {88626bc2-4238-11e3-a540-485b392e4fa6} - F:\start.exe /auto MountPoints2: {abeee6c9-6931-11e1-ad3d-485b392e4fa6} - F:\Startme.exe MountPoints2: {da536248-a058-11e2-8185-485b392e4fa6} - F:\AutoRun.exe MountPoints2: {da53625c-a058-11e2-8185-485b392e4fa6} - F:\AutoRun.exe HKU\Standart 1\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWow64\Macromed\Flash\FlashUtil10c.exe Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\ASUS\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet Pro 8100 (Netzwerk).lnk ShortcutTarget: Tintenwarnungen überwachen - HP Officejet Pro 8100 (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet Pro 8100\Bin\HPStatusBL.dll (Hewlett-Packard Co.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x00CE9CA4E52BCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office2003\Office14\URLREDIR.DLL (Microsoft Corporation) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\OFFICE~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\OFFICE~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Movie2kDownloader - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\movie2kdownloader@movie2kdownloader.com.xpi [2012-12-13] FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon Chrome: ======= CHR HomePage: hxxp://www.google.com CHR Plugin: (Widevine Content Decryption Module) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\widevinecdmadapter.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\pdf.dll () CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll No File CHR Plugin: (Microsoft Office 2010) - D:\OFFICE~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - D:\OFFICE~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Extension: (Google Drive) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-06] CHR Extension: (YouTube) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-13] CHR Extension: (Google-Suche) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-13] CHR Extension: (Google Wallet) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01] CHR Extension: (Google Mail) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-13] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-22] (Avira Operations GmbH & Co. KG) R2 Stereo Service; C:\Windows\SysWOW64\nvSCPAPISvr.exe [239208 2009-12-11] (NVIDIA Corporation) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-22] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-11-01] (DT Soft Ltd) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [32256 2009-07-07] (hxxp://libusb-win32.sourceforge.net) S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation) S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation) S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation) S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation) S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation) S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation) S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2009-06-05] () R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2495944 2010-01-31] (Digital Camera) S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [x] S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [x] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x] S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [x] S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [x] U3 tmlwf; U3 tmwfp; ==================== NetSvcs (Whitelisted) =================== Code:
ATTFilter ==================== One Month Created Files and Folders ======== 2014-01-20 17:49 - 2014-01-20 17:49 - 00002202 _____ C:\Users\Public\Desktop\HP Officejet Pro 8100.lnk 2014-01-20 17:49 - 2014-01-20 17:49 - 00001154 _____ C:\Users\Public\Desktop\Shop für Zubehör - HP Officejet Pro 8100.lnk 2014-01-20 17:49 - 2012-11-01 13:38 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPM5B12.dll 2014-01-20 17:48 - 2014-01-20 17:48 - 00000057 _____ C:\ProgramData\Ament.ini 2014-01-20 16:50 - 2014-01-20 17:40 - 60728808 _____ C:\Users\ASUS\Downloads\OJ8100_1321.exe 2014-01-19 11:25 - 2014-01-19 11:25 - 00000000 ____D C:\Windows\system32\SPReview 2014-01-19 11:25 - 2014-01-19 11:25 - 00000000 ____D C:\Windows\system32\EventProviders 2014-01-19 10:53 - 2010-11-20 14:39 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll 2014-01-19 10:53 - 2010-11-20 14:34 - 00295808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-01-19 10:53 - 2010-11-20 14:34 - 00215936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys 2014-01-19 10:53 - 2010-11-20 14:33 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-01-19 10:53 - 2010-11-20 14:33 - 00951680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-01-19 10:53 - 2010-11-20 14:33 - 00366976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys 2014-01-19 10:53 - 2010-11-20 14:33 - 00299392 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2014-01-19 10:53 - 2010-11-20 14:33 - 00273792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-01-19 10:53 - 2010-11-20 14:29 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 14633472 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 03860992 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 03650560 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 03027968 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL 2014-01-19 10:53 - 2010-11-20 14:27 - 03008000 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 02652160 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 02543616 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 02086912 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 02018304 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01900544 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-01-19 10:53 - 2010-11-20 14:27 - 01808384 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01753088 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01646080 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01556992 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01509888 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01326080 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01281024 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01243136 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01219584 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01212416 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01197056 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01158656 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01098240 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 01008128 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00867840 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00849920 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00577536 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00481280 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL 2014-01-19 10:53 - 2010-11-20 14:27 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00457216 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00326144 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL 2014-01-19 10:53 - 2010-11-20 14:27 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2014-01-19 10:53 - 2010-11-20 14:27 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 04120064 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 03391488 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 03205120 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 02067456 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 01866240 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 01340416 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 01244160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-01-19 10:53 - 2010-11-20 14:26 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00317952 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00281600 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll 2014-01-19 10:53 - 2010-11-20 14:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll 2014-01-19 10:53 - 2010-11-20 14:25 - 03957760 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe 2014-01-19 10:53 - 2010-11-20 14:25 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll 2014-01-19 10:53 - 2010-11-20 14:25 - 01927680 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-01-19 10:53 - 2010-11-20 14:25 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll 2014-01-19 10:53 - 2010-11-20 14:25 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2014-01-19 10:53 - 2010-11-20 14:25 - 01504256 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe 2014-01-19 10:53 - 2010-11-20 14:25 - 01116672 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-01-19 10:53 - 2010-11-20 14:25 - 00958464 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2014-01-19 10:53 - 2010-11-20 14:25 - 00897536 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll 2014-01-19 10:53 - 2010-11-20 14:25 - 00705024 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2014-01-19 10:53 - 2010-11-20 14:25 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2014-01-19 10:53 - 2010-11-20 14:25 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe 2014-01-19 10:53 - 2010-11-20 14:25 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2014-01-19 10:53 - 2010-11-20 14:25 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-01-19 10:53 - 2010-11-20 14:25 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2014-01-19 10:53 - 2010-11-20 14:25 - 00390656 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-01-19 10:53 - 2010-11-20 14:25 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-01-19 10:53 - 2010-11-20 14:25 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-01-19 10:53 - 2010-11-20 14:25 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2014-01-19 10:53 - 2010-11-20 14:25 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe 2014-01-19 10:53 - 2010-11-20 14:25 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2014-01-19 10:53 - 2010-11-20 14:24 - 02872320 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-01-19 10:53 - 2010-11-20 14:24 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe 2014-01-19 10:53 - 2010-11-20 14:24 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe 2014-01-19 10:53 - 2010-11-20 14:24 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe 2014-01-19 10:53 - 2010-11-20 14:24 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe 2014-01-19 10:53 - 2010-11-20 13:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthFWSnapin.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsservices.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 01619456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-01-19 10:53 - 2010-11-20 13:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 01175040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 01010688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shlwapi.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll 2014-01-19 10:53 - 2010-11-20 13:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll 2014-01-19 10:53 - 2010-11-20 13:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2014-01-19 10:53 - 2010-11-20 13:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll 2014-01-19 10:53 - 2010-11-20 13:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll 2014-01-19 10:53 - 2010-11-20 13:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceApi.dll 2014-01-19 10:53 - 2010-11-20 13:20 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-01-19 10:53 - 2010-11-20 13:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2014-01-19 10:53 - 2010-11-20 13:19 - 03207680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-01-19 10:53 - 2010-11-20 13:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll 2014-01-19 10:53 - 2010-11-20 13:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll 2014-01-19 10:53 - 2010-11-20 13:19 - 01493504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2014-01-19 10:53 - 2010-11-20 13:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll 2014-01-19 10:53 - 2010-11-20 13:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll 2014-01-19 10:53 - 2010-11-20 13:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll 2014-01-19 10:53 - 2010-11-20 13:19 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-01-19 10:53 - 2010-11-20 13:19 - 00257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 01792000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certmgr.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 01371136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 01171456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 00522752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 00252928 _____ (Microsoft) C:\Windows\SysWOW64\DShowRdpFilter.dll 2014-01-19 10:53 - 2010-11-20 13:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3api.dll 2014-01-19 10:53 - 2010-11-20 13:17 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2014-01-19 10:53 - 2010-11-20 13:17 - 01049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-01-19 10:53 - 2010-11-20 13:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-01-19 10:53 - 2010-11-20 13:17 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-01-19 10:53 - 2010-11-20 13:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe 2014-01-19 10:53 - 2010-11-20 12:07 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-01-19 10:53 - 2010-11-20 12:05 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll 2014-01-19 10:53 - 2010-11-20 11:44 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys 2014-01-19 10:53 - 2010-11-20 10:27 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2014-01-19 10:53 - 2010-11-20 10:25 - 00753664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2014-01-19 10:53 - 2010-11-20 10:23 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2014-01-19 10:53 - 2010-11-20 10:21 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-01-19 10:53 - 2010-11-05 03:20 - 00347904 _____ C:\Windows\system32\systemsf.ebd 2014-01-19 10:53 - 2010-11-05 02:58 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2014-01-19 10:53 - 2010-11-05 02:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll 2014-01-19 10:53 - 2010-11-05 02:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll 2014-01-19 10:53 - 2010-11-05 02:57 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2014-01-19 10:53 - 2010-11-05 02:57 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2014-01-19 10:53 - 2010-11-05 02:57 - 00048976 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2014-01-19 10:53 - 2010-11-05 02:53 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2014-01-19 10:53 - 2010-11-05 02:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe 2014-01-19 10:53 - 2010-11-05 02:53 - 00109928 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2014-01-19 10:53 - 2010-11-05 02:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll 2014-01-19 10:53 - 2009-07-14 02:16 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpmonui.dll 2014-01-19 10:52 - 2010-11-20 14:44 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe 2014-01-19 10:52 - 2010-11-20 14:44 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL 2014-01-19 10:52 - 2010-11-20 14:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL 2014-01-19 10:52 - 2010-11-20 14:34 - 00363392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys 2014-01-19 10:52 - 2010-11-20 14:34 - 00071552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00289664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00263040 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2014-01-19 10:52 - 2010-11-20 14:33 - 00213888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00184704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00171392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00155008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00140672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00103808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00094592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00078720 _____ (Hewlett-Packard Company) C:\Windows\system32\Drivers\HpSAMD.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00063360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00031104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys 2014-01-19 10:52 - 2010-11-20 14:33 - 00014720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys 2014-01-19 10:52 - 2010-11-20 14:32 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll 2014-01-19 10:52 - 2010-11-20 14:32 - 00334208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2014-01-19 10:52 - 2010-11-20 14:32 - 00179072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys 2014-01-19 10:52 - 2010-11-20 14:32 - 00155520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-01-19 10:52 - 2010-11-20 14:32 - 00112000 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-01-19 10:52 - 2010-11-20 14:28 - 00780008 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2014-01-19 10:52 - 2010-11-20 14:28 - 00298104 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2014-01-19 10:52 - 2010-11-20 14:28 - 00166784 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 02262528 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 02250752 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 02193920 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 02146816 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 02072576 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 01911808 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 01672704 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 01363968 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2014-01-19 10:52 - 2010-11-20 14:27 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2014-01-19 10:52 - 2010-11-20 14:27 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 01082880 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 01050624 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 01024512 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2014-01-19 10:52 - 2010-11-20 14:27 - 00898560 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00812032 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00799744 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00781312 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2014-01-19 10:52 - 2010-11-20 14:27 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00636416 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00633344 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00605696 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00527872 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00451072 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00435712 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00431104 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00300032 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL 2014-01-19 10:52 - 2010-11-20 14:27 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00253440 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL 2014-01-19 10:52 - 2010-11-20 14:27 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL 2014-01-19 10:52 - 2010-11-20 14:27 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL 2014-01-19 10:52 - 2010-11-20 14:27 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2014-01-19 10:52 - 2010-11-20 14:27 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 01457664 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 01087488 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00934912 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2014-01-19 10:52 - 2010-11-20 14:26 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00240640 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL 2014-01-19 10:52 - 2010-11-20 14:26 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00116224 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll 2014-01-19 10:52 - 2010-11-20 14:26 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 03745792 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 03524608 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 01264640 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 01065984 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00840192 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00749568 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00549888 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00128000 _____ (Microsoft) C:\Windows\system32\Robocopy.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2014-01-19 10:52 - 2010-11-20 14:25 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-01-19 10:52 - 2010-11-20 14:25 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00899584 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr 2014-01-19 10:52 - 2010-11-20 14:24 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl 2014-01-19 10:52 - 2010-11-20 14:24 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00763904 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl 2014-01-19 10:52 - 2010-11-20 14:24 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl 2014-01-19 10:52 - 2010-11-20 14:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl 2014-01-19 10:52 - 2010-11-20 14:24 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl 2014-01-19 10:52 - 2010-11-20 14:24 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr 2014-01-19 10:52 - 2010-11-20 14:24 - 00474112 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2014-01-19 10:52 - 2010-11-20 14:24 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2014-01-19 10:52 - 2010-11-20 14:24 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00373248 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl 2014-01-19 10:52 - 2010-11-20 14:24 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl 2014-01-19 10:52 - 2010-11-20 14:24 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr 2014-01-19 10:52 - 2010-11-20 14:24 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp 2014-01-19 10:52 - 2010-11-20 14:24 - 00300032 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2014-01-19 10:52 - 2010-11-20 14:24 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr 2014-01-19 10:52 - 2010-11-20 14:24 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr 2014-01-19 10:52 - 2010-11-20 14:24 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv 2014-01-19 10:52 - 2010-11-20 14:24 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax 2014-01-19 10:52 - 2010-11-20 14:24 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2014-01-19 10:52 - 2010-11-20 14:24 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax 2014-01-19 10:52 - 2010-11-20 14:24 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax 2014-01-19 10:52 - 2010-11-20 14:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax 2014-01-19 10:52 - 2010-11-20 14:24 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00071168 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe 2014-01-19 10:52 - 2010-11-20 14:24 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax 2014-01-19 10:52 - 2010-11-20 14:24 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe 2014-01-19 10:52 - 2010-11-20 13:55 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-01-19 10:52 - 2010-11-20 13:51 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-01-19 10:52 - 2010-11-20 13:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NAPHLPR.DLL 2014-01-19 10:52 - 2010-11-20 13:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NAPCRYPT.DLL 2014-01-19 10:52 - 2010-11-20 13:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsCpl.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncCenter.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPEncEn.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanpref.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMNetMgr.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Vault.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqlsrv32.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00738816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00616960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00560128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmdev.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched20.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shwebsvc.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiadefui.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanui.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxs.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00372224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\termmgr.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpeffects.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDSp.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSATAPI.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsvcs.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\raschap.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqlcese30.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00307712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srchadmin.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scansetting.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapisrv.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wavemsp.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdwcn.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcomapi.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpsrcwp.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasppp.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scecli.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vdsbas.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\syncui.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remotepg.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twext.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxlib.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QUTIL.DLL 2014-01-19 10:52 - 2010-11-20 13:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountControlSettings.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regapi.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdmat.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpd3d.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samcli.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RpcRtRemote.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wtsapi32.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vpnikeapi.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sisbkup.dll 2014-01-19 10:52 - 2010-11-20 13:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVCORE.DLL 2014-01-19 10:52 - 2010-11-20 13:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\networkmap.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pnidui.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\networkexplorer.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onexui.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OobeFldr.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00656384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PerfCenterCPL.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercpl.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceStatus.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnfldr.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshipsec.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netdiagfx.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OnLineIDCpl.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onex.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcap.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceSyncProvider.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetapi.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QAGENT.DLL 2014-01-19 10:52 - 2010-11-20 13:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL 2014-01-19 10:52 - 2010-11-20 13:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\provsvc.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netjoin.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prntvpt.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netid.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prncache.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL 2014-01-19 10:52 - 2010-11-20 13:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nci.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olethk32.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntlanman.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptui.dll 2014-01-19 10:52 - 2010-11-20 13:20 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallControlPanel.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00830464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL 2014-01-19 10:52 - 2010-11-20 13:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontext.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\localsec.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsmsnap.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hgcpl.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MediaMetadataHandler.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00232448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAC3ENC.DLL 2014-01-19 10:52 - 2010-11-20 13:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iTVData.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2014-01-19 10:52 - 2010-11-20 13:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstask.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedynos.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedyn.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasrad.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ifsutil.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logoncli.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fde.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvfw32.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IPHLPAPI.DLL 2014-01-19 10:52 - 2010-11-20 13:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\SysWOW64\fms.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciavi32.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasacct.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hbaapi.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdeploy.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mimefilt.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\httpapi.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msasn1.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvidc32.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsium.dll 2014-01-19 10:52 - 2010-11-20 13:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lsmproxy.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\accessibilitycpl.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DxpTaskSync.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 01003520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroles.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00743424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\batmeter.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsuiext.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuxiliaryDisplayCpl.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenterCPL.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00508416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceCenter.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00402944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3ui.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroleui.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\audiodev.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\defaultlocationcpl.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairingFolder.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxdiagn.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\activeds.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dskquoui.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsldp.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoplay.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscmmc.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3cfg.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscapi.dll 2014-01-19 10:52 - 2010-11-20 13:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-01-19 10:52 - 2010-11-20 13:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimserv.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eudcedit.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskraid.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sethc.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskmgr.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetup.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\net1.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe 2014-01-19 10:52 - 2010-11-20 13:17 - 00098816 _____ (Microsoft) C:\Windows\SysWOW64\Robocopy.exe |