| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: OpenCandy und Search Protect von ConduitWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
02.02.2014, 21:01
| #1 |
 |  OpenCandy und Search Protect von Conduit Nachdem ich gestern meinen PC komplett neu aufgesetzt habe ist heute leider wieder was in Malwarebytes aufgetaucht: hxxp://i.imgur.com/2euKdNn.png (Screenshot auf imgur.com hochgeladen) Ich glaube nicht dass das was Schlimmes ist, möchte aber alles sicher haben. Search Protect (zu dem man einiges auf Google findet und was harmlos zu sein scheint) habe ich einfach deinstalliert (vor dem Malwarebytes Scan), jedoch weiß ich nicht was dieses "OpenCandy" ist. defrogger Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:22 on 02/02/2014 (wupto)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04 Ran by wupto (administrator) on WUPTO-PC on 02-02-2014 20:34:22 Running from C:\Users\wupto\Desktop Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files\Plantronics\GameCom780\GameCom780.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Dropbox, Inc.) C:\Users\wupto\AppData\Roaming\Dropbox\bin\Dropbox.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7743008 2009-04-27] (Realtek Semiconductor) HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-04-27] (Realtek Semiconductor Corp.) HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation) HKLM\...\Run: [GamecomSound] - C:\Program Files\Plantronics\GameCom780\GameCom780.exe [777448 2011-12-01] () HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation) HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKLM-x32\...\Runonce: [SpUninstallCleanUp] - REG delete HKEY_LOCAL_MACHINE\Software\SearchProtect /f [x] HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation) HKU\S-1-5-21-1998335624-851730918-2200616401-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20728480 2014-01-14] (Skype Technologies S.A.) Startup: C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\wupto\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP8E9C2945-6351-47A6-BAEA-89E85DC528E6&q={searchTerms}&SSPV= BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default FF SelectedSearchEngine: Google FF Homepage: hxxp://www.youtube.com/feed/subscriptions|https://mail.google.com/mail/u/0/?shva=1#inbox|https://twitter.com/|hxxp://www.deviantart.com/|hxxp://www.rockpapershotgun.com/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin: adobe.com/AdobeAAMDetect_x86_64 - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF SearchPlugin: C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default\searchplugins\conduit-search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Magic Actions for YouTube™ - C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default\Extensions\jid0-UVAeBCfd34Kk5usS8A1CBiobvM8@jetpack.xpi [2014-02-02] FF Extension: Adblock Plus - C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-02] ==================== Services (Whitelisted) ================= R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation) S2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [621336 2013-12-04] (Wacom Technology, Corp.) ==================== Drivers (Whitelisted) ==================== R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation) R3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1327104 2011-11-05] (C-Media Electronics Inc) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-02 20:34 - 2014-02-02 20:34 - 00010402 _____ () C:\Users\wupto\Desktop\FRST.txt 2014-02-02 20:34 - 2014-02-02 20:34 - 00000000 ____D () C:\FRST 2014-02-02 20:24 - 2014-02-02 20:25 - 02080256 _____ (Farbar) C:\Users\wupto\Desktop\FRST64.exe 2014-02-02 20:22 - 2014-02-02 20:22 - 00050477 _____ () C:\Users\wupto\Desktop\Defogger.exe 2014-02-02 20:22 - 2014-02-02 20:22 - 00000472 _____ () C:\Users\wupto\Desktop\defogger_disable.log 2014-02-02 20:22 - 2014-02-02 20:22 - 00000000 _____ () C:\Users\wupto\defogger_reenable 2014-02-02 19:48 - 2014-02-02 19:48 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Malwarebytes 2014-02-02 19:47 - 2014-02-02 19:47 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-02 19:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-02-02 19:46 - 2014-02-02 19:48 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\uTorrent 2014-02-02 19:45 - 2014-02-02 19:46 - 01307736 _____ (BitTorrent Inc.) C:\Users\wupto\Downloads\utorrent.exe 2014-02-02 19:43 - 2014-02-02 19:47 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\wupto\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-02 19:42 - 2014-02-02 19:42 - 00000000 ____D () C:\Users\Public\Documents\ZBrushData 2014-02-02 19:35 - 2014-02-02 19:35 - 00001704 _____ () C:\Users\wupto\Desktop\Photoshop.lnk 2014-02-02 18:47 - 2014-02-02 19:12 - 00000000 ____D () C:\Program Files\Adobe 2014-02-02 18:43 - 2014-02-02 19:11 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2014-02-02 17:45 - 2014-02-02 17:45 - 00000000 ____D () C:\Users\wupto\Documents\game of thrones 2014-02-02 17:16 - 2014-02-02 17:16 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\.minecraft 2014-02-02 17:13 - 2014-02-02 17:13 - 00001070 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2014-02-02 17:11 - 2014-02-02 19:13 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-02-02 17:08 - 2014-02-02 17:08 - 00000000 ____D () C:\Users\wupto\AppData\Local\divinity 2 2014-02-02 17:02 - 2014-02-02 17:01 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-02-02 17:02 - 2014-02-02 17:01 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-02-02 17:02 - 2014-02-02 17:01 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-02-02 17:02 - 2014-02-02 17:01 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-02-02 17:01 - 2014-02-02 17:01 - 00000000 ____D () C:\Program Files\Java 2014-02-02 16:56 - 2014-02-02 19:49 - 00000000 ____D () C:\Users\wupto\Desktop\Minecraft 2014-02-02 16:54 - 2014-02-02 16:54 - 02844536 _____ (Adobe Systems Incorporated) C:\Users\wupto\Downloads\CreativeCloudSet-Up.exe 2014-02-02 16:53 - 2014-02-02 16:53 - 00001001 _____ () C:\Users\wupto\Desktop\Dropbox.lnk 2014-02-02 16:52 - 2014-02-02 16:53 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\DropboxMaster 2014-02-02 16:52 - 2014-02-02 16:52 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-02-02 16:48 - 2014-02-02 20:13 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Dropbox 2014-02-02 16:47 - 2014-02-02 17:06 - 00000000 ____D () C:\Users\wupto\Downloads\old 2014-02-02 16:47 - 2014-02-02 16:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\ftblauncher 2014-02-02 16:42 - 2014-02-02 16:42 - 00000000 ____D () C:\Users\wupto\Documents\nbgi 2014-02-02 16:40 - 2014-02-02 16:40 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Subversion 2014-02-02 16:38 - 2014-02-02 16:39 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\GameMaker-Studio 2014-02-02 16:38 - 2014-02-02 16:38 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV3 2014-02-02 16:37 - 2014-02-02 16:37 - 00000000 ____D () C:\Users\wupto\AppData\Local\YoYo_Games_Ltd 2014-02-02 16:35 - 2014-02-02 16:43 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV4 2014-02-02 16:35 - 2014-02-02 16:41 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameMaker-Studio 1.2 2014-02-02 16:35 - 2014-02-02 16:35 - 00001850 _____ () C:\Users\wupto\Desktop\Game Maker.lnk 2014-02-02 16:34 - 2014-02-02 16:41 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3d-Coat-V4 2014-02-02 16:34 - 2014-02-02 16:41 - 00000000 ____D () C:\Users\wupto\AppData\Local\GameMaker-Studio 2014-02-02 16:34 - 2014-02-02 16:35 - 00000000 ____D () C:\Users\wupto\GameMaker-Studio 1.2 2014-02-02 16:34 - 2014-02-02 16:35 - 00000000 ____D () C:\Program Files\3D-Coat-V4 2014-02-02 16:34 - 2014-02-02 16:34 - 00000665 _____ () C:\Users\wupto\Desktop\3D Coat.lnk 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files\TabletPlugins 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins 2014-02-02 15:55 - 2013-11-12 01:16 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys 2014-02-02 15:54 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files\Tablet 2014-02-02 15:54 - 2013-12-04 17:35 - 01945880 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.dll 2014-02-02 15:54 - 2013-12-04 17:35 - 01938712 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll 2014-02-02 15:54 - 2013-12-04 17:35 - 01808152 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll 2014-02-02 15:54 - 2013-12-04 17:35 - 01805080 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll 2014-02-02 15:54 - 2013-12-04 17:35 - 01604376 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Tablet.dll 2014-02-02 15:54 - 2013-12-04 17:35 - 01596696 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll 2014-02-02 15:54 - 2013-12-04 17:35 - 01483032 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wintab32.dll 2014-02-02 15:54 - 2013-12-04 17:35 - 01479960 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll 2014-02-02 15:54 - 2013-11-12 01:16 - 00090424 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys 2014-02-02 15:54 - 2013-11-12 01:16 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys 2014-02-02 15:54 - 2012-12-11 23:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll 2014-02-02 15:54 - 2012-12-11 23:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll 2014-02-02 15:13 - 2014-02-02 15:13 - 00000000 ____D () C:\Users\wupto\Tor Browser 2014-02-02 14:35 - 2014-02-02 18:48 - 00000000 ____D () C:\ProgramData\Adobe 2014-02-02 14:08 - 2014-02-02 19:48 - 00000000 ___RD () C:\Users\wupto\Desktop\Games 2014-02-02 13:22 - 2014-02-02 20:20 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-02-02 13:22 - 2014-02-02 19:17 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\NVIDIA 2014-02-02 13:22 - 2014-02-02 13:22 - 00000963 _____ () C:\Users\wupto\Desktop\Steam.lnk 2014-02-02 13:15 - 2014-02-02 13:23 - 00000001 _____ () C:\Users\wupto\random.dat 2014-02-02 13:15 - 2014-02-02 13:15 - 00000044 _____ () C:\Users\wupto\jagex_cl_runescape_LIVE.dat 2014-02-02 13:15 - 2014-02-02 13:15 - 00000000 ____D () C:\Users\wupto\jagexcache 2014-02-02 13:10 - 2014-02-02 13:51 - 00000000 ____D () C:\Users\wupto\Desktop\Programme 2014-02-02 12:58 - 2014-02-02 19:17 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Adobe 2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Macromedia 2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Local\Macromedia 2014-02-02 12:57 - 2014-02-02 20:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-02 12:57 - 2014-02-02 12:57 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-02 12:57 - 2014-02-02 12:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-02 12:57 - 2014-02-02 12:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\system32\Macromed 2014-02-02 12:56 - 2014-02-02 19:17 - 00000000 ____D () C:\Users\wupto\AppData\Local\Adobe 2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Sun 2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Oracle 2014-02-02 12:37 - 2014-02-02 12:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-02-02 12:37 - 2014-02-02 12:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-02-02 12:37 - 2014-02-02 12:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-02-02 12:37 - 2014-02-02 12:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-02-02 12:37 - 2014-02-02 12:37 - 00000000 ____D () C:\Program Files (x86)\Java 2014-02-02 04:45 - 2014-02-02 04:50 - 00000000 ____D () C:\Users\wupto\Desktop\Programme (x86) 2014-02-02 04:25 - 2014-02-02 04:26 - 00000000 ____D () C:\Users\wupto\Virenbekämpfung 2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\shelper 2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\Schule 2014-02-02 04:23 - 2014-02-02 04:24 - 00000000 ____D () C:\Users\wupto\Musik 2014-02-02 04:11 - 2014-02-02 04:14 - 00000000 ____D () C:\Users\wupto\Filme 2014-02-02 04:03 - 2014-02-02 16:54 - 00000000 ___RD () C:\Users\wupto\Dropbox 2014-02-02 03:58 - 2014-02-02 03:58 - 00000000 ____D () C:\Users\wupto\Dokumente 2014-02-02 03:37 - 2014-02-02 03:58 - 00000000 ____D () C:\Users\wupto\Bilder 2014-02-02 03:36 - 2014-02-02 15:18 - 00000000 ____D () C:\Users\wupto\Desktop\TO DO 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\website 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\PA 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\adobeshit 2014-02-02 03:36 - 2013-09-28 15:53 - 00000037 _____ () C:\Users\wupto\cgpeers com.txt 2014-02-02 03:34 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\Modelling 2014-02-02 03:34 - 2014-02-02 03:34 - 00000000 ____D () C:\Users\wupto\Desktop\Hammerwatch Art 2014-02-02 03:23 - 2014-02-02 03:34 - 00000000 ____D () C:\Users\wupto\Desktop\Games & so 2014-02-02 03:18 - 2014-02-02 03:23 - 00000000 ____D () C:\Users\wupto\Desktop\Game Maker Games 2014-02-02 03:17 - 2014-02-02 19:49 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Skype 2014-02-02 03:17 - 2014-02-02 03:17 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\Users\wupto\AppData\Local\Skype 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\ProgramData\Skype 2014-02-02 03:14 - 2014-02-02 19:21 - 00000000 ____D () C:\Users\wupto\Desktop\ART 2014-02-02 03:14 - 2014-02-02 03:18 - 00000000 ____D () C:\Users\wupto\Desktop\Design Projects 2014-02-02 03:13 - 2014-02-02 15:17 - 00000000 ____D () C:\Users\wupto\Desktop\random 2014-02-02 03:13 - 2014-02-01 17:10 - 00000724 _____ () C:\Users\wupto\Desktop\films u should watch.txt 2014-02-02 03:10 - 2014-02-02 19:17 - 00057560 _____ () C:\Users\wupto\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-02 03:09 - 2014-02-02 03:09 - 00002154 _____ () C:\Windows\epplauncher.mif 2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-02-02 03:08 - 2010-04-09 12:06 - 01898376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-02-02 03:08 - 2010-04-09 12:06 - 00374664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-02-02 02:52 - 2014-02-02 02:52 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA Corporation 2014-02-02 02:52 - 2014-01-21 03:53 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-02-02 02:52 - 2014-01-21 03:53 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-02-02 02:51 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-02-02 02:51 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-02-02 02:50 - 2014-02-02 02:50 - 00000534 _____ () C:\Windows\PLTGC.ini.imi 2014-02-02 02:50 - 2014-02-02 02:50 - 00000402 _____ () C:\Windows\PLTGC.ini.cfl 2014-02-02 02:50 - 2014-02-02 02:50 - 00000132 _____ () C:\Windows\system\Dlap.pfx 2014-02-02 02:50 - 2014-02-02 02:50 - 00000000 ____D () C:\Program Files\Plantronics 2014-02-02 02:50 - 2011-12-01 21:18 - 00813288 ____N () C:\Windows\system32\PLTGC.exe 2014-02-02 02:50 - 2011-11-23 19:08 - 00003489 ____N () C:\Windows\PLTGC.ini.cfg 2014-02-02 02:50 - 2011-11-05 01:47 - 01327104 _____ (C-Media Electronics Inc) C:\Windows\system32\Drivers\PLTGC.sys 2014-02-02 02:50 - 2011-01-27 16:02 - 00003072 ____N () C:\Windows\Thumbs.db 2014-02-02 02:50 - 2009-08-20 10:00 - 00359424 ____N () C:\Windows\system32\CmiInstallResAll64.dll 2014-02-02 02:50 - 2004-04-14 20:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\fltrPLTGC.dll 2014-02-02 02:49 - 2006-10-06 23:45 - 00524768 ____R (Microsoft Corporation) C:\Windows\difxapi.dll 2014-02-02 02:45 - 2014-02-02 02:49 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA 2014-02-02 02:45 - 2014-02-02 02:45 - 00001347 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-02-02 02:45 - 2014-02-02 02:45 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-02-02 02:44 - 2014-02-02 03:10 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-02 02:43 - 2014-02-02 02:52 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-02-02 02:43 - 2014-02-02 02:52 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-02-02 02:43 - 2014-01-19 08:33 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-02-02 02:43 - 2013-12-19 21:33 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-02-02 02:43 - 2013-12-19 21:33 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-02-02 02:43 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-02-02 02:43 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-02-02 02:43 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-02-02 02:43 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-02-02 02:43 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-02-02 02:43 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-02-02 02:43 - 2013-12-19 06:01 - 03539040 _____ () C:\Windows\system32\nvcoproc.bin 2014-02-02 02:42 - 2014-02-02 02:43 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-02-02 02:39 - 2009-11-25 20:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2014-02-02 02:39 - 2009-11-25 20:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe 2014-02-02 02:39 - 2009-11-25 20:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2014-02-02 02:38 - 2014-02-02 02:52 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-02-02 02:38 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-02-02 02:38 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00357152 _____ () C:\Windows\system32\NvIFROpenGL.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00314656 _____ () C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00023754 _____ () C:\Windows\system32\nvinfo.pb 2014-02-02 02:38 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-02-02 02:38 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-02-02 02:38 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-02-02 02:37 - 2014-02-02 02:37 - 00000000 ____D () C:\NVIDIA 2014-02-02 02:33 - 2012-02-15 07:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-02-02 02:33 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-02-02 02:33 - 2012-02-15 05:47 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-02-02 02:33 - 2012-02-15 05:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-02-02 02:33 - 2010-01-09 08:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll 2014-02-02 02:33 - 2010-01-09 07:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll 2014-02-02 02:29 - 2014-02-02 02:29 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Local\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-02 02:29 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-02-02 02:29 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-02-02 02:29 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-02-02 02:29 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-02-02 02:28 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-02-02 02:28 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-02-02 02:28 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-02-02 02:28 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-02-02 02:28 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-02-02 02:23 - 2014-02-02 02:23 - 00000000 ____D () C:\Program Files\Intel 2014-02-02 02:23 - 2009-06-22 12:05 - 00273072 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1k62x64.sys 2014-02-02 02:23 - 2009-06-03 18:38 - 00078016 _____ (Intel Corporation) C:\Windows\system32\NicInstK.dll 2014-02-02 02:23 - 2009-05-26 11:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll 2014-02-02 02:23 - 2009-04-21 18:39 - 00072288 _____ (Intel Corporation) C:\Windows\system32\e1kmsg.dll 2014-02-02 02:23 - 2009-03-31 14:58 - 00342656 ____R (Intel Corporation) C:\Windows\system32\PROUnstl.exe 2014-02-02 02:23 - 2009-03-07 03:08 - 00003127 _____ () C:\Windows\system32\e1k62x64.din 2014-02-02 02:23 - 2006-01-12 15:52 - 00001904 ____N () C:\Windows\system32\SetupBD.din 2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Program Files\Realtek 2014-02-02 02:21 - 2008-04-30 09:48 - 00193536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-02-02 02:21 - 2007-07-25 10:34 - 00150528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-02-02 02:21 - 2007-05-17 12:26 - 00211376 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-02-02 02:21 - 2006-12-13 11:30 - 00513536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-02-02 02:20 - 2014-02-02 02:50 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-02-02 02:20 - 2014-02-02 02:21 - 00002014 _____ () C:\RHDSetup.log 2014-02-02 02:20 - 2014-02-02 02:21 - 00000206 _____ () C:\realtek.log 2014-02-02 02:20 - 2014-02-02 02:20 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-02-02 02:20 - 2009-04-27 20:50 - 01272352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-02-02 02:20 - 2009-04-27 20:50 - 00611360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-02-02 02:20 - 2009-04-27 20:50 - 00332320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-02-02 02:20 - 2009-04-27 20:49 - 01552416 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-02-02 02:20 - 2009-04-27 20:49 - 01163296 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-02-02 02:20 - 2009-04-27 20:49 - 00417824 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-02-02 02:20 - 2009-04-27 20:49 - 00149536 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-02-02 02:20 - 2009-04-27 20:49 - 00066080 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll 2014-02-02 02:20 - 2009-04-27 20:22 - 01766048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-02-02 02:20 - 2009-04-16 18:23 - 00540672 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2014-02-02 02:20 - 2009-04-16 11:13 - 00166400 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-02-02 02:20 - 2009-03-31 15:02 - 00108032 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-02-02 02:20 - 2009-03-09 06:32 - 00304640 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-02-02 02:20 - 2009-03-09 06:30 - 00304640 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-02-02 02:20 - 2009-02-12 18:14 - 00176640 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\FMAPO64.dll 2014-02-02 02:20 - 2008-11-09 12:57 - 00311296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Intel 2014-02-02 02:16 - 2009-07-08 16:34 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2014-02-02 02:15 - 2014-02-02 02:27 - 00000000 ____D () C:\TempEI4 2014-02-02 02:15 - 2014-02-02 02:15 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-02-02 02:12 - 2014-02-02 16:53 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-02 02:12 - 2014-02-02 02:12 - 00001439 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-02 02:12 - 2014-02-02 02:12 - 00001405 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-02-02 02:12 - 2014-02-02 02:12 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-02 02:12 - 2014-02-02 02:12 - 00000000 ____D () C:\Users\wupto\AppData\Local\VirtualStore 2014-02-02 02:11 - 2014-02-02 20:26 - 01300601 _____ () C:\Windows\WindowsUpdate.log 2014-02-02 02:11 - 2014-02-02 20:22 - 00000000 ____D () C:\Users\wupto 2014-02-02 02:11 - 2014-02-02 02:11 - 00000020 ___SH () C:\Users\wupto\ntuser.ini 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Netzwerkumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Lokale Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Eigene Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Druckumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 __SHD () C:\Recovery 2014-02-02 02:11 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-02-02 02:11 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-02-02 02:07 - 2014-02-02 02:07 - 00001313 _____ () C:\Windows\TSSysprep.log 2014-02-02 02:03 - 2014-02-02 02:11 - 00000000 ____D () C:\Windows\Panther ==================== One Month Modified Files and Folders ======= 2014-02-02 20:34 - 2014-02-02 20:34 - 00010402 _____ () C:\Users\wupto\Desktop\FRST.txt 2014-02-02 20:34 - 2014-02-02 20:34 - 00000000 ____D () C:\FRST 2014-02-02 20:26 - 2014-02-02 02:11 - 01300601 _____ () C:\Windows\WindowsUpdate.log 2014-02-02 20:25 - 2014-02-02 20:24 - 02080256 _____ (Farbar) C:\Users\wupto\Desktop\FRST64.exe 2014-02-02 20:22 - 2014-02-02 20:22 - 00050477 _____ () C:\Users\wupto\Desktop\Defogger.exe 2014-02-02 20:22 - 2014-02-02 20:22 - 00000472 _____ () C:\Users\wupto\Desktop\defogger_disable.log 2014-02-02 20:22 - 2014-02-02 20:22 - 00000000 _____ () C:\Users\wupto\defogger_reenable 2014-02-02 20:22 - 2014-02-02 02:11 - 00000000 ____D () C:\Users\wupto 2014-02-02 20:20 - 2014-02-02 13:22 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-02-02 20:13 - 2014-02-02 16:48 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Dropbox 2014-02-02 20:11 - 2014-02-02 12:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-02 19:49 - 2014-02-02 16:56 - 00000000 ____D () C:\Users\wupto\Desktop\Minecraft 2014-02-02 19:49 - 2014-02-02 03:17 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Skype 2014-02-02 19:48 - 2014-02-02 19:48 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Malwarebytes 2014-02-02 19:48 - 2014-02-02 19:46 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\uTorrent 2014-02-02 19:48 - 2014-02-02 14:08 - 00000000 ___RD () C:\Users\wupto\Desktop\Games 2014-02-02 19:47 - 2014-02-02 19:47 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-02 19:47 - 2014-02-02 19:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\wupto\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-02 19:46 - 2014-02-02 19:45 - 01307736 _____ (BitTorrent Inc.) C:\Users\wupto\Downloads\utorrent.exe 2014-02-02 19:42 - 2014-02-02 19:42 - 00000000 ____D () C:\Users\Public\Documents\ZBrushData 2014-02-02 19:35 - 2014-02-02 19:35 - 00001704 _____ () C:\Users\wupto\Desktop\Photoshop.lnk 2014-02-02 19:21 - 2014-02-02 03:14 - 00000000 ____D () C:\Users\wupto\Desktop\ART 2014-02-02 19:17 - 2014-02-02 13:22 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\NVIDIA 2014-02-02 19:17 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Adobe 2014-02-02 19:17 - 2014-02-02 12:56 - 00000000 ____D () C:\Users\wupto\AppData\Local\Adobe 2014-02-02 19:17 - 2014-02-02 03:10 - 00057560 _____ () C:\Users\wupto\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-02 19:13 - 2014-02-02 17:11 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-02-02 19:13 - 2009-07-14 05:45 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-02 19:13 - 2009-07-14 05:45 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-02 19:12 - 2014-02-02 18:47 - 00000000 ____D () C:\Program Files\Adobe 2014-02-02 19:11 - 2014-02-02 18:43 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2014-02-02 18:48 - 2014-02-02 14:35 - 00000000 ____D () C:\ProgramData\Adobe 2014-02-02 17:45 - 2014-02-02 17:45 - 00000000 ____D () C:\Users\wupto\Documents\game of thrones 2014-02-02 17:16 - 2014-02-02 17:16 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\.minecraft 2014-02-02 17:14 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-02-02 17:13 - 2014-02-02 17:13 - 00001070 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2014-02-02 17:08 - 2014-02-02 17:08 - 00000000 ____D () C:\Users\wupto\AppData\Local\divinity 2 2014-02-02 17:06 - 2014-02-02 16:47 - 00000000 ____D () C:\Users\wupto\Downloads\old 2014-02-02 17:01 - 2014-02-02 17:02 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-02-02 17:01 - 2014-02-02 17:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-02-02 17:01 - 2014-02-02 17:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-02-02 17:01 - 2014-02-02 17:02 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-02-02 17:01 - 2014-02-02 17:01 - 00000000 ____D () C:\Program Files\Java 2014-02-02 16:58 - 2014-02-02 16:47 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\ftblauncher 2014-02-02 16:54 - 2014-02-02 16:54 - 02844536 _____ (Adobe Systems Incorporated) C:\Users\wupto\Downloads\CreativeCloudSet-Up.exe 2014-02-02 16:54 - 2014-02-02 04:03 - 00000000 ___RD () C:\Users\wupto\Dropbox 2014-02-02 16:53 - 2014-02-02 16:53 - 00001001 _____ () C:\Users\wupto\Desktop\Dropbox.lnk 2014-02-02 16:53 - 2014-02-02 16:52 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\DropboxMaster 2014-02-02 16:53 - 2014-02-02 02:12 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-02 16:52 - 2014-02-02 16:52 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-02-02 16:43 - 2014-02-02 16:35 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV4 2014-02-02 16:42 - 2014-02-02 16:42 - 00000000 ____D () C:\Users\wupto\Documents\nbgi 2014-02-02 16:41 - 2014-02-02 16:35 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameMaker-Studio 1.2 2014-02-02 16:41 - 2014-02-02 16:34 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3d-Coat-V4 2014-02-02 16:41 - 2014-02-02 16:34 - 00000000 ____D () C:\Users\wupto\AppData\Local\GameMaker-Studio 2014-02-02 16:40 - 2014-02-02 16:40 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Subversion 2014-02-02 16:39 - 2014-02-02 16:38 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\GameMaker-Studio 2014-02-02 16:38 - 2014-02-02 16:38 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV3 2014-02-02 16:37 - 2014-02-02 16:37 - 00000000 ____D () C:\Users\wupto\AppData\Local\YoYo_Games_Ltd 2014-02-02 16:35 - 2014-02-02 16:35 - 00001850 _____ () C:\Users\wupto\Desktop\Game Maker.lnk 2014-02-02 16:35 - 2014-02-02 16:34 - 00000000 ____D () C:\Users\wupto\GameMaker-Studio 1.2 2014-02-02 16:35 - 2014-02-02 16:34 - 00000000 ____D () C:\Program Files\3D-Coat-V4 2014-02-02 16:34 - 2014-02-02 16:34 - 00000665 _____ () C:\Users\wupto\Desktop\3D Coat.lnk 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files\TabletPlugins 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins 2014-02-02 15:55 - 2014-02-02 15:54 - 00000000 ____D () C:\Program Files\Tablet 2014-02-02 15:55 - 2009-07-14 05:51 - 00019026 _____ () C:\Windows\setupact.log 2014-02-02 15:18 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\TO DO 2014-02-02 15:17 - 2014-02-02 03:13 - 00000000 ____D () C:\Users\wupto\Desktop\random 2014-02-02 15:13 - 2014-02-02 15:13 - 00000000 ____D () C:\Users\wupto\Tor Browser 2014-02-02 13:51 - 2014-02-02 13:10 - 00000000 ____D () C:\Users\wupto\Desktop\Programme 2014-02-02 13:23 - 2014-02-02 13:15 - 00000001 _____ () C:\Users\wupto\random.dat 2014-02-02 13:22 - 2014-02-02 13:22 - 00000963 _____ () C:\Users\wupto\Desktop\Steam.lnk 2014-02-02 13:15 - 2014-02-02 13:15 - 00000044 _____ () C:\Users\wupto\jagex_cl_runescape_LIVE.dat 2014-02-02 13:15 - 2014-02-02 13:15 - 00000000 ____D () C:\Users\wupto\jagexcache 2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Macromedia 2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Local\Macromedia 2014-02-02 12:57 - 2014-02-02 12:57 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-02 12:57 - 2014-02-02 12:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-02 12:57 - 2014-02-02 12:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\system32\Macromed 2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Sun 2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Oracle 2014-02-02 12:37 - 2014-02-02 12:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-02-02 12:37 - 2014-02-02 12:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-02-02 12:37 - 2014-02-02 12:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-02-02 12:37 - 2014-02-02 12:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-02-02 12:37 - 2014-02-02 12:37 - 00000000 ____D () C:\Program Files (x86)\Java 2014-02-02 04:50 - 2014-02-02 04:45 - 00000000 ____D () C:\Users\wupto\Desktop\Programme (x86) 2014-02-02 04:26 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\Virenbekämpfung 2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\shelper 2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\Schule 2014-02-02 04:24 - 2014-02-02 04:23 - 00000000 ____D () C:\Users\wupto\Musik 2014-02-02 04:14 - 2014-02-02 04:11 - 00000000 ____D () C:\Users\wupto\Filme 2014-02-02 03:58 - 2014-02-02 03:58 - 00000000 ____D () C:\Users\wupto\Dokumente 2014-02-02 03:58 - 2014-02-02 03:37 - 00000000 ____D () C:\Users\wupto\Bilder 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\website 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\PA 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\adobeshit 2014-02-02 03:36 - 2014-02-02 03:34 - 00000000 ____D () C:\Users\wupto\Desktop\Modelling 2014-02-02 03:34 - 2014-02-02 03:34 - 00000000 ____D () C:\Users\wupto\Desktop\Hammerwatch Art 2014-02-02 03:34 - 2014-02-02 03:23 - 00000000 ____D () C:\Users\wupto\Desktop\Games & so 2014-02-02 03:23 - 2014-02-02 03:18 - 00000000 ____D () C:\Users\wupto\Desktop\Game Maker Games 2014-02-02 03:18 - 2014-02-02 03:14 - 00000000 ____D () C:\Users\wupto\Desktop\Design Projects 2014-02-02 03:17 - 2014-02-02 03:17 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\Users\wupto\AppData\Local\Skype 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\ProgramData\Skype 2014-02-02 03:16 - 2009-07-14 18:58 - 00696132 _____ () C:\Windows\system32\perfh007.dat 2014-02-02 03:16 - 2009-07-14 18:58 - 00147428 _____ () C:\Windows\system32\perfc007.dat 2014-02-02 03:16 - 2009-07-14 06:13 - 01611160 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-02 03:10 - 2014-02-02 02:44 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-02 03:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-02 03:09 - 2014-02-02 03:09 - 00002154 _____ () C:\Windows\epplauncher.mif 2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-02-02 02:52 - 2014-02-02 02:52 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA Corporation 2014-02-02 02:52 - 2014-02-02 02:43 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-02-02 02:52 - 2014-02-02 02:43 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-02-02 02:52 - 2014-02-02 02:38 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-02-02 02:50 - 2014-02-02 02:50 - 00000534 _____ () C:\Windows\PLTGC.ini.imi 2014-02-02 02:50 - 2014-02-02 02:50 - 00000402 _____ () C:\Windows\PLTGC.ini.cfl 2014-02-02 02:50 - 2014-02-02 02:50 - 00000132 _____ () C:\Windows\system\Dlap.pfx 2014-02-02 02:50 - 2014-02-02 02:50 - 00000000 ____D () C:\Program Files\Plantronics 2014-02-02 02:50 - 2014-02-02 02:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-02-02 02:50 - 2011-11-18 02:21 - 00000432 _____ () C:\Windows\system\PLTGC.ini 2014-02-02 02:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system 2014-02-02 02:49 - 2014-02-02 02:45 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA 2014-02-02 02:45 - 2014-02-02 02:45 - 00001347 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-02-02 02:45 - 2014-02-02 02:45 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-02-02 02:43 - 2014-02-02 02:42 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-02-02 02:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2014-02-02 02:37 - 2014-02-02 02:37 - 00000000 ____D () C:\NVIDIA 2014-02-02 02:29 - 2014-02-02 02:29 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Local\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-02 02:27 - 2014-02-02 02:15 - 00000000 ____D () C:\TempEI4 2014-02-02 02:23 - 2014-02-02 02:23 - 00000000 ____D () C:\Program Files\Intel 2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Program Files\Realtek 2014-02-02 02:21 - 2014-02-02 02:20 - 00002014 _____ () C:\RHDSetup.log 2014-02-02 02:21 - 2014-02-02 02:20 - 00000206 _____ () C:\realtek.log 2014-02-02 02:20 - 2014-02-02 02:20 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Intel 2014-02-02 02:15 - 2014-02-02 02:15 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-02-02 02:15 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore 2014-02-02 02:12 - 2014-02-02 02:12 - 00001439 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-02 02:12 - 2014-02-02 02:12 - 00001405 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-02-02 02:12 - 2014-02-02 02:12 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-02 02:12 - 2014-02-02 02:12 - 00000000 ____D () C:\Users\wupto\AppData\Local\VirtualStore 2014-02-02 02:11 - 2014-02-02 02:11 - 00000020 ___SH () C:\Users\wupto\ntuser.ini 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Netzwerkumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Lokale Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Eigene Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Druckumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 __SHD () C:\Recovery 2014-02-02 02:11 - 2014-02-02 02:03 - 00000000 ____D () C:\Windows\Panther 2014-02-02 02:11 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-02-02 02:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT 2014-02-02 02:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-02-02 02:09 - 2009-07-14 05:45 - 00274464 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-02-02 02:07 - 2014-02-02 02:07 - 00001313 _____ () C:\Windows\TSSysprep.log 2014-02-02 02:07 - 2009-07-14 05:46 - 00001774 _____ () C:\Windows\DtcInstall.log 2014-02-02 02:07 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-02-02 02:03 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2014-02-02 02:03 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2014-02-01 17:10 - 2014-02-02 03:13 - 00000724 _____ () C:\Users\wupto\Desktop\films u should watch.txt 2014-01-21 03:53 - 2014-02-02 02:52 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-01-21 03:53 - 2014-02-02 02:52 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-01-19 08:33 - 2014-02-02 02:43 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe Files to move or delete: ==================== C:\Users\wupto\jagex_cl_runescape_LIVE.dat C:\Users\wupto\random.dat Some content of TEMP: ==================== C:\Users\wupto\AppData\Local\Temp\Creative Cloud Helper.exe C:\Users\wupto\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpzgs5as.dll C:\Users\wupto\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\wupto\AppData\Local\Temp\Setup-Wacom.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-02 02:04 ==================== End Of Log ============================ --- --- --- Addition FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04
Ran by wupto at 2014-02-02 20:34:43
Running from C:\Users\wupto\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
µTorrent (HKCU Version: 3.3.2.30488 - BitTorrent Inc.)
Adobe Creative Cloud (x32 Version: 2.3.0.322 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Photoshop CC (x32 Version: 14.0 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (x32 Version: - Hidden Path Entertainment, Ensemble Studios)
Alan Wake (x32 Version: - Remedy Entertainment)
Alan Wake's American Nightmare (x32 Version: - Remedy Entertainment)
Amnesia: The Dark Descent (x32 Version: - Frictional Games)
Awesomenauts (x32 Version: - Ronimo Games)
Batman: Arkham Asylum GOTY Edition (x32 Version: - Rocksteady Studios)
Batman: Arkham City GOTY (x32 Version: - Rocksteady Studios)
BioShock (x32 Version: - 2K Boston)
BioShock 2 (x32 Version: - 2K Marin)
BioShock Infinite (x32 Version: - Irrational Games)
Brothers - A Tale of Two Sons (x32 Version: - Starbreeze Studios AB)
Chivalry: Medieval Warfare (x32 Version: - Torn Banner Studios)
Cities XL Platinum (x32 Version: - Focus Home Interactive)
Command and Conquer: Red Alert 3 - Uprising (x32 Version: - EA Los Angeles)
Crysis 2 Maximum Edition (x32 Version: - Crytek Studios)
Dark Souls: Prepare to Die Edition (x32 Version: - FromSoftware)
DayZ (x32 Version: - Bohemia Interactive)
Dead Space (x32 Version: - EA Redwood Shores)
Dear Esther (x32 Version: - thechineseroom & Robert Briscoe)
Delver (x32 Version: - Chad Alan Cuddigan)
Divinity II: Developer's Cut (x32 Version: - Larian Studios)
Don't Starve (x32 Version: - Klei Entertainment)
Dropbox (HKCU Version: 2.6.2 - Dropbox, Inc.)
Far Cry® 3 (x32 Version: - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
Game of Thrones (x32 Version: - Cyanide Studios)
GameMaker-Studio 1.2 (HKCU Version: - YoYo Games Ltd.)
Garry's Mod (x32 Version: - Facepunch Studios)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Grand Theft Auto IV (x32 Version: - Rockstar North)
Indie Game: The Movie (x32 Version: - BlinkWorks Media)
Intel(R) Network Connections 14.2.100.0 (Version: 14.2.100.0 - Intel)
Intel(R) Network Connections 14.2.100.0 (Version: 14.2.100.0 - Intel) Hidden
Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Left 4 Dead 2 (x32 Version: - Valve)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0 - Microsoft Corporation)
NVIDIA 3D Vision Controller-Treiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.2 (Version: 1.8.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3221 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden
NVIDIA Update 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.20 (Version: 1.2.20 - NVIDIA Corporation)
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
Plantronics® GameCom 780 Software for Dolby® Headphone (x32 Version: 1.00.0001 - Plantronics)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5841 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 1.7.306 - NVIDIA Corporation) Hidden
Skype™ 6.13 (x32 Version: 6.13.104 - Skype Technologies S.A.)
Steam (x32 Version: - Valve Corporation)
Wacom Tablett (Version: 6.3.7-6 - Wacom Technology Corp.)
WebTablet FB Plugin 32 bit (x32 Version: 2.1.0.3 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (Version: 2.1.0.3 - Wacom Technology Corp.)
==================== Restore Points =========================
02-02-2014 01:15:45 Intel Express Installer
02-02-2014 01:16:40 Installation mit der Intel (R) Express Installer-CD - vorher
02-02-2014 01:20:10 Intel Express Installer
02-02-2014 01:25:35 Intel Express Installer
02-02-2014 01:25:47 Installation mit der Intel (R) Express Installer-CD - danach
02-02-2014 01:28:28 Windows Update
02-02-2014 01:33:40 Windows Update
02-02-2014 01:39:28 Windows Update
02-02-2014 01:50:23 Installiert Plantronics® GameCom 780 Software for Dolby® Headpho8L
02-02-2014 02:07:32 Windows Update
02-02-2014 11:37:11 Installed Java 7 Update 51
02-02-2014 16:01:08 Installed Java 7 Update 51 (64-bit)
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {5E40563C-F63D-4C43-9879-E08221DCED3B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-02] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2013-12-13 12:20 - 2013-12-13 12:20 - 03359600 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2014-02-02 02:50 - 2011-12-01 20:16 - 00150760 ____N () C:\Program Files\Plantronics\GameCom780\VmixPLGC.dll
2014-02-02 16:52 - 2014-02-02 16:52 - 00041984 _____ () c:\users\wupto\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpzgs5as.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\wupto\AppData\Roaming\Dropbox\bin\libcef.dll
2014-02-02 02:29 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-02-02 12:57 - 2014-02-02 12:57 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/02/2014 08:15:59 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/02/2014 05:43:28 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Dwarf.exe, Version: 1.0.0.0, Zeitstempel: 0x52ed0118
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bdbdf
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000b727
ID des fehlerhaften Prozesses: 0x1480
Startzeit der fehlerhaften Anwendung: 0xDwarf.exe0
Pfad der fehlerhaften Anwendung: Dwarf.exe1
Pfad des fehlerhaften Moduls: Dwarf.exe2
Berichtskennung: Dwarf.exe3
Error: (02/02/2014 05:43:25 PM) (Source: .NET Runtime) (User: )
Description: Anwendung: Dwarf.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.IO.FileNotFoundException
Stapel:
bei Dwarf.Program.Main(System.String[])
Error: (02/02/2014 02:00:16 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/02/2014 01:55:04 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/02/2014 01:32:53 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
System errors:
=============
Error: (02/02/2014 01:32:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (02/02/2014 01:32:52 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (02/02/2014 02:45:23 AM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Microsoft Office Sessions:
=========================
Error: (02/02/2014 08:15:59 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (02/02/2014 05:43:28 PM) (Source: Application Error)(User: )
Description: Dwarf.exe1.0.0.052ed0118KERNELBASE.dll6.1.7600.163854a5bdbdfe04343520000b727148001cf2035e157ee60C:\Users\wupto\Dropbox\dwarf\source\Dwarf\Dwarf\Dwarf\bin\x86\Debug\Dwarf.exeC:\Windows\syswow64\KERNELBASE.dll23b1f5e2-8c29-11e3-a574-00270e06e4f2
Error: (02/02/2014 05:43:25 PM) (Source: .NET Runtime)(User: )
Description: Anwendung: Dwarf.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.IO.FileNotFoundException
Stapel:
bei Dwarf.Program.Main(System.String[])
Error: (02/02/2014 02:00:16 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (02/02/2014 01:55:04 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (02/02/2014 01:32:53 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
==================== Memory info ===========================
Percentage of memory in use: 28%
Total physical RAM: 12278.41 MB
Available physical RAM: 8772.98 MB
Total Pagefile: 24554.98 MB
Available Pagefile: 21033.4 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:931.41 GB) (Free:603.23 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 0004F85C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
==================== End Of Log ============================
GMER Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-11-24 22:32:34
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 WDC_WD10EADS-00M2B0 rev.01.00A01 931,51GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\wupto\AppData\Local\Temp\ugloqpow.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff80002def000 45 bytes [01, 00, 00, 00, 00, 00, 00, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575 fffff80002def02f 16 bytes [00, 3F, 00, 00, 00, 3E, 00, ...]
---- User code sections - GMER 2.1 ----
.text C:\Windows\SysWOW64\PnkBstrA.exe[1288] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322 0000000072c01a22 2 bytes [C0, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1288] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496 0000000072c01ad0 2 bytes [C0, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1288] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552 0000000072c01b08 2 bytes [C0, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1288] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730 0000000072c01bba 2 bytes [C0, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1288] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762 0000000072c01bda 2 bytes [C0, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000767e1465 2 bytes [7E, 76]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000767e14bb 2 bytes [7E, 76]
.text ... * 2
---- EOF - GMER 2.1 ----
|
|
02.02.2014, 22:07
| #2 |
| /// the machine /// TB-Ausbilder    | OpenCandy und Search Protect von Conduit hi,
__________________Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
02.02.2014, 23:03
| #3 |
| | OpenCandy und Search Protect von Conduit Malwarebytes 1:
__________________Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.02.02.04 Windows 7 x64 NTFS Internet Explorer 8.0.7600.16385 wupto :: WUPTO-PC [Administrator] Schutz: Aktiviert 02.02.2014 20:03:46 mbam-log-2014-02-02 (20-03-46).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 202764 Laufzeit: 1 Minute(n), 53 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 9 C:\Users\wupto\AppData\Local\Temp\nsa485E.exe (PUP.Optional.SearchProtect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\wupto\AppData\Local\Temp\nsf1B16.exe (PUP.Optional.SearchProtect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\wupto\AppData\Local\Temp\nsu1866.exe (PUP.Optional.SearchProtect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\wupto\AppData\Local\Temp\nsu4AAF.exe (PUP.Optional.SearchProtect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\wupto\AppData\Local\Temp\nsxD629.exe (PUP.Optional.SearchProtect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\wupto\AppData\Local\Temp\utt13D6.tmp.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\wupto\AppData\Local\Temp\utt7B2D.tmp (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\wupto\AppData\Local\Temp\nso42CF\SpSetup.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\wupto\AppData\Local\Temp\~nsu.tmp\Au_.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.02.02.04 Windows 7 x64 NTFS Internet Explorer 8.0.7600.16385 wupto :: WUPTO-PC [Administrator] Schutz: Aktiviert 02.02.2014 21:22:09 mbam-log-2014-02-02 (21-22-09).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 579920 Laufzeit: 1 Stunde(n), 8 Minute(n), 20 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 2 C:\Users\wupto\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DIZWHE4O\spstub[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\wupto\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4WOPXFC\SPSetup[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.018 - Bericht erstellt am 02/02/2014 um 22:40:49
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium (64 bits)
# Benutzername : wupto - WUPTO-PC
# Gestartet von : C:\Users\wupto\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gelöscht : C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default\searchplugins\conduit-search.xml
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
***** [ Browser ] *****
-\\ Internet Explorer v8.0.7600.16385
-\\ Mozilla Firefox v26.0 (de)
[ Datei : C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default\prefs.js ]
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://www.youtube.com/feed/subscriptions|hxxps://mail.google.com/mail/u/0/?shva=1#inbox|hxxps://twitter.com/|hxxp://www.deviantart.com/|hxxp://www.rockpapershot[...]
*************************
AdwCleaner[R0].txt - [1505 octets] - [02/02/2014 22:39:46]
AdwCleaner[S0].txt - [1304 octets] - [02/02/2014 22:40:49]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1364 octets] ##########
JRT JRT Logfile: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Home Premium x64
Ran by wupto on 02.02.2014 at 22:55:16,32
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\wupto\AppData\Roaming\mozilla\firefox\profiles\x46msonk.default\minidumps [1 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.02.2014 at 23:00:48,45
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by wupto (administrator) on WUPTO-PC on 02-02-2014 23:02:24
Running from C:\Users\wupto\Desktop
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Plantronics\GameCom780\GameCom780.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Dropbox, Inc.) C:\Users\wupto\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7743008 2009-04-27] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-04-27] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [GamecomSound] - C:\Program Files\Plantronics\GameCom780\GameCom780.exe [777448 2011-12-01] ()
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-1998335624-851730918-2200616401-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20728480 2014-01-14] (Skype Technologies S.A.)
Startup: C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\wupto\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Magic Actions for YouTube™ - C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default\Extensions\jid0-UVAeBCfd34Kk5usS8A1CBiobvM8@jetpack.xpi [2014-02-02]
FF Extension: Adblock Plus - C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-02]
==================== Services (Whitelisted) =================
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [621336 2013-12-04] (Wacom Technology, Corp.)
==================== Drivers (Whitelisted) ====================
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1327104 2011-11-05] (C-Media Electronics Inc)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-02 23:02 - 2014-02-02 23:02 - 00009783 _____ () C:\Users\wupto\Desktop\FRST.txt
2014-02-02 23:00 - 2014-02-02 23:00 - 00000756 _____ () C:\Users\wupto\Desktop\JRT.txt
2014-02-02 22:55 - 2014-02-02 22:55 - 00000000 ____D () C:\Windows\ERUNT
2014-02-02 22:54 - 2014-02-02 22:54 - 01037068 _____ (Thisisu) C:\Users\wupto\Desktop\JRT.exe
2014-02-02 22:42 - 2014-02-02 22:42 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\WTablet
2014-02-02 22:41 - 2014-02-02 22:41 - 00004116 _____ () C:\Windows\PFRO.log
2014-02-02 22:39 - 2014-02-02 22:40 - 00000000 ____D () C:\AdwCleaner
2014-02-02 22:37 - 2014-02-02 23:02 - 00005956 _____ () C:\Users\wupto\Desktop\reply.txt
2014-02-02 22:36 - 2014-02-02 22:36 - 01166132 _____ () C:\Users\wupto\Desktop\adwcleaner.exe
2014-02-02 20:41 - 2014-02-02 20:41 - 00380416 _____ () C:\Users\wupto\Downloads\Gmer-19357.exe
2014-02-02 20:34 - 2014-02-02 23:02 - 00000000 ____D () C:\FRST
2014-02-02 20:24 - 2014-02-02 20:25 - 02080256 _____ (Farbar) C:\Users\wupto\Desktop\FRST64.exe
2014-02-02 20:22 - 2014-02-02 20:22 - 00050477 _____ () C:\Users\wupto\Desktop\Defogger.exe
2014-02-02 20:22 - 2014-02-02 20:22 - 00000000 _____ () C:\Users\wupto\defogger_reenable
2014-02-02 19:48 - 2014-02-02 19:48 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Malwarebytes
2014-02-02 19:47 - 2014-02-02 19:47 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-02 19:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-02 19:46 - 2014-02-02 19:48 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\uTorrent
2014-02-02 19:45 - 2014-02-02 19:46 - 01307736 _____ (BitTorrent Inc.) C:\Users\wupto\Downloads\utorrent.exe
2014-02-02 19:43 - 2014-02-02 19:47 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\wupto\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-02 19:42 - 2014-02-02 19:42 - 00000000 ____D () C:\Users\Public\Documents\ZBrushData
2014-02-02 19:35 - 2014-02-02 19:35 - 00001704 _____ () C:\Users\wupto\Desktop\Photoshop.lnk
2014-02-02 18:47 - 2014-02-02 19:12 - 00000000 ____D () C:\Program Files\Adobe
2014-02-02 18:43 - 2014-02-02 19:11 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-02-02 17:45 - 2014-02-02 17:45 - 00000000 ____D () C:\Users\wupto\Documents\game of thrones
2014-02-02 17:16 - 2014-02-02 17:16 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\.minecraft
2014-02-02 17:13 - 2014-02-02 17:13 - 00001070 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2014-02-02 17:11 - 2014-02-02 19:13 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-02 17:08 - 2014-02-02 17:08 - 00000000 ____D () C:\Users\wupto\AppData\Local\divinity 2
2014-02-02 17:02 - 2014-02-02 17:01 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-02-02 17:02 - 2014-02-02 17:01 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-02 17:02 - 2014-02-02 17:01 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-02 17:02 - 2014-02-02 17:01 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-02 17:01 - 2014-02-02 17:01 - 00000000 ____D () C:\Program Files\Java
2014-02-02 16:56 - 2014-02-02 19:49 - 00000000 ____D () C:\Users\wupto\Desktop\Minecraft
2014-02-02 16:54 - 2014-02-02 16:54 - 02844536 _____ (Adobe Systems Incorporated) C:\Users\wupto\Downloads\CreativeCloudSet-Up.exe
2014-02-02 16:53 - 2014-02-02 16:53 - 00001001 _____ () C:\Users\wupto\Desktop\Dropbox.lnk
2014-02-02 16:52 - 2014-02-02 16:53 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\DropboxMaster
2014-02-02 16:52 - 2014-02-02 16:52 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-02 16:48 - 2014-02-02 22:45 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Dropbox
2014-02-02 16:47 - 2014-02-02 17:06 - 00000000 ____D () C:\Users\wupto\Downloads\old
2014-02-02 16:47 - 2014-02-02 16:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\ftblauncher
2014-02-02 16:42 - 2014-02-02 16:42 - 00000000 ____D () C:\Users\wupto\Documents\nbgi
2014-02-02 16:40 - 2014-02-02 16:40 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Subversion
2014-02-02 16:38 - 2014-02-02 16:39 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\GameMaker-Studio
2014-02-02 16:38 - 2014-02-02 16:38 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV3
2014-02-02 16:37 - 2014-02-02 16:37 - 00000000 ____D () C:\Users\wupto\AppData\Local\YoYo_Games_Ltd
2014-02-02 16:35 - 2014-02-02 16:43 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV4
2014-02-02 16:35 - 2014-02-02 16:41 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameMaker-Studio 1.2
2014-02-02 16:35 - 2014-02-02 16:35 - 00001850 _____ () C:\Users\wupto\Desktop\Game Maker.lnk
2014-02-02 16:34 - 2014-02-02 16:41 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3d-Coat-V4
2014-02-02 16:34 - 2014-02-02 16:41 - 00000000 ____D () C:\Users\wupto\AppData\Local\GameMaker-Studio
2014-02-02 16:34 - 2014-02-02 16:35 - 00000000 ____D () C:\Users\wupto\GameMaker-Studio 1.2
2014-02-02 16:34 - 2014-02-02 16:35 - 00000000 ____D () C:\Program Files\3D-Coat-V4
2014-02-02 16:34 - 2014-02-02 16:34 - 00000665 _____ () C:\Users\wupto\Desktop\3D Coat.lnk
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files\TabletPlugins
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins
2014-02-02 15:55 - 2013-11-12 01:16 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys
2014-02-02 15:54 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files\Tablet
2014-02-02 15:54 - 2013-12-04 17:35 - 01945880 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01938712 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01808152 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01805080 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01604376 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Tablet.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01596696 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01483032 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wintab32.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01479960 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll
2014-02-02 15:54 - 2013-11-12 01:16 - 00090424 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys
2014-02-02 15:54 - 2013-11-12 01:16 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys
2014-02-02 15:54 - 2012-12-11 23:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll
2014-02-02 15:54 - 2012-12-11 23:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll
2014-02-02 15:13 - 2014-02-02 15:13 - 00000000 ____D () C:\Users\wupto\Tor Browser
2014-02-02 14:35 - 2014-02-02 18:48 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-02 14:08 - 2014-02-02 19:48 - 00000000 ___RD () C:\Users\wupto\Desktop\Games
2014-02-02 13:22 - 2014-02-02 20:20 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-02 13:22 - 2014-02-02 19:17 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\NVIDIA
2014-02-02 13:22 - 2014-02-02 13:22 - 00000963 _____ () C:\Users\wupto\Desktop\Steam.lnk
2014-02-02 13:15 - 2014-02-02 13:23 - 00000001 _____ () C:\Users\wupto\random.dat
2014-02-02 13:15 - 2014-02-02 13:15 - 00000044 _____ () C:\Users\wupto\jagex_cl_runescape_LIVE.dat
2014-02-02 13:15 - 2014-02-02 13:15 - 00000000 ____D () C:\Users\wupto\jagexcache
2014-02-02 13:10 - 2014-02-02 13:51 - 00000000 ____D () C:\Users\wupto\Desktop\Programme
2014-02-02 12:58 - 2014-02-02 19:17 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Adobe
2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Macromedia
2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Local\Macromedia
2014-02-02 12:57 - 2014-02-02 22:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-02 12:57 - 2014-02-02 12:57 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-02 12:57 - 2014-02-02 12:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-02 12:57 - 2014-02-02 12:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\system32\Macromed
2014-02-02 12:56 - 2014-02-02 22:44 - 00000000 ____D () C:\Users\wupto\AppData\Local\Adobe
2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Sun
2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-02 12:37 - 2014-02-02 12:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-02 12:37 - 2014-02-02 12:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-02 12:37 - 2014-02-02 12:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-02 12:37 - 2014-02-02 12:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-02 12:37 - 2014-02-02 12:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-02 04:45 - 2014-02-02 04:50 - 00000000 ____D () C:\Users\wupto\Desktop\Programme (x86)
2014-02-02 04:25 - 2014-02-02 04:26 - 00000000 ____D () C:\Users\wupto\Virenbekämpfung
2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\shelper
2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\Schule
2014-02-02 04:23 - 2014-02-02 04:24 - 00000000 ____D () C:\Users\wupto\Musik
2014-02-02 04:11 - 2014-02-02 04:14 - 00000000 ____D () C:\Users\wupto\Filme
2014-02-02 04:03 - 2014-02-02 22:44 - 00000000 ___RD () C:\Users\wupto\Dropbox
2014-02-02 03:58 - 2014-02-02 03:58 - 00000000 ____D () C:\Users\wupto\Dokumente
2014-02-02 03:37 - 2014-02-02 03:58 - 00000000 ____D () C:\Users\wupto\Bilder
2014-02-02 03:36 - 2014-02-02 15:18 - 00000000 ____D () C:\Users\wupto\Desktop\TO DO
2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\website
2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\PA
2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\adobeshit
2014-02-02 03:36 - 2013-09-28 15:53 - 00000037 _____ () C:\Users\wupto\cgpeers com.txt
2014-02-02 03:34 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\Modelling
2014-02-02 03:34 - 2014-02-02 03:34 - 00000000 ____D () C:\Users\wupto\Desktop\Hammerwatch Art
2014-02-02 03:23 - 2014-02-02 03:34 - 00000000 ____D () C:\Users\wupto\Desktop\Games & so
2014-02-02 03:18 - 2014-02-02 03:23 - 00000000 ____D () C:\Users\wupto\Desktop\Game Maker Games
2014-02-02 03:17 - 2014-02-02 23:02 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Skype
2014-02-02 03:17 - 2014-02-02 03:17 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\Users\wupto\AppData\Local\Skype
2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\ProgramData\Skype
2014-02-02 03:14 - 2014-02-02 19:21 - 00000000 ____D () C:\Users\wupto\Desktop\ART
2014-02-02 03:14 - 2014-02-02 03:18 - 00000000 ____D () C:\Users\wupto\Desktop\Design Projects
2014-02-02 03:13 - 2014-02-02 15:17 - 00000000 ____D () C:\Users\wupto\Desktop\random
2014-02-02 03:13 - 2014-02-01 17:10 - 00000724 _____ () C:\Users\wupto\Desktop\films u should watch.txt
2014-02-02 03:10 - 2014-02-02 19:17 - 00057560 _____ () C:\Users\wupto\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-02 03:09 - 2014-02-02 03:09 - 00002154 _____ () C:\Windows\epplauncher.mif
2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-02-02 03:08 - 2010-04-09 12:06 - 01898376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-02 03:08 - 2010-04-09 12:06 - 00374664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-02-02 02:52 - 2014-02-02 02:52 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA Corporation
2014-02-02 02:52 - 2014-01-21 03:53 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-02-02 02:52 - 2014-01-21 03:53 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-02-02 02:52 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-02-02 02:52 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-02-02 02:52 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-02-02 02:52 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-02-02 02:52 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-02-02 02:52 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-02-02 02:51 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-02-02 02:51 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-02 02:50 - 2014-02-02 02:50 - 00000534 _____ () C:\Windows\PLTGC.ini.imi
2014-02-02 02:50 - 2014-02-02 02:50 - 00000402 _____ () C:\Windows\PLTGC.ini.cfl
2014-02-02 02:50 - 2014-02-02 02:50 - 00000132 _____ () C:\Windows\system\Dlap.pfx
2014-02-02 02:50 - 2014-02-02 02:50 - 00000000 ____D () C:\Program Files\Plantronics
2014-02-02 02:50 - 2011-12-01 21:18 - 00813288 ____N () C:\Windows\system32\PLTGC.exe
2014-02-02 02:50 - 2011-11-23 19:08 - 00003489 ____N () C:\Windows\PLTGC.ini.cfg
2014-02-02 02:50 - 2011-11-05 01:47 - 01327104 _____ (C-Media Electronics Inc) C:\Windows\system32\Drivers\PLTGC.sys
2014-02-02 02:50 - 2011-01-27 16:02 - 00003072 ____N () C:\Windows\Thumbs.db
2014-02-02 02:50 - 2009-08-20 10:00 - 00359424 ____N () C:\Windows\system32\CmiInstallResAll64.dll
2014-02-02 02:50 - 2004-04-14 20:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\fltrPLTGC.dll
2014-02-02 02:49 - 2006-10-06 23:45 - 00524768 ____R (Microsoft Corporation) C:\Windows\difxapi.dll
2014-02-02 02:45 - 2014-02-02 02:49 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA
2014-02-02 02:45 - 2014-02-02 02:45 - 00001347 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-02-02 02:45 - 2014-02-02 02:45 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-02 02:44 - 2014-02-02 22:42 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-02 02:43 - 2014-02-02 02:52 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-02 02:43 - 2014-02-02 02:52 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-02 02:43 - 2014-01-19 08:33 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-02-02 02:43 - 2013-12-19 21:33 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-02-02 02:43 - 2013-12-19 21:33 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-02-02 02:43 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-02-02 02:43 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-02-02 02:43 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-02-02 02:43 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-02-02 02:43 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-02-02 02:43 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-02-02 02:43 - 2013-12-19 06:01 - 03539040 _____ () C:\Windows\system32\nvcoproc.bin
2014-02-02 02:42 - 2014-02-02 02:43 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-02 02:39 - 2009-11-25 20:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-02-02 02:39 - 2009-11-25 20:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-02-02 02:39 - 2009-11-25 20:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2014-02-02 02:39 - 2009-11-25 20:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2014-02-02 02:39 - 2009-11-25 20:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2014-02-02 02:39 - 2009-11-25 20:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2014-02-02 02:39 - 2009-11-25 20:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2014-02-02 02:39 - 2009-11-25 20:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2014-02-02 02:39 - 2009-11-25 20:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2014-02-02 02:39 - 2009-11-25 20:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2014-02-02 02:38 - 2014-02-02 02:52 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-02 02:38 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-02-02 02:38 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00357152 _____ () C:\Windows\system32\NvIFROpenGL.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00314656 _____ () C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-02-02 02:38 - 2013-12-19 21:33 - 00023754 _____ () C:\Windows\system32\nvinfo.pb
2014-02-02 02:38 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-02-02 02:38 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-02-02 02:38 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-02-02 02:37 - 2014-02-02 02:37 - 00000000 ____D () C:\NVIDIA
2014-02-02 02:33 - 2012-02-15 07:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-02-02 02:33 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-02-02 02:33 - 2012-02-15 05:47 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-02-02 02:33 - 2012-02-15 05:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-02-02 02:33 - 2010-01-09 08:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2014-02-02 02:33 - 2010-01-09 07:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll
2014-02-02 02:29 - 2014-02-02 02:29 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Mozilla
2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Local\Mozilla
2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-02 02:29 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-02-02 02:29 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-02-02 02:29 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-02-02 02:29 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-02-02 02:28 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-02-02 02:28 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-02-02 02:28 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-02-02 02:28 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-02-02 02:28 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-02-02 02:23 - 2014-02-02 02:23 - 00000000 ____D () C:\Program Files\Intel
2014-02-02 02:23 - 2009-06-22 12:05 - 00273072 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1k62x64.sys
2014-02-02 02:23 - 2009-06-03 18:38 - 00078016 _____ (Intel Corporation) C:\Windows\system32\NicInstK.dll
2014-02-02 02:23 - 2009-05-26 11:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2014-02-02 02:23 - 2009-04-21 18:39 - 00072288 _____ (Intel Corporation) C:\Windows\system32\e1kmsg.dll
2014-02-02 02:23 - 2009-03-31 14:58 - 00342656 ____R (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2014-02-02 02:23 - 2009-03-07 03:08 - 00003127 _____ () C:\Windows\system32\e1k62x64.din
2014-02-02 02:23 - 2006-01-12 15:52 - 00001904 ____N () C:\Windows\system32\SetupBD.din
2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Program Files\Realtek
2014-02-02 02:21 - 2008-04-30 09:48 - 00193536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-02-02 02:21 - 2007-07-25 10:34 - 00150528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-02-02 02:21 - 2007-05-17 12:26 - 00211376 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-02-02 02:21 - 2006-12-13 11:30 - 00513536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-02-02 02:20 - 2014-02-02 02:50 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-02 02:20 - 2014-02-02 02:21 - 00002014 _____ () C:\RHDSetup.log
2014-02-02 02:20 - 2014-02-02 02:21 - 00000206 _____ () C:\realtek.log
2014-02-02 02:20 - 2014-02-02 02:20 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-02 02:20 - 2009-04-27 20:50 - 01272352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-02-02 02:20 - 2009-04-27 20:50 - 00611360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-02-02 02:20 - 2009-04-27 20:50 - 00332320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-02-02 02:20 - 2009-04-27 20:49 - 01552416 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-02-02 02:20 - 2009-04-27 20:49 - 01163296 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-02-02 02:20 - 2009-04-27 20:49 - 00417824 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-02-02 02:20 - 2009-04-27 20:49 - 00149536 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-02-02 02:20 - 2009-04-27 20:49 - 00066080 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll
2014-02-02 02:20 - 2009-04-27 20:22 - 01766048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-02-02 02:20 - 2009-04-16 18:23 - 00540672 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-02-02 02:20 - 2009-04-16 11:13 - 00166400 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-02-02 02:20 - 2009-03-31 15:02 - 00108032 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-02-02 02:20 - 2009-03-09 06:32 - 00304640 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-02-02 02:20 - 2009-03-09 06:30 - 00304640 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-02-02 02:20 - 2009-02-12 18:14 - 00176640 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\FMAPO64.dll
2014-02-02 02:20 - 2008-11-09 12:57 - 00311296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Intel
2014-02-02 02:16 - 2009-07-08 16:34 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2014-02-02 02:15 - 2014-02-02 02:27 - 00000000 ____D () C:\TempEI4
2014-02-02 02:15 - 2014-02-02 02:15 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-02-02 02:12 - 2014-02-02 16:53 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-02 02:12 - 2014-02-02 02:12 - 00001439 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-02 02:12 - 2014-02-02 02:12 - 00001405 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-02-02 02:12 - 2014-02-02 02:12 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-02 02:12 - 2014-02-02 02:12 - 00000000 ____D () C:\Users\wupto\AppData\Local\VirtualStore
2014-02-02 02:11 - 2014-02-02 22:46 - 01401339 _____ () C:\Windows\WindowsUpdate.log
2014-02-02 02:11 - 2014-02-02 20:22 - 00000000 ____D () C:\Users\wupto
2014-02-02 02:11 - 2014-02-02 02:11 - 00000020 ___SH () C:\Users\wupto\ntuser.ini
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Vorlagen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Startmenü
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Netzwerkumgebung
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Lokale Einstellungen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Eigene Dateien
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Druckumgebung
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Musik
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Bilder
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Verlauf
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Programme
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 __SHD () C:\Recovery
2014-02-02 02:11 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-02 02:11 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-02 02:07 - 2014-02-02 02:07 - 00001313 _____ () C:\Windows\TSSysprep.log
2014-02-02 02:03 - 2014-02-02 02:11 - 00000000 ____D () C:\Windows\Panther
==================== One Month Modified Files and Folders =======
2014-02-02 23:02 - 2014-02-02 23:02 - 00009783 _____ () C:\Users\wupto\Desktop\FRST.txt
2014-02-02 23:02 - 2014-02-02 22:37 - 00005956 _____ () C:\Users\wupto\Desktop\reply.txt
2014-02-02 23:02 - 2014-02-02 20:34 - 00000000 ____D () C:\FRST
2014-02-02 23:02 - 2014-02-02 03:17 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Skype
2014-02-02 23:00 - 2014-02-02 23:00 - 00000756 _____ () C:\Users\wupto\Desktop\JRT.txt
2014-02-02 22:55 - 2014-02-02 22:55 - 00000000 ____D () C:\Windows\ERUNT
2014-02-02 22:54 - 2014-02-02 22:54 - 01037068 _____ (Thisisu) C:\Users\wupto\Desktop\JRT.exe
2014-02-02 22:48 - 2009-07-14 18:58 - 00696132 _____ () C:\Windows\system32\perfh007.dat
2014-02-02 22:48 - 2009-07-14 18:58 - 00147428 _____ () C:\Windows\system32\perfc007.dat
2014-02-02 22:48 - 2009-07-14 06:13 - 01611160 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-02 22:46 - 2014-02-02 02:11 - 01401339 _____ () C:\Windows\WindowsUpdate.log
2014-02-02 22:45 - 2014-02-02 16:48 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Dropbox
2014-02-02 22:45 - 2009-07-14 05:45 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-02 22:45 - 2009-07-14 05:45 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-02 22:44 - 2014-02-02 12:56 - 00000000 ____D () C:\Users\wupto\AppData\Local\Adobe
2014-02-02 22:44 - 2014-02-02 04:03 - 00000000 ___RD () C:\Users\wupto\Dropbox
2014-02-02 22:42 - 2014-02-02 22:42 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\WTablet
2014-02-02 22:42 - 2014-02-02 02:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-02 22:42 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-02 22:42 - 2009-07-14 05:51 - 00019194 _____ () C:\Windows\setupact.log
2014-02-02 22:42 - 2009-07-14 05:45 - 04936888 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-02 22:41 - 2014-02-02 22:41 - 00004116 _____ () C:\Windows\PFRO.log
2014-02-02 22:40 - 2014-02-02 22:39 - 00000000 ____D () C:\AdwCleaner
2014-02-02 22:36 - 2014-02-02 22:36 - 01166132 _____ () C:\Users\wupto\Desktop\adwcleaner.exe
2014-02-02 22:11 - 2014-02-02 12:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-02 20:41 - 2014-02-02 20:41 - 00380416 _____ () C:\Users\wupto\Downloads\Gmer-19357.exe
2014-02-02 20:25 - 2014-02-02 20:24 - 02080256 _____ (Farbar) C:\Users\wupto\Desktop\FRST64.exe
2014-02-02 20:22 - 2014-02-02 20:22 - 00050477 _____ () C:\Users\wupto\Desktop\Defogger.exe
2014-02-02 20:22 - 2014-02-02 20:22 - 00000000 _____ () C:\Users\wupto\defogger_reenable
2014-02-02 20:22 - 2014-02-02 02:11 - 00000000 ____D () C:\Users\wupto
2014-02-02 20:20 - 2014-02-02 13:22 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-02 19:49 - 2014-02-02 16:56 - 00000000 ____D () C:\Users\wupto\Desktop\Minecraft
2014-02-02 19:48 - 2014-02-02 19:48 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Malwarebytes
2014-02-02 19:48 - 2014-02-02 19:46 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\uTorrent
2014-02-02 19:48 - 2014-02-02 14:08 - 00000000 ___RD () C:\Users\wupto\Desktop\Games
2014-02-02 19:47 - 2014-02-02 19:47 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-02 19:47 - 2014-02-02 19:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\wupto\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-02 19:46 - 2014-02-02 19:45 - 01307736 _____ (BitTorrent Inc.) C:\Users\wupto\Downloads\utorrent.exe
2014-02-02 19:42 - 2014-02-02 19:42 - 00000000 ____D () C:\Users\Public\Documents\ZBrushData
2014-02-02 19:35 - 2014-02-02 19:35 - 00001704 _____ () C:\Users\wupto\Desktop\Photoshop.lnk
2014-02-02 19:21 - 2014-02-02 03:14 - 00000000 ____D () C:\Users\wupto\Desktop\ART
2014-02-02 19:17 - 2014-02-02 13:22 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\NVIDIA
2014-02-02 19:17 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Adobe
2014-02-02 19:17 - 2014-02-02 03:10 - 00057560 _____ () C:\Users\wupto\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-02 19:13 - 2014-02-02 17:11 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-02 19:12 - 2014-02-02 18:47 - 00000000 ____D () C:\Program Files\Adobe
2014-02-02 19:11 - 2014-02-02 18:43 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-02-02 18:48 - 2014-02-02 14:35 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-02 17:45 - 2014-02-02 17:45 - 00000000 ____D () C:\Users\wupto\Documents\game of thrones
2014-02-02 17:16 - 2014-02-02 17:16 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\.minecraft
2014-02-02 17:14 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-02 17:13 - 2014-02-02 17:13 - 00001070 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2014-02-02 17:08 - 2014-02-02 17:08 - 00000000 ____D () C:\Users\wupto\AppData\Local\divinity 2
2014-02-02 17:06 - 2014-02-02 16:47 - 00000000 ____D () C:\Users\wupto\Downloads\old
2014-02-02 17:01 - 2014-02-02 17:02 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-02-02 17:01 - 2014-02-02 17:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-02 17:01 - 2014-02-02 17:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-02 17:01 - 2014-02-02 17:02 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-02 17:01 - 2014-02-02 17:01 - 00000000 ____D () C:\Program Files\Java
2014-02-02 16:58 - 2014-02-02 16:47 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\ftblauncher
2014-02-02 16:54 - 2014-02-02 16:54 - 02844536 _____ (Adobe Systems Incorporated) C:\Users\wupto\Downloads\CreativeCloudSet-Up.exe
2014-02-02 16:53 - 2014-02-02 16:53 - 00001001 _____ () C:\Users\wupto\Desktop\Dropbox.lnk
2014-02-02 16:53 - 2014-02-02 16:52 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\DropboxMaster
2014-02-02 16:53 - 2014-02-02 02:12 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-02 16:52 - 2014-02-02 16:52 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-02 16:43 - 2014-02-02 16:35 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV4
2014-02-02 16:42 - 2014-02-02 16:42 - 00000000 ____D () C:\Users\wupto\Documents\nbgi
2014-02-02 16:41 - 2014-02-02 16:35 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameMaker-Studio 1.2
2014-02-02 16:41 - 2014-02-02 16:34 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3d-Coat-V4
2014-02-02 16:41 - 2014-02-02 16:34 - 00000000 ____D () C:\Users\wupto\AppData\Local\GameMaker-Studio
2014-02-02 16:40 - 2014-02-02 16:40 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Subversion
2014-02-02 16:39 - 2014-02-02 16:38 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\GameMaker-Studio
2014-02-02 16:38 - 2014-02-02 16:38 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV3
2014-02-02 16:37 - 2014-02-02 16:37 - 00000000 ____D () C:\Users\wupto\AppData\Local\YoYo_Games_Ltd
2014-02-02 16:35 - 2014-02-02 16:35 - 00001850 _____ () C:\Users\wupto\Desktop\Game Maker.lnk
2014-02-02 16:35 - 2014-02-02 16:34 - 00000000 ____D () C:\Users\wupto\GameMaker-Studio 1.2
2014-02-02 16:35 - 2014-02-02 16:34 - 00000000 ____D () C:\Program Files\3D-Coat-V4
2014-02-02 16:34 - 2014-02-02 16:34 - 00000665 _____ () C:\Users\wupto\Desktop\3D Coat.lnk
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files\TabletPlugins
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins
2014-02-02 15:55 - 2014-02-02 15:54 - 00000000 ____D () C:\Program Files\Tablet
2014-02-02 15:18 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\TO DO
2014-02-02 15:17 - 2014-02-02 03:13 - 00000000 ____D () C:\Users\wupto\Desktop\random
2014-02-02 15:13 - 2014-02-02 15:13 - 00000000 ____D () C:\Users\wupto\Tor Browser
2014-02-02 13:51 - 2014-02-02 13:10 - 00000000 ____D () C:\Users\wupto\Desktop\Programme
2014-02-02 13:23 - 2014-02-02 13:15 - 00000001 _____ () C:\Users\wupto\random.dat
2014-02-02 13:22 - 2014-02-02 13:22 - 00000963 _____ () C:\Users\wupto\Desktop\Steam.lnk
2014-02-02 13:15 - 2014-02-02 13:15 - 00000044 _____ () C:\Users\wupto\jagex_cl_runescape_LIVE.dat
2014-02-02 13:15 - 2014-02-02 13:15 - 00000000 ____D () C:\Users\wupto\jagexcache
2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Macromedia
2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Local\Macromedia
2014-02-02 12:57 - 2014-02-02 12:57 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-02 12:57 - 2014-02-02 12:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-02 12:57 - 2014-02-02 12:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\system32\Macromed
2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Sun
2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-02 12:37 - 2014-02-02 12:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-02 12:37 - 2014-02-02 12:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-02 12:37 - 2014-02-02 12:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-02 12:37 - 2014-02-02 12:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-02 12:37 - 2014-02-02 12:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-02 04:50 - 2014-02-02 04:45 - 00000000 ____D () C:\Users\wupto\Desktop\Programme (x86)
2014-02-02 04:26 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\Virenbekämpfung
2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\shelper
2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\Schule
2014-02-02 04:24 - 2014-02-02 04:23 - 00000000 ____D () C:\Users\wupto\Musik
2014-02-02 04:14 - 2014-02-02 04:11 - 00000000 ____D () C:\Users\wupto\Filme
2014-02-02 03:58 - 2014-02-02 03:58 - 00000000 ____D () C:\Users\wupto\Dokumente
2014-02-02 03:58 - 2014-02-02 03:37 - 00000000 ____D () C:\Users\wupto\Bilder
2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\website
2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\PA
2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\adobeshit
2014-02-02 03:36 - 2014-02-02 03:34 - 00000000 ____D () C:\Users\wupto\Desktop\Modelling
2014-02-02 03:34 - 2014-02-02 03:34 - 00000000 ____D () C:\Users\wupto\Desktop\Hammerwatch Art
2014-02-02 03:34 - 2014-02-02 03:23 - 00000000 ____D () C:\Users\wupto\Desktop\Games & so
2014-02-02 03:23 - 2014-02-02 03:18 - 00000000 ____D () C:\Users\wupto\Desktop\Game Maker Games
2014-02-02 03:18 - 2014-02-02 03:14 - 00000000 ____D () C:\Users\wupto\Desktop\Design Projects
2014-02-02 03:17 - 2014-02-02 03:17 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\Users\wupto\AppData\Local\Skype
2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\ProgramData\Skype
2014-02-02 03:09 - 2014-02-02 03:09 - 00002154 _____ () C:\Windows\epplauncher.mif
2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-02-02 02:52 - 2014-02-02 02:52 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA Corporation
2014-02-02 02:52 - 2014-02-02 02:43 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-02 02:52 - 2014-02-02 02:43 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-02 02:52 - 2014-02-02 02:38 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-02 02:50 - 2014-02-02 02:50 - 00000534 _____ () C:\Windows\PLTGC.ini.imi
2014-02-02 02:50 - 2014-02-02 02:50 - 00000402 _____ () C:\Windows\PLTGC.ini.cfl
2014-02-02 02:50 - 2014-02-02 02:50 - 00000132 _____ () C:\Windows\system\Dlap.pfx
2014-02-02 02:50 - 2014-02-02 02:50 - 00000000 ____D () C:\Program Files\Plantronics
2014-02-02 02:50 - 2014-02-02 02:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-02 02:50 - 2011-11-18 02:21 - 00000432 _____ () C:\Windows\system\PLTGC.ini
2014-02-02 02:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system
2014-02-02 02:49 - 2014-02-02 02:45 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA
2014-02-02 02:45 - 2014-02-02 02:45 - 00001347 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-02-02 02:45 - 2014-02-02 02:45 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-02 02:43 - 2014-02-02 02:42 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-02 02:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-02-02 02:37 - 2014-02-02 02:37 - 00000000 ____D () C:\NVIDIA
2014-02-02 02:29 - 2014-02-02 02:29 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Mozilla
2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Local\Mozilla
2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-02 02:27 - 2014-02-02 02:15 - 00000000 ____D () C:\TempEI4
2014-02-02 02:23 - 2014-02-02 02:23 - 00000000 ____D () C:\Program Files\Intel
2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Program Files\Realtek
2014-02-02 02:21 - 2014-02-02 02:20 - 00002014 _____ () C:\RHDSetup.log
2014-02-02 02:21 - 2014-02-02 02:20 - 00000206 _____ () C:\realtek.log
2014-02-02 02:20 - 2014-02-02 02:20 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Intel
2014-02-02 02:15 - 2014-02-02 02:15 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-02-02 02:15 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-02-02 02:12 - 2014-02-02 02:12 - 00001439 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-02 02:12 - 2014-02-02 02:12 - 00001405 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-02-02 02:12 - 2014-02-02 02:12 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-02 02:12 - 2014-02-02 02:12 - 00000000 ____D () C:\Users\wupto\AppData\Local\VirtualStore
2014-02-02 02:11 - 2014-02-02 02:11 - 00000020 ___SH () C:\Users\wupto\ntuser.ini
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Vorlagen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Startmenü
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Netzwerkumgebung
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Lokale Einstellungen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Eigene Dateien
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Druckumgebung
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Musik
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Bilder
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Verlauf
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Programme
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 __SHD () C:\Recovery
2014-02-02 02:11 - 2014-02-02 02:03 - 00000000 ____D () C:\Windows\Panther
2014-02-02 02:11 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-02 02:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-02-02 02:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-02 02:07 - 2014-02-02 02:07 - 00001313 _____ () C:\Windows\TSSysprep.log
2014-02-02 02:07 - 2009-07-14 05:46 - 00001774 _____ () C:\Windows\DtcInstall.log
2014-02-02 02:07 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-02-02 02:03 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-02-02 02:03 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-02-01 17:10 - 2014-02-02 03:13 - 00000724 _____ () C:\Users\wupto\Desktop\films u should watch.txt
2014-01-21 03:53 - 2014-02-02 02:52 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-21 03:53 - 2014-02-02 02:52 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-19 08:33 - 2014-02-02 02:43 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
Files to move or delete:
====================
C:\Users\wupto\jagex_cl_runescape_LIVE.dat
C:\Users\wupto\random.dat
Some content of TEMP:
====================
C:\Users\wupto\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\wupto\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp9dze0r.dll
C:\Users\wupto\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\wupto\AppData\Local\Temp\Quarantine.exe
C:\Users\wupto\AppData\Local\Temp\Setup-Wacom.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-02 02:04
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Frage mich gerade was dieses random.dat ist, da steht folgendes drin: ÿ Ich würde auch noch gerne Wissen um was für Malware es sich handelt? Eher harmlos, wie Adware oder etwas das mich ausspionieren kann und meine Passwörter aufzeichnet? Danke! Geändert von laubori (02.02.2014 um 23:41 Uhr) |
|
03.02.2014, 21:51
| #4 |
| /// the machine /// TB-Ausbilder | OpenCandy und Search Protect von ConduitESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
04.02.2014, 12:01
| #5 |
| | OpenCandy und Search Protect von Conduit ESET Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=34be7f668476824c94b44a62bc0de8f7
# engine=16925
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-04 12:06:28
# local_time=2014-02-04 01:06:28 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7600 NT
# compatibility_mode=5893 16776574 100 94 165428 143878059 0 0
# scanned=473518
# found=0
# cleaned=0
# scan_time=7621
Code:
ATTFilter Results of screen317's Security Check version 0.99.79 Windows 7 x64 (UAC is enabled) Out of date service pack!! Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Microsoft Security Essentials (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 51 Adobe Flash Player 12.0.0.43 Flash Player out of Date! Mozilla Firefox (26.0) ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials MSMpEng.exe Microsoft Security Essentials msseces.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by wupto (administrator) on WUPTO-PC on 04-02-2014 11:54:51
Running from C:\Users\wupto\Desktop
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\Plantronics\GameCom780\GameCom780.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Dropbox, Inc.) C:\Users\wupto\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Adobe Systems Incorporated) C:\Users\wupto\AppData\Local\Temp\Creative Cloud Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncV1\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Akamai Technologies, Inc.) C:\Users\wupto\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\wupto\AppData\Local\Akamai\netsession_win.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
() C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7743008 2009-04-27] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-04-27] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [GamecomSound] - C:\Program Files\Plantronics\GameCom780\GameCom780.exe [777448 2011-12-01] ()
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2014-02-02] (Adobe Systems Incorporated)
HKU\S-1-5-21-1998335624-851730918-2200616401-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20728480 2014-01-14] (Skype Technologies S.A.)
HKU\S-1-5-21-1998335624-851730918-2200616401-1000\...\Run: [Akamai NetSession Interface] - C:\Users\wupto\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
Startup: C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\wupto\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.youtube.com/feed/subscriptions|https://mail.google.com/mail/u/0/?hl=de&shva=1#inbox|hxxp://www.deviantart.com/|hxxp://www.rockpapershotgun.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Magic Actions for YouTube™ - C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default\Extensions\jid0-UVAeBCfd34Kk5usS8A1CBiobvM8@jetpack.xpi [2014-02-02]
FF Extension: Adblock Plus - C:\Users\wupto\AppData\Roaming\Mozilla\Firefox\Profiles\x46msonk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-02]
==================== Services (Whitelisted) =================
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 mi-raysat_3dsmax2014_64; C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe [86016 2011-09-15] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [621336 2013-12-04] (Wacom Technology, Corp.)
==================== Drivers (Whitelisted) ====================
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1327104 2011-11-05] (C-Media Electronics Inc)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-04 11:54 - 2014-02-04 11:54 - 00011237 _____ () C:\Users\wupto\Desktop\FRST.txt
2014-02-04 11:49 - 2014-02-04 11:49 - 00987425 _____ () C:\Users\wupto\Desktop\SecurityCheck.exe
2014-02-04 01:09 - 2014-02-04 01:09 - 00000000 ____D () C:\Users\wupto\Documents\Inventor Server x64 3dsMax
2014-02-04 00:58 - 2014-02-04 00:58 - 00000000 ____D () C:\Program Files (x86)\Autodesk
2014-02-04 00:30 - 2014-02-04 00:51 - 00001966 _____ () C:\Users\Public\Desktop\3ds Max 2014.lnk
2014-02-04 00:30 - 2014-02-04 00:30 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared
2014-02-04 00:22 - 2014-02-04 00:22 - 00000000 ____D () C:\Users\wupto\Documents\3dsMax
2014-02-04 00:20 - 2014-02-04 01:05 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared
2014-02-04 00:20 - 2014-02-04 00:56 - 00000000 ____D () C:\Program Files\Autodesk
2014-02-03 22:45 - 2014-02-03 22:45 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-03 22:43 - 2014-02-03 22:44 - 02347384 _____ (ESET) C:\Users\wupto\Downloads\esetsmartinstaller_enu.exe
2014-02-03 21:13 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-02-03 21:13 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-02-03 21:13 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-02-03 21:13 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-02-03 21:13 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-02-03 21:13 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-02-03 21:13 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-02-03 21:13 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-02-03 21:13 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-02-03 21:13 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-02-03 21:13 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-02-03 21:13 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-02-03 21:13 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-02-03 21:13 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-02-03 21:13 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-02-03 21:13 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-02-03 21:13 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-02-03 21:13 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-02-03 21:13 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-02-03 21:13 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-02-03 21:13 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-02-03 21:13 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-02-03 21:13 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-02-03 21:13 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-02-03 21:13 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-02-03 21:13 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-02-03 21:13 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-02-03 21:13 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-02-03 21:13 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-02-03 21:13 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-02-03 21:13 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-02-03 21:13 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-02-03 21:13 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-02-03 21:13 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-02-03 21:13 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-02-03 21:13 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-02-03 21:13 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-02-03 21:13 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-02-03 21:13 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-02-03 21:13 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-02-03 21:13 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-02-03 21:13 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-02-03 21:13 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-02-03 21:13 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-02-03 21:13 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-02-03 21:13 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-02-03 21:13 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-02-03 21:13 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-02-03 21:13 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-02-03 21:13 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-02-03 21:13 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-02-03 21:13 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-02-03 21:13 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-02-03 21:13 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-02-03 21:13 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-02-03 21:13 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-02-03 21:13 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-02-03 21:13 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-02-03 21:13 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-02-03 21:13 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-02-03 21:13 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-02-03 21:13 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-02-03 21:13 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-02-03 21:13 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-02-03 21:13 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-02-03 21:13 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-02-03 21:13 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-02-03 21:13 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-02-03 21:13 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-02-03 21:13 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-02-03 21:13 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-02-03 21:13 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-02-03 21:13 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-02-03 21:13 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-02-03 21:13 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-02-03 21:13 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-02-03 21:12 - 2014-02-03 21:12 - 00010009 _____ () C:\Windows\DirectX.log
2014-02-03 21:12 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-02-03 21:12 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-02-03 21:12 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-02-03 21:12 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-02-03 21:12 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-02-03 21:12 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-02-03 21:12 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-02-03 21:12 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-02-03 21:12 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-02-03 21:12 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-02-03 21:12 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-02-03 21:12 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-02-03 21:12 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-02-03 21:12 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-02-03 21:12 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-02-03 21:12 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-02-03 21:12 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-02-03 21:12 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-02-03 21:12 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-02-03 21:12 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-02-03 21:12 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-02-03 21:12 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-02-03 21:12 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-02-03 21:12 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-02-03 21:12 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-02-03 21:12 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-02-03 21:12 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-02-03 21:12 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-02-03 21:12 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-02-03 21:12 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-02-03 21:12 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-02-03 21:12 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-02-03 21:12 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-02-03 21:12 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-02-03 21:12 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-02-03 21:12 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-02-03 21:12 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-02-03 21:12 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-02-03 21:12 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-02-03 21:12 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-02-03 21:12 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-02-03 21:12 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-02-03 21:12 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-02-03 21:12 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-02-03 21:12 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-02-03 21:12 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-02-03 21:12 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-02-03 21:12 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-02-03 21:12 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-02-03 21:12 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-02-03 21:12 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-02-03 21:12 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-02-03 21:12 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-02-03 21:12 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-02-03 21:12 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-02-03 21:12 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-02-03 21:12 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-02-03 21:12 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-02-03 21:12 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-02-03 21:12 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-02-03 21:12 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-02-03 21:12 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-02-03 21:12 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-02-03 21:12 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-02-03 21:12 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-02-03 21:12 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-02-03 21:12 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-02-03 21:12 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-02-03 21:12 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-02-03 21:12 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-02-03 21:12 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-02-03 21:12 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-02-03 21:12 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-02-03 21:12 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-02-03 21:12 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-02-03 21:12 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-02-03 21:12 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-02-03 21:12 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-02-03 21:12 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-02-03 21:12 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-02-03 21:12 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-02-03 21:12 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-02-03 21:12 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-02-03 21:12 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-02-03 21:12 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-02-03 21:12 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-02-03 21:12 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-02-03 21:12 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-02-03 21:12 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-02-03 21:12 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-02-03 21:12 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-02-03 21:12 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-02-03 21:12 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-02-03 21:12 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-02-03 21:12 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-02-03 21:12 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-02-03 21:12 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-02-03 21:12 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-02-03 21:12 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-02-03 21:12 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-02-03 21:05 - 2014-02-03 21:05 - 00072288 _____ () C:\Users\wupto\Documents\chars.zip
2014-02-03 20:39 - 2014-02-04 01:18 - 00000000 ____D () C:\ProgramData\Autodesk
2014-02-03 20:39 - 2014-02-03 20:39 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Autodesk
2014-02-03 20:13 - 2014-02-03 20:14 - 00000000 ____D () C:\Users\wupto\AppData\Local\Akamai
2014-02-03 20:13 - 2014-02-03 20:13 - 00000000 ____D () C:\Autodesk
2014-02-03 20:11 - 2014-02-03 20:12 - 09873512 _____ () C:\Users\wupto\Downloads\Autodesk_3ds_Max_2014_EFGJKS_Win_64bit_wi_en-US_Setup.exe
2014-02-03 19:50 - 2014-02-03 19:50 - 00000000 ____D () C:\Users\wupto\AppData\Local\Autodesk
2014-02-03 17:34 - 2014-02-03 17:34 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-03 17:34 - 2014-02-03 17:34 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-03 17:34 - 2014-02-03 17:34 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-03 17:27 - 2014-02-03 17:28 - 04721920 _____ (Piriform Ltd) C:\Users\wupto\Downloads\ccsetup410.exe
2014-02-03 17:12 - 2014-02-03 17:12 - 00000132 _____ () C:\Users\wupto\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen
2014-02-03 04:53 - 2010-09-14 07:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2014-02-03 04:53 - 2010-09-14 07:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2014-02-03 04:31 - 2009-09-10 07:28 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-02-03 04:31 - 2009-09-10 06:52 - 00257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-02-03 04:03 - 2012-07-26 05:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-02-03 04:03 - 2012-07-26 05:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-02-03 04:03 - 2012-07-26 03:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-02-03 04:03 - 2012-06-02 15:35 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-02-03 03:48 - 2014-02-03 03:48 - 00000000 ____D () C:\Users\wupto\Documents\my games
2014-02-03 03:42 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-02-03 03:40 - 2014-02-03 03:40 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-03 03:40 - 2014-02-03 03:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-03 03:40 - 2014-02-03 03:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-03 03:40 - 2014-02-03 03:40 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-03 03:40 - 2014-02-03 03:40 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-03 03:40 - 2014-02-03 03:40 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-03 03:40 - 2014-02-03 03:40 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-02-03 03:40 - 2014-02-03 03:40 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-03 03:40 - 2014-02-03 03:40 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-02-03 03:40 - 2014-02-03 03:40 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-02-03 03:40 - 2014-02-03 03:40 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-02-03 03:40 - 2014-02-03 03:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-03 03:20 - 2012-12-16 17:52 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-02-03 03:20 - 2012-12-16 15:40 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-02-03 03:20 - 2012-12-16 15:25 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-02-03 03:20 - 2012-12-16 15:25 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-02-03 03:20 - 2009-10-19 15:46 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-02-03 03:20 - 2009-10-19 15:10 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-02-03 03:19 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-02-03 03:19 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-02-03 03:19 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-02-03 03:19 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-02-03 03:19 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-02-03 03:19 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-02-03 03:19 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-02-03 03:19 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-02-03 03:08 - 2012-03-01 07:54 - 00022896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-02-03 03:08 - 2012-03-01 07:40 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-02-03 03:08 - 2012-03-01 07:35 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-02-03 03:08 - 2012-03-01 06:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-02-03 03:08 - 2012-03-01 06:40 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-02-03 03:01 - 2010-03-04 05:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-02-03 00:37 - 2014-02-03 00:38 - 13587390 _____ () C:\Users\wupto\Downloads\my_brush_set_by_gimaldinov-d4hkgw0.zip
2014-02-02 23:18 - 2014-02-02 23:19 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Notepad++
2014-02-02 23:18 - 2014-02-02 23:18 - 00001053 _____ () C:\Users\wupto\Desktop\Notepad++.lnk
2014-02-02 23:18 - 2014-02-02 23:18 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-02-02 23:18 - 2014-02-02 23:18 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-02-02 23:15 - 2014-02-02 23:16 - 07598942 _____ () C:\Users\wupto\Downloads\npp.6.5.3.Installer.exe
2014-02-02 22:55 - 2014-02-02 22:55 - 00000000 ____D () C:\Windows\ERUNT
2014-02-02 22:54 - 2014-02-02 22:54 - 01037068 _____ (Thisisu) C:\Users\wupto\Desktop\JRT.exe
2014-02-02 22:42 - 2014-02-02 22:42 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\WTablet
2014-02-02 22:39 - 2014-02-02 22:40 - 00000000 ____D () C:\AdwCleaner
2014-02-02 22:37 - 2014-02-02 23:03 - 00072396 _____ () C:\Users\wupto\Desktop\reply.txt
2014-02-02 22:36 - 2014-02-02 22:36 - 01166132 _____ () C:\Users\wupto\Desktop\adwcleaner.exe
2014-02-02 20:41 - 2014-02-02 20:41 - 00380416 _____ () C:\Users\wupto\Downloads\Gmer-19357.exe
2014-02-02 20:34 - 2014-02-04 11:54 - 00000000 ____D () C:\FRST
2014-02-02 20:24 - 2014-02-02 20:25 - 02080256 _____ (Farbar) C:\Users\wupto\Desktop\FRST64.exe
2014-02-02 20:22 - 2014-02-02 20:22 - 00050477 _____ () C:\Users\wupto\Desktop\Defogger.exe
2014-02-02 20:22 - 2014-02-02 20:22 - 00000000 _____ () C:\Users\wupto\defogger_reenable
2014-02-02 19:48 - 2014-02-02 19:48 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Malwarebytes
2014-02-02 19:47 - 2014-02-02 19:47 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-02 19:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-02 19:46 - 2014-02-03 17:36 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\uTorrent
2014-02-02 19:45 - 2014-02-02 19:46 - 01307736 _____ (BitTorrent Inc.) C:\Users\wupto\Downloads\utorrent.exe
2014-02-02 19:43 - 2014-02-02 19:47 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\wupto\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-02 19:42 - 2014-02-02 19:42 - 00000000 ____D () C:\Users\Public\Documents\ZBrushData
2014-02-02 19:35 - 2014-02-02 19:35 - 00001704 _____ () C:\Users\wupto\Desktop\Photoshop.lnk
2014-02-02 18:47 - 2014-02-02 19:12 - 00000000 ____D () C:\Program Files\Adobe
2014-02-02 18:43 - 2014-02-02 19:11 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-02-02 17:45 - 2014-02-02 17:45 - 00000000 ____D () C:\Users\wupto\Documents\game of thrones
2014-02-02 17:16 - 2014-02-02 17:16 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\.minecraft
2014-02-02 17:13 - 2014-02-03 20:07 - 00001297 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2014-02-02 17:11 - 2014-02-02 19:13 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-02 17:08 - 2014-02-02 17:08 - 00000000 ____D () C:\Users\wupto\AppData\Local\divinity 2
2014-02-02 17:02 - 2014-02-02 17:01 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-02-02 17:02 - 2014-02-02 17:01 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-02 17:02 - 2014-02-02 17:01 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-02 17:02 - 2014-02-02 17:01 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-02 17:01 - 2014-02-02 17:01 - 00000000 ____D () C:\Program Files\Java
2014-02-02 16:56 - 2014-02-02 19:49 - 00000000 ____D () C:\Users\wupto\Desktop\Minecraft
2014-02-02 16:54 - 2014-02-02 16:54 - 02844536 _____ (Adobe Systems Incorporated) C:\Users\wupto\Downloads\CreativeCloudSet-Up.exe
2014-02-02 16:53 - 2014-02-02 16:53 - 00001001 _____ () C:\Users\wupto\Desktop\Dropbox.lnk
2014-02-02 16:52 - 2014-02-02 16:53 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\DropboxMaster
2014-02-02 16:52 - 2014-02-02 16:52 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-02 16:48 - 2014-02-03 19:29 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Dropbox
2014-02-02 16:47 - 2014-02-02 17:06 - 00000000 ____D () C:\Users\wupto\Downloads\old
2014-02-02 16:47 - 2014-02-02 16:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\ftblauncher
2014-02-02 16:42 - 2014-02-02 16:42 - 00000000 ____D () C:\Users\wupto\Documents\nbgi
2014-02-02 16:40 - 2014-02-02 16:40 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Subversion
2014-02-02 16:38 - 2014-02-02 16:39 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\GameMaker-Studio
2014-02-02 16:38 - 2014-02-02 16:38 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV3
2014-02-02 16:37 - 2014-02-02 16:37 - 00000000 ____D () C:\Users\wupto\AppData\Local\YoYo_Games_Ltd
2014-02-02 16:35 - 2014-02-02 16:43 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV4
2014-02-02 16:35 - 2014-02-02 16:41 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameMaker-Studio 1.2
2014-02-02 16:35 - 2014-02-02 16:35 - 00001850 _____ () C:\Users\wupto\Desktop\Game Maker.lnk
2014-02-02 16:34 - 2014-02-03 17:13 - 00000673 _____ () C:\Users\wupto\Desktop\3D Coat.lnk
2014-02-02 16:34 - 2014-02-02 16:41 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3d-Coat-V4
2014-02-02 16:34 - 2014-02-02 16:41 - 00000000 ____D () C:\Users\wupto\AppData\Local\GameMaker-Studio
2014-02-02 16:34 - 2014-02-02 16:35 - 00000000 ____D () C:\Users\wupto\GameMaker-Studio 1.2
2014-02-02 16:34 - 2014-02-02 16:35 - 00000000 ____D () C:\Program Files\3D-Coat-V4
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files\TabletPlugins
2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins
2014-02-02 15:55 - 2013-11-12 01:16 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys
2014-02-02 15:54 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files\Tablet
2014-02-02 15:54 - 2013-12-04 17:35 - 01945880 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01938712 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01808152 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01805080 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01604376 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Tablet.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01596696 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01483032 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wintab32.dll
2014-02-02 15:54 - 2013-12-04 17:35 - 01479960 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll
2014-02-02 15:54 - 2013-11-12 01:16 - 00090424 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys
2014-02-02 15:54 - 2013-11-12 01:16 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys
2014-02-02 15:54 - 2012-12-11 23:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll
2014-02-02 15:54 - 2012-12-11 23:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll
2014-02-02 15:13 - 2014-02-02 15:13 - 00000000 ____D () C:\Users\wupto\Tor Browser
2014-02-02 14:35 - 2014-02-02 18:48 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-02 14:08 - 2014-02-03 06:35 - 00000000 ___RD () C:\Users\wupto\Desktop\Games
2014-02-02 13:22 - 2014-02-03 19:28 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-02 13:22 - 2014-02-02 19:17 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\NVIDIA
2014-02-02 13:22 - 2014-02-02 13:22 - 00000963 _____ () C:\Users\wupto\Desktop\Steam.lnk
2014-02-02 13:15 - 2014-02-02 13:23 - 00000001 _____ () C:\Users\wupto\random.dat
2014-02-02 13:15 - 2014-02-02 13:15 - 00000044 _____ () C:\Users\wupto\jagex_cl_runescape_LIVE.dat
2014-02-02 13:15 - 2014-02-02 13:15 - 00000000 ____D () C:\Users\wupto\jagexcache
2014-02-02 13:10 - 2014-02-02 13:51 - 00000000 ____D () C:\Users\wupto\Desktop\Programme
2014-02-02 12:58 - 2014-02-02 19:17 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Adobe
2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Macromedia
2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Local\Macromedia
2014-02-02 12:57 - 2014-02-04 11:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-02 12:57 - 2014-02-02 12:57 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-02 12:57 - 2014-02-02 12:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-02 12:57 - 2014-02-02 12:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\system32\Macromed
2014-02-02 12:56 - 2014-02-03 20:08 - 00000000 ____D () C:\Users\wupto\AppData\Local\Adobe
2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Sun
2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-02 12:37 - 2014-02-02 12:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-02 12:37 - 2014-02-02 12:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-02 12:37 - 2014-02-02 12:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-02 12:37 - 2014-02-02 12:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-02 12:37 - 2014-02-02 12:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-02 04:52 - 2012-11-09 06:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-02-02 04:52 - 2012-11-09 05:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-02-02 04:45 - 2014-02-02 04:50 - 00000000 ____D () C:\Users\wupto\Desktop\Programme (x86)
2014-02-02 04:34 - 2011-01-26 07:53 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-02-02 04:34 - 2011-01-26 07:53 - 00265088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-02-02 04:34 - 2011-01-26 07:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-02-02 04:34 - 2010-11-02 06:18 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2014-02-02 04:34 - 2010-11-02 06:12 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-02 04:34 - 2010-11-02 05:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll
2014-02-02 04:34 - 2010-06-26 06:31 - 01863680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2014-02-02 04:34 - 2010-06-26 06:14 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2014-02-02 04:34 - 2010-05-23 11:15 - 01619456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-02-02 04:34 - 2010-05-23 11:11 - 03181568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-02-02 04:34 - 2010-05-23 11:11 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2014-02-02 04:34 - 2010-05-23 09:37 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-02-02 04:34 - 2010-05-23 09:35 - 04068864 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-02-02 04:34 - 2010-05-23 09:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-02-02 04:34 - 2010-05-23 09:35 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-02-02 04:32 - 2012-11-09 06:34 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-02-02 04:32 - 2012-11-09 05:49 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-02-02 04:32 - 2011-06-16 06:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2014-02-02 04:32 - 2011-06-16 05:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2014-02-02 04:32 - 2011-06-15 10:58 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-02-02 04:32 - 2011-06-15 10:58 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-02-02 04:32 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-02-02 04:32 - 2011-06-15 10:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2014-02-02 04:32 - 2011-06-15 10:04 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-02-02 04:32 - 2011-06-15 10:04 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-02-02 04:32 - 2011-06-15 10:04 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-02-02 04:32 - 2011-06-15 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-02-02 04:32 - 2011-06-15 10:04 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-02-02 04:31 - 2013-02-12 16:42 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-02 04:31 - 2013-02-12 16:37 - 03138048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-02 04:31 - 2013-02-12 16:31 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-02-02 04:31 - 2013-02-12 16:13 - 02691072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-02 04:31 - 2013-02-12 16:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-02-02 04:31 - 2013-02-12 14:59 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-02 04:31 - 2012-03-03 07:29 - 01837568 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-02 04:31 - 2012-03-03 07:29 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-02-02 04:31 - 2012-03-03 07:29 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-02 04:31 - 2012-03-03 07:29 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-02 04:31 - 2012-03-03 07:29 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-02 04:31 - 2012-03-03 06:40 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-02 04:31 - 2012-03-03 06:40 - 01074176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-02-02 04:31 - 2012-03-03 06:40 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-02 04:31 - 2012-03-03 06:40 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-02-02 04:31 - 2012-03-03 06:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-02-02 04:31 - 2011-04-27 03:57 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2014-02-02 04:31 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-02-02 04:31 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-02-02 04:31 - 2010-03-05 08:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2014-02-02 04:31 - 2010-03-05 08:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2014-02-02 04:30 - 2010-12-23 07:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-02-02 04:30 - 2010-12-23 07:07 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-02-02 04:30 - 2010-12-23 07:02 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-02-02 04:30 - 2010-12-23 06:28 - 00850432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-02-02 04:30 - 2010-12-23 06:28 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-02-02 04:30 - 2010-12-23 06:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-02-02 04:30 - 2010-08-26 06:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2014-02-02 04:30 - 2010-08-26 05:39 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2014-02-02 04:29 - 2013-03-01 04:32 - 03150848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-02-02 04:29 - 2011-10-26 06:22 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-02-02 04:29 - 2011-10-26 06:22 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-02-02 04:29 - 2011-10-26 05:28 - 01328640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-02-02 04:29 - 2011-10-26 05:28 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-02-02 04:28 - 2012-01-04 10:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-02-02 04:28 - 2012-01-04 10:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2014-02-02 04:28 - 2011-11-17 08:12 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-02-02 04:28 - 2011-11-17 06:39 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-02-02 04:28 - 2011-07-09 03:44 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-02-02 04:28 - 2011-05-04 06:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-02-02 04:28 - 2011-05-04 06:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-02-02 04:28 - 2011-05-04 06:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-02-02 04:28 - 2011-05-04 06:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-02-02 04:28 - 2011-05-04 06:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-02-02 04:28 - 2011-05-04 06:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2014-02-02 04:28 - 2011-05-04 06:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-02-02 04:28 - 2011-05-04 06:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-02-02 04:28 - 2011-05-04 06:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-02-02 04:28 - 2011-05-04 05:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2014-02-02 04:28 - 2011-05-04 05:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2014-02-02 04:28 - 2011-05-04 05:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2014-02-02 04:28 - 2011-05-04 05:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2014-02-02 04:28 - 2011-05-04 05:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2014-02-02 04:28 - 2011-05-04 05:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2014-02-02 04:28 - 2011-05-04 05:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2014-02-02 04:28 - 2011-05-04 05:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2014-02-02 04:28 - 2011-05-04 05:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2014-02-02 04:28 - 2011-05-04 03:51 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-02-02 04:28 - 2011-05-04 03:51 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-02-02 04:28 - 2010-11-02 06:18 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2014-02-02 04:28 - 2010-11-02 06:17 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2014-02-02 04:28 - 2010-11-02 06:17 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2014-02-02 04:28 - 2010-11-02 06:16 - 01114624 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-02-02 04:28 - 2010-11-02 06:10 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2014-02-02 04:28 - 2010-11-02 06:10 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2014-02-02 04:28 - 2010-11-02 05:40 - 00496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll
2014-02-02 04:28 - 2010-11-02 05:40 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll
2014-02-02 04:28 - 2010-11-02 05:34 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2014-02-02 04:28 - 2010-11-02 05:34 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
2014-02-02 04:28 - 2010-06-29 06:39 - 02085376 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2014-02-02 04:28 - 2010-06-29 06:02 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2014-02-02 04:28 - 2010-05-05 08:37 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2014-02-02 04:28 - 2010-05-05 07:46 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2014-02-02 04:28 - 2010-01-19 10:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-02 04:28 - 2010-01-19 10:05 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-02 04:28 - 2010-01-19 10:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-02 04:28 - 2010-01-19 10:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-02 04:28 - 2010-01-19 10:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-02 04:28 - 2010-01-19 10:00 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-02 04:28 - 2010-01-19 10:00 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-02 04:28 - 2010-01-19 10:00 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-02 04:28 - 2010-01-19 00:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-02 04:28 - 2010-01-19 00:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-02 04:28 - 2010-01-19 00:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-02 04:28 - 2010-01-19 00:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-02 04:28 - 2010-01-19 00:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-02 04:28 - 2010-01-19 00:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-02 04:28 - 2010-01-19 00:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-02 04:28 - 2010-01-19 00:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-02 04:28 - 2009-09-03 08:36 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2014-02-02 04:28 - 2009-09-03 08:04 - 01320960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2014-02-02 04:27 - 2013-04-12 15:36 - 01653096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-02-02 04:27 - 2012-01-03 07:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-02-02 04:27 - 2012-01-03 06:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2014-02-02 04:27 - 2011-02-24 07:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-02 04:27 - 2011-02-24 06:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-02-02 04:27 - 2010-08-04 08:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2014-02-02 04:26 - 2013-02-12 15:02 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-02-02 04:26 - 2012-08-02 18:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-02 04:26 - 2012-08-02 18:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-02-02 04:26 - 2012-06-09 06:30 - 14165504 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-02-02 04:26 - 2012-06-09 05:46 - 12868608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-02-02 04:26 - 2012-06-02 06:38 - 00152432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-02-02 04:26 - 2012-06-02 06:38 - 00095088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-02-02 04:26 - 2012-06-02 06:37 - 00459216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-02-02 04:26 - 2012-06-02 06:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-02-02 04:26 - 2012-06-02 05:48 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-02-02 04:26 - 2012-06-02 05:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-02-02 04:26 - 2012-06-02 05:42 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-02-02 04:26 - 2012-04-26 06:34 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-02-02 04:26 - 2012-04-26 06:34 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-02-02 04:26 - 2012-04-26 06:28 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-02-02 04:26 - 2011-11-17 08:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-02-02 04:26 - 2011-11-17 08:11 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-02-02 04:26 - 2011-11-17 08:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-02-02 04:26 - 2011-11-17 08:08 - 01446912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-02-02 04:26 - 2011-11-17 08:05 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-02-02 04:26 - 2011-03-12 13:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-02 04:26 - 2011-03-12 12:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-02-02 04:26 - 2011-03-11 07:19 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-02-02 04:26 - 2011-03-11 07:19 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-02-02 04:26 - 2011-03-11 06:40 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-02-02 04:26 - 2011-03-11 06:40 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-02-02 04:26 - 2010-12-21 07:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2014-02-02 04:26 - 2010-12-21 07:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-02-02 04:26 - 2010-12-21 07:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-02-02 04:26 - 2010-12-21 07:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2014-02-02 04:26 - 2010-12-21 07:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2014-02-02 04:26 - 2010-12-21 07:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
|
|
04.02.2014, 12:02
| #6 |
| | OpenCandy und Search Protect von Conduit FRST (part 2) Code:
ATTFilter 2014-02-02 04:26 - 2010-12-21 07:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-02-02 04:26 - 2010-12-21 06:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2014-02-02 04:26 - 2010-12-21 06:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-02-02 04:26 - 2010-12-21 06:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll 2014-02-02 04:26 - 2010-12-21 06:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll 2014-02-02 04:26 - 2010-12-21 06:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll 2014-02-02 04:26 - 2010-12-21 06:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-02-02 04:26 - 2010-08-21 07:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-02-02 04:26 - 2010-08-21 06:33 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-02-02 04:26 - 2010-06-19 07:53 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll 2014-02-02 04:26 - 2010-06-19 07:23 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll 2014-02-02 04:26 - 2009-10-31 07:34 - 02870272 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-02-02 04:26 - 2009-10-31 06:45 - 02614272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2014-02-02 04:26 - 2009-10-28 07:24 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-02-02 04:25 - 2014-02-02 04:26 - 00000000 ____D () C:\Users\wupto\Virenbekämpfung 2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\shelper 2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\Schule 2014-02-02 04:23 - 2014-02-02 04:24 - 00000000 ____D () C:\Users\wupto\Musik 2014-02-02 04:23 - 2010-08-21 07:29 - 00558592 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-02-02 04:17 - 2012-11-02 06:30 - 02001408 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-02-02 04:17 - 2012-11-02 06:30 - 01880064 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-02 04:17 - 2012-11-02 05:50 - 01388544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-02-02 04:17 - 2012-11-02 05:50 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-02-02 04:12 - 2011-04-22 21:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-02-02 04:11 - 2014-02-02 04:14 - 00000000 ____D () C:\Users\wupto\Filme 2014-02-02 04:11 - 2012-05-02 06:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-02-02 04:11 - 2011-03-03 07:17 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2014-02-02 04:11 - 2011-03-03 07:17 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2014-02-02 04:11 - 2011-03-03 07:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2014-02-02 04:11 - 2011-03-03 06:29 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2014-02-02 04:11 - 2011-03-03 06:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe 2014-02-02 04:11 - 2010-07-29 07:30 - 00082944 _____ (Radius Inc.) C:\Windows\SysWOW64\iccvid.dll 2014-02-02 04:04 - 2013-01-04 06:37 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-02-02 04:04 - 2013-01-04 06:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-02-02 04:04 - 2013-01-04 06:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-02-02 04:04 - 2013-01-04 06:36 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-02-02 04:04 - 2013-01-04 06:33 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-02-02 04:04 - 2013-01-04 06:30 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-02-02 04:04 - 2013-01-04 06:30 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-02-02 04:04 - 2013-01-04 06:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 06:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:51 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-02-02 04:04 - 2013-01-04 05:51 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-02-02 04:04 - 2013-01-04 05:51 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 04:19 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-02-02 04:04 - 2013-01-04 03:48 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-02-02 04:04 - 2013-01-04 03:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-02-02 04:04 - 2013-01-04 03:48 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-02-02 04:04 - 2013-01-04 03:48 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-02-02 04:04 - 2013-01-04 03:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 03:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 03:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-02-02 04:04 - 2013-01-04 03:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-02-02 04:04 - 2012-11-20 06:55 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-02-02 04:04 - 2012-11-20 06:10 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-02-02 04:04 - 2012-11-02 06:27 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-02-02 04:04 - 2012-11-02 05:48 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2014-02-02 04:04 - 2012-08-24 19:05 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-02-02 04:04 - 2012-08-24 18:10 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-02-02 04:04 - 2010-08-21 07:38 - 01024512 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2014-02-02 04:04 - 2010-08-21 06:36 - 00738816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll 2014-02-02 04:04 - 2009-12-19 10:50 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll 2014-02-02 04:04 - 2009-12-19 10:47 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll 2014-02-02 04:04 - 2009-12-19 10:47 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll 2014-02-02 04:04 - 2009-12-19 10:47 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll 2014-02-02 04:04 - 2009-12-19 10:46 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll 2014-02-02 04:04 - 2009-12-19 10:02 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\avifil32.dll 2014-02-02 04:04 - 2009-12-19 10:02 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciavi32.dll 2014-02-02 04:04 - 2009-12-19 10:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iyuv_32.dll 2014-02-02 04:04 - 2009-12-19 10:02 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvidc32.dll 2014-02-02 04:04 - 2009-12-19 10:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msyuv.dll 2014-02-02 04:04 - 2009-12-19 10:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrle32.dll 2014-02-02 04:04 - 2009-12-19 10:02 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsbyuv.dll 2014-02-02 04:03 - 2014-02-03 19:29 - 00000000 ___RD () C:\Users\wupto\Dropbox 2014-02-02 04:03 - 2013-01-04 06:41 - 01893224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-02-02 04:03 - 2013-01-04 06:40 - 00287576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-02-02 04:03 - 2012-11-22 11:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-02-02 04:03 - 2012-11-22 10:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-02-02 04:03 - 2012-09-06 18:38 - 00295792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-02-02 04:03 - 2011-04-29 04:13 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-02-02 04:03 - 2011-04-29 04:12 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-02-02 04:03 - 2011-04-29 04:12 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-02-02 04:00 - 2012-12-07 06:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-02-02 04:00 - 2012-12-07 06:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-02-02 04:00 - 2012-12-07 06:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2014-02-02 04:00 - 2012-12-07 05:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2014-02-02 04:00 - 2012-12-07 04:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2014-02-02 04:00 - 2012-12-07 04:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2014-02-02 04:00 - 2012-12-07 04:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2014-02-02 03:58 - 2014-02-02 03:58 - 00000000 ____D () C:\Users\wupto\Dokumente 2014-02-02 03:37 - 2014-02-02 03:58 - 00000000 ____D () C:\Users\wupto\Bilder 2014-02-02 03:36 - 2014-02-02 15:18 - 00000000 ____D () C:\Users\wupto\Desktop\TO DO 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\website 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\PA 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\adobeshit 2014-02-02 03:36 - 2013-09-28 15:53 - 00000037 _____ () C:\Users\wupto\cgpeers com.txt 2014-02-02 03:34 - 2014-02-03 21:15 - 00000000 ____D () C:\Users\wupto\Desktop\Hammerwatch Art 2014-02-02 03:34 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\Modelling 2014-02-02 03:28 - 2011-08-17 06:32 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2014-02-02 03:28 - 2011-08-17 06:27 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2014-02-02 03:28 - 2011-08-17 06:27 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2014-02-02 03:28 - 2011-08-17 06:27 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2014-02-02 03:28 - 2011-08-17 06:27 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2014-02-02 03:28 - 2011-08-17 05:26 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2014-02-02 03:28 - 2011-08-17 05:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSNP.ax 2014-02-02 03:28 - 2011-08-17 05:22 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2014-02-02 03:28 - 2011-08-17 05:22 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mpeg2Data.ax 2014-02-02 03:28 - 2011-08-17 05:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSDvbNP.ax 2014-02-02 03:24 - 2012-04-28 04:50 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-02-02 03:23 - 2014-02-02 03:34 - 00000000 ____D () C:\Users\wupto\Desktop\Games & so 2014-02-02 03:23 - 2012-11-30 00:21 - 00420032 _____ () C:\Windows\SysWOW64\locale.nls 2014-02-02 03:23 - 2012-11-30 00:19 - 00420032 _____ () C:\Windows\system32\locale.nls 2014-02-02 03:23 - 2012-08-11 01:53 - 00714752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-02-02 03:23 - 2012-08-11 00:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-02-02 03:23 - 2012-04-07 13:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-02-02 03:23 - 2012-04-07 12:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-02-02 03:23 - 2012-03-17 08:55 - 00075632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2014-02-02 03:23 - 2011-12-28 04:59 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-02-02 03:22 - 2012-09-25 23:39 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2014-02-02 03:22 - 2012-09-25 22:55 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2014-02-02 03:22 - 2011-02-05 13:41 - 00640896 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2014-02-02 03:22 - 2011-02-05 13:41 - 00556928 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2014-02-02 03:22 - 2011-02-05 13:41 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2014-02-02 03:22 - 2011-02-05 13:41 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2014-02-02 03:22 - 2011-02-05 13:41 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2014-02-02 03:22 - 2011-02-05 13:39 - 00603976 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2014-02-02 03:22 - 2011-02-05 13:39 - 00518160 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2014-02-02 03:22 - 2010-08-31 05:32 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll 2014-02-02 03:22 - 2010-08-31 05:32 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll 2014-02-02 03:20 - 2012-07-04 23:04 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2014-02-02 03:20 - 2012-07-04 23:01 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2014-02-02 03:20 - 2012-07-04 23:01 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2014-02-02 03:20 - 2012-07-04 22:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2014-02-02 03:20 - 2012-07-04 22:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2014-02-02 03:20 - 2011-05-24 12:21 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2014-02-02 03:20 - 2011-05-24 11:34 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2014-02-02 03:20 - 2011-05-24 11:34 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2014-02-02 03:20 - 2011-05-24 11:34 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2014-02-02 03:20 - 2011-05-24 11:32 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2014-02-02 03:20 - 2010-12-18 07:08 - 01097216 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-02-02 03:20 - 2010-12-18 06:26 - 01034240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-02-02 03:20 - 2009-08-29 08:50 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll 2014-02-02 03:20 - 2009-08-29 07:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msasn1.dll 2014-02-02 03:19 - 2013-01-24 06:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-02-02 03:19 - 2012-05-14 06:20 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-02-02 03:19 - 2012-05-05 09:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-02-02 03:19 - 2012-05-05 08:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2014-02-02 03:19 - 2011-12-16 09:42 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2014-02-02 03:19 - 2011-12-16 08:59 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2014-02-02 03:19 - 2011-10-15 07:25 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2014-02-02 03:19 - 2011-10-15 06:48 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2014-02-02 03:19 - 2011-08-27 06:40 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-02-02 03:19 - 2011-08-27 06:40 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2014-02-02 03:19 - 2011-08-27 05:43 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-02-02 03:19 - 2011-08-27 05:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2014-02-02 03:19 - 2011-05-03 06:21 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2014-02-02 03:19 - 2011-05-03 05:50 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2014-02-02 03:19 - 2011-02-23 06:15 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2014-02-02 03:19 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2014-02-02 03:19 - 2011-02-18 06:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2014-02-02 03:19 - 2011-02-12 07:14 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2014-02-02 03:19 - 2010-10-16 06:23 - 00112000 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-02-02 03:19 - 2010-09-01 06:21 - 14627840 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-02-02 03:19 - 2010-09-01 06:12 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-02-02 03:19 - 2010-09-01 05:29 - 11406848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-02-02 03:19 - 2010-09-01 05:23 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-02-02 03:18 - 2014-02-02 03:23 - 00000000 ____D () C:\Users\wupto\Desktop\Game Maker Games 2014-02-02 03:18 - 2013-03-19 07:19 - 05497688 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-02-02 03:18 - 2013-03-19 06:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-02-02 03:18 - 2013-03-19 06:06 - 03958120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-02-02 03:18 - 2013-03-19 06:06 - 03902312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-02-02 03:18 - 2013-03-19 05:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-02-02 03:18 - 2013-03-19 04:19 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-02-02 03:17 - 2014-02-04 11:55 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Skype 2014-02-02 03:17 - 2014-02-02 03:17 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\Users\wupto\AppData\Local\Skype 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\ProgramData\Skype 2014-02-02 03:17 - 2011-11-17 08:14 - 01739160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-02-02 03:17 - 2011-11-17 06:41 - 01292592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-02-02 03:17 - 2010-10-16 06:17 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2014-02-02 03:17 - 2010-10-16 05:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll 2014-02-02 03:16 - 2010-08-27 07:14 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2014-02-02 03:16 - 2010-08-27 06:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll 2014-02-02 03:14 - 2014-02-02 19:21 - 00000000 ____D () C:\Users\wupto\Desktop\ART 2014-02-02 03:14 - 2014-02-02 03:18 - 00000000 ____D () C:\Users\wupto\Desktop\Design Projects 2014-02-02 03:14 - 2012-06-02 06:25 - 01462784 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-02-02 03:14 - 2012-06-02 06:25 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-02-02 03:14 - 2012-06-02 06:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-02-02 03:14 - 2012-06-02 05:45 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-02-02 03:14 - 2012-06-02 05:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2014-02-02 03:14 - 2012-06-02 05:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2014-02-02 03:13 - 2014-02-03 18:20 - 00000000 ____D () C:\Users\wupto\Desktop\random 2014-02-02 03:13 - 2014-02-01 17:10 - 00000724 _____ () C:\Users\wupto\Desktop\films u should watch.txt 2014-02-02 03:10 - 2014-02-03 06:32 - 00058016 _____ () C:\Users\wupto\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-02 03:09 - 2014-02-02 03:09 - 00002154 _____ () C:\Windows\epplauncher.mif 2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-02-02 03:08 - 2010-04-09 12:06 - 00374664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-02-02 03:02 - 2011-11-19 16:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-02-02 03:02 - 2011-11-19 15:06 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-02-02 02:52 - 2014-02-02 02:52 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA Corporation 2014-02-02 02:52 - 2014-01-21 03:53 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-02-02 02:52 - 2014-01-21 03:53 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-02-02 02:52 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-02-02 02:51 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-02-02 02:51 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-02-02 02:50 - 2014-02-02 02:50 - 00000534 _____ () C:\Windows\PLTGC.ini.imi 2014-02-02 02:50 - 2014-02-02 02:50 - 00000402 _____ () C:\Windows\PLTGC.ini.cfl 2014-02-02 02:50 - 2014-02-02 02:50 - 00000132 _____ () C:\Windows\system\Dlap.pfx 2014-02-02 02:50 - 2014-02-02 02:50 - 00000000 ____D () C:\Program Files\Plantronics 2014-02-02 02:50 - 2011-12-01 21:18 - 00813288 ____N () C:\Windows\system32\PLTGC.exe 2014-02-02 02:50 - 2011-11-23 19:08 - 00003489 ____N () C:\Windows\PLTGC.ini.cfg 2014-02-02 02:50 - 2011-11-05 01:47 - 01327104 _____ (C-Media Electronics Inc) C:\Windows\system32\Drivers\PLTGC.sys 2014-02-02 02:50 - 2011-01-27 16:02 - 00003072 ____N () C:\Windows\Thumbs.db 2014-02-02 02:50 - 2009-08-20 10:00 - 00359424 ____N () C:\Windows\system32\CmiInstallResAll64.dll 2014-02-02 02:50 - 2004-04-14 20:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\fltrPLTGC.dll 2014-02-02 02:49 - 2006-10-06 23:45 - 00524768 ____R (Microsoft Corporation) C:\Windows\difxapi.dll 2014-02-02 02:45 - 2014-02-02 02:49 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA 2014-02-02 02:45 - 2014-02-02 02:45 - 00001347 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-02-02 02:45 - 2014-02-02 02:45 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-02-02 02:44 - 2014-02-03 06:28 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-02 02:43 - 2014-02-02 02:52 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-02-02 02:43 - 2014-02-02 02:52 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-02-02 02:43 - 2014-01-19 08:33 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-02-02 02:43 - 2013-12-19 21:33 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-02-02 02:43 - 2013-12-19 21:33 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-02-02 02:43 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-02-02 02:43 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-02-02 02:43 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-02-02 02:43 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-02-02 02:43 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-02-02 02:43 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-02-02 02:43 - 2013-12-19 06:01 - 03539040 _____ () C:\Windows\system32\nvcoproc.bin 2014-02-02 02:42 - 2014-02-03 04:52 - 01588762 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-02-02 02:39 - 2009-11-25 20:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2014-02-02 02:39 - 2009-11-25 20:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe 2014-02-02 02:39 - 2009-11-25 20:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll 2014-02-02 02:39 - 2009-11-25 20:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2014-02-02 02:38 - 2014-02-02 02:52 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-02-02 02:38 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-02-02 02:38 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00357152 _____ () C:\Windows\system32\NvIFROpenGL.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00314656 _____ () C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-02-02 02:38 - 2013-12-19 21:33 - 00023754 _____ () C:\Windows\system32\nvinfo.pb 2014-02-02 02:38 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-02-02 02:38 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-02-02 02:38 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-02-02 02:33 - 2012-02-15 07:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-02-02 02:33 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-02-02 02:33 - 2012-02-15 05:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-02-02 02:33 - 2010-01-09 08:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll 2014-02-02 02:33 - 2010-01-09 07:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll 2014-02-02 02:29 - 2014-02-02 02:29 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Local\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-02 02:29 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-02-02 02:29 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-02-02 02:29 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-02-02 02:29 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-02-02 02:28 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-02-02 02:28 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-02-02 02:28 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-02-02 02:28 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-02-02 02:28 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-02-02 02:23 - 2014-02-02 02:23 - 00000000 ____D () C:\Program Files\Intel 2014-02-02 02:23 - 2009-06-22 12:05 - 00273072 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1k62x64.sys 2014-02-02 02:23 - 2009-06-03 18:38 - 00078016 _____ (Intel Corporation) C:\Windows\system32\NicInstK.dll 2014-02-02 02:23 - 2009-05-26 11:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll 2014-02-02 02:23 - 2009-04-21 18:39 - 00072288 _____ (Intel Corporation) C:\Windows\system32\e1kmsg.dll 2014-02-02 02:23 - 2009-03-31 14:58 - 00342656 ____R (Intel Corporation) C:\Windows\system32\PROUnstl.exe 2014-02-02 02:23 - 2009-03-07 03:08 - 00003127 _____ () C:\Windows\system32\e1k62x64.din 2014-02-02 02:23 - 2006-01-12 15:52 - 00001904 ____N () C:\Windows\system32\SetupBD.din 2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Program Files\Realtek 2014-02-02 02:21 - 2008-04-30 09:48 - 00193536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-02-02 02:21 - 2007-07-25 10:34 - 00150528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-02-02 02:21 - 2007-05-17 12:26 - 00211376 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-02-02 02:21 - 2006-12-13 11:30 - 00513536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-02-02 02:20 - 2014-02-02 02:50 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-02-02 02:20 - 2014-02-02 02:21 - 00002014 _____ () C:\RHDSetup.log 2014-02-02 02:20 - 2014-02-02 02:21 - 00000206 _____ () C:\realtek.log 2014-02-02 02:20 - 2014-02-02 02:20 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-02-02 02:20 - 2009-04-27 20:50 - 01272352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-02-02 02:20 - 2009-04-27 20:50 - 00611360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-02-02 02:20 - 2009-04-27 20:50 - 00332320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-02-02 02:20 - 2009-04-27 20:49 - 01552416 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-02-02 02:20 - 2009-04-27 20:49 - 01163296 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-02-02 02:20 - 2009-04-27 20:49 - 00417824 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-02-02 02:20 - 2009-04-27 20:49 - 00149536 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-02-02 02:20 - 2009-04-27 20:49 - 00066080 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll 2014-02-02 02:20 - 2009-04-27 20:22 - 01766048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-02-02 02:20 - 2009-04-16 18:23 - 00540672 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2014-02-02 02:20 - 2009-04-16 11:13 - 00166400 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-02-02 02:20 - 2009-03-31 15:02 - 00108032 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-02-02 02:20 - 2009-03-09 06:32 - 00304640 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-02-02 02:20 - 2009-03-09 06:30 - 00304640 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-02-02 02:20 - 2009-02-12 18:14 - 00176640 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\FMAPO64.dll 2014-02-02 02:20 - 2008-11-09 12:57 - 00311296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Intel 2014-02-02 02:16 - 2009-07-08 16:34 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2014-02-02 02:15 - 2014-02-02 02:27 - 00000000 ____D () C:\TempEI4 2014-02-02 02:15 - 2014-02-02 02:15 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-02-02 02:12 - 2014-02-03 06:31 - 00001439 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-02 02:12 - 2014-02-03 06:31 - 00001405 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-02-02 02:12 - 2014-02-03 06:31 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-02 02:12 - 2014-02-03 06:31 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-02 02:12 - 2014-02-02 02:12 - 00000000 ____D () C:\Users\wupto\AppData\Local\VirtualStore 2014-02-02 02:11 - 2014-02-04 11:00 - 01121138 _____ () C:\Windows\WindowsUpdate.log 2014-02-02 02:11 - 2014-02-02 20:22 - 00000000 ____D () C:\Users\wupto 2014-02-02 02:11 - 2014-02-02 02:11 - 00000020 ___SH () C:\Users\wupto\ntuser.ini 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Netzwerkumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Lokale Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Eigene Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Druckumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 __SHD () C:\Recovery 2014-02-02 02:11 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-02-02 02:11 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-02-02 02:03 - 2014-02-03 17:36 - 00000000 ____D () C:\Windows\Panther ==================== One Month Modified Files and Folders ======= 2014-02-04 11:55 - 2014-02-04 11:54 - 00011237 _____ () C:\Users\wupto\Desktop\FRST.txt 2014-02-04 11:55 - 2014-02-02 03:17 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Skype 2014-02-04 11:54 - 2014-02-02 20:34 - 00000000 ____D () C:\FRST 2014-02-04 11:49 - 2014-02-04 11:49 - 00987425 _____ () C:\Users\wupto\Desktop\SecurityCheck.exe 2014-02-04 11:11 - 2014-02-02 12:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-04 11:00 - 2014-02-02 02:11 - 01121138 _____ () C:\Windows\WindowsUpdate.log 2014-02-04 10:29 - 2009-07-14 05:45 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-04 10:29 - 2009-07-14 05:45 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-04 01:18 - 2014-02-03 20:39 - 00000000 ____D () C:\ProgramData\Autodesk 2014-02-04 01:09 - 2014-02-04 01:09 - 00000000 ____D () C:\Users\wupto\Documents\Inventor Server x64 3dsMax 2014-02-04 01:05 - 2014-02-04 00:20 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared 2014-02-04 00:58 - 2014-02-04 00:58 - 00000000 ____D () C:\Program Files (x86)\Autodesk 2014-02-04 00:56 - 2014-02-04 00:20 - 00000000 ____D () C:\Program Files\Autodesk 2014-02-04 00:51 - 2014-02-04 00:30 - 00001966 _____ () C:\Users\Public\Desktop\3ds Max 2014.lnk 2014-02-04 00:49 - 2009-07-14 03:34 - 00017570 _____ () C:\Windows\system32\Drivers\etc\services 2014-02-04 00:30 - 2014-02-04 00:30 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared 2014-02-04 00:22 - 2014-02-04 00:22 - 00000000 ____D () C:\Users\wupto\Documents\3dsMax 2014-02-03 22:45 - 2014-02-03 22:45 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-02-03 22:44 - 2014-02-03 22:43 - 02347384 _____ (ESET) C:\Users\wupto\Downloads\esetsmartinstaller_enu.exe 2014-02-03 21:15 - 2014-02-02 03:34 - 00000000 ____D () C:\Users\wupto\Desktop\Hammerwatch Art 2014-02-03 21:12 - 2014-02-03 21:12 - 00010009 _____ () C:\Windows\DirectX.log 2014-02-03 21:05 - 2014-02-03 21:05 - 00072288 _____ () C:\Users\wupto\Documents\chars.zip 2014-02-03 20:39 - 2014-02-03 20:39 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Autodesk 2014-02-03 20:14 - 2014-02-03 20:13 - 00000000 ____D () C:\Users\wupto\AppData\Local\Akamai 2014-02-03 20:13 - 2014-02-03 20:13 - 00000000 ____D () C:\Autodesk 2014-02-03 20:12 - 2014-02-03 20:11 - 09873512 _____ () C:\Users\wupto\Downloads\Autodesk_3ds_Max_2014_EFGJKS_Win_64bit_wi_en-US_Setup.exe 2014-02-03 20:08 - 2014-02-02 12:56 - 00000000 ____D () C:\Users\wupto\AppData\Local\Adobe 2014-02-03 20:07 - 2014-02-02 17:13 - 00001297 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2014-02-03 19:50 - 2014-02-03 19:50 - 00000000 ____D () C:\Users\wupto\AppData\Local\Autodesk 2014-02-03 19:29 - 2014-02-02 16:48 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Dropbox 2014-02-03 19:29 - 2014-02-02 04:03 - 00000000 ___RD () C:\Users\wupto\Dropbox 2014-02-03 19:28 - 2014-02-02 13:22 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-02-03 18:20 - 2014-02-02 03:13 - 00000000 ____D () C:\Users\wupto\Desktop\random 2014-02-03 17:36 - 2014-02-02 19:46 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\uTorrent 2014-02-03 17:36 - 2014-02-02 02:03 - 00000000 ____D () C:\Windows\Panther 2014-02-03 17:34 - 2014-02-03 17:34 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-02-03 17:34 - 2014-02-03 17:34 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-02-03 17:34 - 2014-02-03 17:34 - 00000000 ____D () C:\Program Files\CCleaner 2014-02-03 17:28 - 2014-02-03 17:27 - 04721920 _____ (Piriform Ltd) C:\Users\wupto\Downloads\ccsetup410.exe 2014-02-03 17:13 - 2014-02-02 16:34 - 00000673 _____ () C:\Users\wupto\Desktop\3D Coat.lnk 2014-02-03 17:12 - 2014-02-03 17:12 - 00000132 _____ () C:\Users\wupto\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen 2014-02-03 08:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-02-03 06:35 - 2014-02-02 14:08 - 00000000 ___RD () C:\Users\wupto\Desktop\Games 2014-02-03 06:32 - 2014-02-02 03:10 - 00058016 _____ () C:\Users\wupto\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-03 06:31 - 2014-02-02 02:12 - 00001439 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-03 06:31 - 2014-02-02 02:12 - 00001405 _____ () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-02-03 06:31 - 2014-02-02 02:12 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-03 06:31 - 2014-02-02 02:12 - 00000000 ___RD () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-03 06:29 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-03 06:28 - 2014-02-02 02:44 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-03 06:28 - 2009-07-14 05:45 - 04936888 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-02-03 05:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-02-03 05:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-02-03 05:15 - 2009-07-14 19:18 - 00000000 ____D () C:\Program Files\Windows Journal 2014-02-03 04:52 - 2014-02-02 02:42 - 01588762 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-02-03 04:52 - 2009-07-14 18:58 - 00696452 _____ () C:\Windows\system32\perfh007.dat 2014-02-03 04:52 - 2009-07-14 18:58 - 00147748 _____ () C:\Windows\system32\perfc007.dat 2014-02-03 04:52 - 2009-07-14 06:13 - 01588762 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-03 03:48 - 2014-02-03 03:48 - 00000000 ____D () C:\Users\wupto\Documents\my games 2014-02-03 03:40 - 2014-02-03 03:40 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-02-03 03:40 - 2014-02-03 03:40 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-02-03 03:40 - 2014-02-03 03:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-03 03:40 - 2014-02-03 03:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-03 03:40 - 2014-02-03 03:40 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-03 03:40 - 2014-02-03 03:40 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-03 03:40 - 2014-02-03 03:40 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-02-03 03:40 - 2014-02-03 03:40 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-02-03 03:40 - 2014-02-03 03:40 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-02-03 03:40 - 2014-02-03 03:40 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-02-03 03:40 - 2014-02-03 03:40 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-02-03 03:40 - 2014-02-03 03:40 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-02-03 03:40 - 2014-02-03 03:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-02-03 00:38 - 2014-02-03 00:37 - 13587390 _____ () C:\Users\wupto\Downloads\my_brush_set_by_gimaldinov-d4hkgw0.zip 2014-02-02 23:19 - 2014-02-02 23:18 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Notepad++ 2014-02-02 23:18 - 2014-02-02 23:18 - 00001053 _____ () C:\Users\wupto\Desktop\Notepad++.lnk 2014-02-02 23:18 - 2014-02-02 23:18 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2014-02-02 23:18 - 2014-02-02 23:18 - 00000000 ____D () C:\Program Files (x86)\Notepad++ 2014-02-02 23:16 - 2014-02-02 23:15 - 07598942 _____ () C:\Users\wupto\Downloads\npp.6.5.3.Installer.exe 2014-02-02 23:03 - 2014-02-02 22:37 - 00072396 _____ () C:\Users\wupto\Desktop\reply.txt 2014-02-02 22:55 - 2014-02-02 22:55 - 00000000 ____D () C:\Windows\ERUNT 2014-02-02 22:54 - 2014-02-02 22:54 - 01037068 _____ (Thisisu) C:\Users\wupto\Desktop\JRT.exe 2014-02-02 22:42 - 2014-02-02 22:42 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\WTablet 2014-02-02 22:40 - 2014-02-02 22:39 - 00000000 ____D () C:\AdwCleaner 2014-02-02 22:36 - 2014-02-02 22:36 - 01166132 _____ () C:\Users\wupto\Desktop\adwcleaner.exe 2014-02-02 20:41 - 2014-02-02 20:41 - 00380416 _____ () C:\Users\wupto\Downloads\Gmer-19357.exe 2014-02-02 20:25 - 2014-02-02 20:24 - 02080256 _____ (Farbar) C:\Users\wupto\Desktop\FRST64.exe 2014-02-02 20:22 - 2014-02-02 20:22 - 00050477 _____ () C:\Users\wupto\Desktop\Defogger.exe 2014-02-02 20:22 - 2014-02-02 20:22 - 00000000 _____ () C:\Users\wupto\defogger_reenable 2014-02-02 20:22 - 2014-02-02 02:11 - 00000000 ____D () C:\Users\wupto 2014-02-02 19:49 - 2014-02-02 16:56 - 00000000 ____D () C:\Users\wupto\Desktop\Minecraft 2014-02-02 19:48 - 2014-02-02 19:48 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Malwarebytes 2014-02-02 19:47 - 2014-02-02 19:47 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-02 19:47 - 2014-02-02 19:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\wupto\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-02 19:46 - 2014-02-02 19:45 - 01307736 _____ (BitTorrent Inc.) C:\Users\wupto\Downloads\utorrent.exe 2014-02-02 19:42 - 2014-02-02 19:42 - 00000000 ____D () C:\Users\Public\Documents\ZBrushData 2014-02-02 19:35 - 2014-02-02 19:35 - 00001704 _____ () C:\Users\wupto\Desktop\Photoshop.lnk 2014-02-02 19:21 - 2014-02-02 03:14 - 00000000 ____D () C:\Users\wupto\Desktop\ART 2014-02-02 19:17 - 2014-02-02 13:22 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\NVIDIA 2014-02-02 19:17 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Adobe 2014-02-02 19:13 - 2014-02-02 17:11 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-02-02 19:12 - 2014-02-02 18:47 - 00000000 ____D () C:\Program Files\Adobe 2014-02-02 19:11 - 2014-02-02 18:43 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2014-02-02 18:48 - 2014-02-02 14:35 - 00000000 ____D () C:\ProgramData\Adobe 2014-02-02 17:45 - 2014-02-02 17:45 - 00000000 ____D () C:\Users\wupto\Documents\game of thrones 2014-02-02 17:16 - 2014-02-02 17:16 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\.minecraft 2014-02-02 17:14 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-02-02 17:08 - 2014-02-02 17:08 - 00000000 ____D () C:\Users\wupto\AppData\Local\divinity 2 2014-02-02 17:06 - 2014-02-02 16:47 - 00000000 ____D () C:\Users\wupto\Downloads\old 2014-02-02 17:01 - 2014-02-02 17:02 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-02-02 17:01 - 2014-02-02 17:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-02-02 17:01 - 2014-02-02 17:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-02-02 17:01 - 2014-02-02 17:02 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-02-02 17:01 - 2014-02-02 17:01 - 00000000 ____D () C:\Program Files\Java 2014-02-02 16:58 - 2014-02-02 16:47 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\ftblauncher 2014-02-02 16:54 - 2014-02-02 16:54 - 02844536 _____ (Adobe Systems Incorporated) C:\Users\wupto\Downloads\CreativeCloudSet-Up.exe 2014-02-02 16:53 - 2014-02-02 16:53 - 00001001 _____ () C:\Users\wupto\Desktop\Dropbox.lnk 2014-02-02 16:53 - 2014-02-02 16:52 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\DropboxMaster 2014-02-02 16:52 - 2014-02-02 16:52 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-02-02 16:43 - 2014-02-02 16:35 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV4 2014-02-02 16:42 - 2014-02-02 16:42 - 00000000 ____D () C:\Users\wupto\Documents\nbgi 2014-02-02 16:41 - 2014-02-02 16:35 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameMaker-Studio 1.2 2014-02-02 16:41 - 2014-02-02 16:34 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3d-Coat-V4 2014-02-02 16:41 - 2014-02-02 16:34 - 00000000 ____D () C:\Users\wupto\AppData\Local\GameMaker-Studio 2014-02-02 16:40 - 2014-02-02 16:40 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Subversion 2014-02-02 16:39 - 2014-02-02 16:38 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\GameMaker-Studio 2014-02-02 16:38 - 2014-02-02 16:38 - 00000000 ____D () C:\Users\wupto\Documents\3D-CoatV3 2014-02-02 16:37 - 2014-02-02 16:37 - 00000000 ____D () C:\Users\wupto\AppData\Local\YoYo_Games_Ltd 2014-02-02 16:35 - 2014-02-02 16:35 - 00001850 _____ () C:\Users\wupto\Desktop\Game Maker.lnk 2014-02-02 16:35 - 2014-02-02 16:34 - 00000000 ____D () C:\Users\wupto\GameMaker-Studio 1.2 2014-02-02 16:35 - 2014-02-02 16:34 - 00000000 ____D () C:\Program Files\3D-Coat-V4 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files\TabletPlugins 2014-02-02 15:55 - 2014-02-02 15:55 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins 2014-02-02 15:55 - 2014-02-02 15:54 - 00000000 ____D () C:\Program Files\Tablet 2014-02-02 15:18 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\TO DO 2014-02-02 15:13 - 2014-02-02 15:13 - 00000000 ____D () C:\Users\wupto\Tor Browser 2014-02-02 13:51 - 2014-02-02 13:10 - 00000000 ____D () C:\Users\wupto\Desktop\Programme 2014-02-02 13:23 - 2014-02-02 13:15 - 00000001 _____ () C:\Users\wupto\random.dat 2014-02-02 13:22 - 2014-02-02 13:22 - 00000963 _____ () C:\Users\wupto\Desktop\Steam.lnk 2014-02-02 13:15 - 2014-02-02 13:15 - 00000044 _____ () C:\Users\wupto\jagex_cl_runescape_LIVE.dat 2014-02-02 13:15 - 2014-02-02 13:15 - 00000000 ____D () C:\Users\wupto\jagexcache 2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Macromedia 2014-02-02 12:58 - 2014-02-02 12:58 - 00000000 ____D () C:\Users\wupto\AppData\Local\Macromedia 2014-02-02 12:57 - 2014-02-02 12:57 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-02 12:57 - 2014-02-02 12:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-02 12:57 - 2014-02-02 12:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-02-02 12:57 - 2014-02-02 12:57 - 00000000 ____D () C:\Windows\system32\Macromed 2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Sun 2014-02-02 12:38 - 2014-02-02 12:38 - 00000000 ____D () C:\ProgramData\Oracle 2014-02-02 12:37 - 2014-02-02 12:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-02-02 12:37 - 2014-02-02 12:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-02-02 12:37 - 2014-02-02 12:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-02-02 12:37 - 2014-02-02 12:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-02-02 12:37 - 2014-02-02 12:37 - 00000000 ____D () C:\Program Files (x86)\Java 2014-02-02 04:50 - 2014-02-02 04:45 - 00000000 ____D () C:\Users\wupto\Desktop\Programme (x86) 2014-02-02 04:26 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\Virenbekämpfung 2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\shelper 2014-02-02 04:25 - 2014-02-02 04:25 - 00000000 ____D () C:\Users\wupto\Schule 2014-02-02 04:24 - 2014-02-02 04:23 - 00000000 ____D () C:\Users\wupto\Musik 2014-02-02 04:14 - 2014-02-02 04:11 - 00000000 ____D () C:\Users\wupto\Filme 2014-02-02 03:58 - 2014-02-02 03:58 - 00000000 ____D () C:\Users\wupto\Dokumente 2014-02-02 03:58 - 2014-02-02 03:37 - 00000000 ____D () C:\Users\wupto\Bilder 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\website 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\Desktop\PA 2014-02-02 03:36 - 2014-02-02 03:36 - 00000000 ____D () C:\Users\wupto\adobeshit 2014-02-02 03:36 - 2014-02-02 03:34 - 00000000 ____D () C:\Users\wupto\Desktop\Modelling 2014-02-02 03:34 - 2014-02-02 03:23 - 00000000 ____D () C:\Users\wupto\Desktop\Games & so 2014-02-02 03:23 - 2014-02-02 03:18 - 00000000 ____D () C:\Users\wupto\Desktop\Game Maker Games 2014-02-02 03:18 - 2014-02-02 03:14 - 00000000 ____D () C:\Users\wupto\Desktop\Design Projects 2014-02-02 03:17 - 2014-02-02 03:17 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\Users\wupto\AppData\Local\Skype 2014-02-02 03:17 - 2014-02-02 03:17 - 00000000 ____D () C:\ProgramData\Skype 2014-02-02 03:09 - 2014-02-02 03:09 - 00002154 _____ () C:\Windows\epplauncher.mif 2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-02-02 03:08 - 2014-02-02 03:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-02-02 02:52 - 2014-02-02 02:52 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA Corporation 2014-02-02 02:52 - 2014-02-02 02:43 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-02-02 02:52 - 2014-02-02 02:43 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-02-02 02:52 - 2014-02-02 02:38 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-02-02 02:50 - 2014-02-02 02:50 - 00000534 _____ () C:\Windows\PLTGC.ini.imi 2014-02-02 02:50 - 2014-02-02 02:50 - 00000402 _____ () C:\Windows\PLTGC.ini.cfl 2014-02-02 02:50 - 2014-02-02 02:50 - 00000132 _____ () C:\Windows\system\Dlap.pfx 2014-02-02 02:50 - 2014-02-02 02:50 - 00000000 ____D () C:\Program Files\Plantronics 2014-02-02 02:50 - 2014-02-02 02:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-02-02 02:50 - 2011-11-18 02:21 - 00000432 _____ () C:\Windows\system\PLTGC.ini 2014-02-02 02:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system 2014-02-02 02:49 - 2014-02-02 02:45 - 00000000 ____D () C:\Users\wupto\AppData\Local\NVIDIA 2014-02-02 02:45 - 2014-02-02 02:45 - 00001347 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-02-02 02:45 - 2014-02-02 02:45 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-02-02 02:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2014-02-02 02:29 - 2014-02-02 02:29 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Roaming\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Users\wupto\AppData\Local\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-02 02:29 - 2014-02-02 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-02 02:27 - 2014-02-02 02:15 - 00000000 ____D () C:\TempEI4 2014-02-02 02:23 - 2014-02-02 02:23 - 00000000 ____D () C:\Program Files\Intel 2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-02-02 02:21 - 2014-02-02 02:21 - 00000000 ____D () C:\Program Files\Realtek 2014-02-02 02:21 - 2014-02-02 02:20 - 00002014 _____ () C:\RHDSetup.log 2014-02-02 02:21 - 2014-02-02 02:20 - 00000206 _____ () C:\realtek.log 2014-02-02 02:20 - 2014-02-02 02:20 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-02-02 02:16 - 2014-02-02 02:16 - 00000000 ____D () C:\Intel 2014-02-02 02:15 - 2014-02-02 02:15 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-02-02 02:15 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore 2014-02-02 02:12 - 2014-02-02 02:12 - 00000000 ____D () C:\Users\wupto\AppData\Local\VirtualStore 2014-02-02 02:11 - 2014-02-02 02:11 - 00000020 ___SH () C:\Users\wupto\ntuser.ini 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Netzwerkumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Lokale Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Eigene Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Druckumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\wupto\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Programme 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-02-02 02:11 - 2014-02-02 02:11 - 00000000 __SHD () C:\Recovery 2014-02-02 02:11 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-02-02 02:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT 2014-02-02 02:07 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-02-02 02:03 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2014-02-02 02:03 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2014-02-01 17:10 - 2014-02-02 03:13 - 00000724 _____ () C:\Users\wupto\Desktop\films u should watch.txt 2014-01-21 03:53 - 2014-02-02 02:52 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-01-21 03:53 - 2014-02-02 02:52 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-01-19 08:33 - 2014-02-02 02:43 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe Files to move or delete: ==================== C:\Users\wupto\jagex_cl_runescape_LIVE.dat C:\Users\wupto\random.dat Some content of TEMP: ==================== C:\Users\wupto\AppData\Local\Temp\AcDeltree.exe C:\Users\wupto\AppData\Local\Temp\Creative Cloud Helper.exe C:\Users\wupto\AppData\Local\Temp\CreativeCloudSet-Up.exe C:\Users\wupto\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpty2asw.dll C:\Users\wupto\AppData\Local\Temp\FNP_ACT_InstallerCA.dll C:\Users\wupto\AppData\Local\Temp\Quarantine.exe C:\Users\wupto\AppData\Local\Temp\xmlUpdater.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-03 01:39 ==================== End Of Log ============================ |
|
05.02.2014, 09:03
| #7 |
| /// the machine /// TB-Ausbilder | OpenCandy und Search Protect von Conduit Windows unbedingt updaten, da fehlt ein ganzes Servicepack. Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
07.02.2014, 20:36
| #8 |
| | OpenCandy und Search Protect von Conduit Vielen dank Schrauber! Das Servicepack werde ich mir direkt holen. |
|
08.02.2014, 15:04
| #9 |
| /// the machine /// TB-Ausbilder | OpenCandy und Search Protect von Conduit Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu OpenCandy und Search Protect von Conduit |
| 32 bit, adblock, alert, defender, explorer, flash player, focus, home, homepage, iexplore.exe, installation, opencandy search protect conduit, pup.optional.conduit.a, pup.optional.opencandy, pup.optional.searchprotect.a, realtek, registry, security, services.exe, svchost.exe, windows xp |
Linear-Darstellung
