|
Log-Analyse und Auswertung: Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen!Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
06.02.2014, 23:24 | #1 |
| Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen! Hallo liebes Tojaner-Board Team, ich hatte vor einigen Monaten einen Virus auf meinem Laptop, welches das Betrienssystem Wondows 7 drauf hatte. Ich bin leider kein Genie was PCs angeht aber ich meine mich erinnern zu können, dass das einer mit HEUR.32 in der Warnmeldung von Kaspersky war. Ich hatte diesen dann gelöscht und Kaspersky fand den Virus nicht mehr. Da ich mir aber unsicher war, ob der Trojaner wirklich beseitigt ist habe ich mein Notebook mithilfe einer Recovery CD vor etwa 3 Wochen formatiert. Nun habe ich wieder Vista installiert (Hatte nur die Recovery CD wie es mitgeliefert wurde beim Kauf). Ich dachte eigentlich, dass mein Laptop bereinigt ist aber da passierte es, dass alle meine Hotmail-Kontakte eine Mail ohne Betreff und mit einem Link verschickt bekamen. Ich habe dieses nur deshalb bemerkt, weil etwa 40 Mails mit einer Fehlermeldung, dass sie nicht verschickt werden konnten, an mein Konto zurückkamen. Ich versuchte mich dann einzuloggen aber da kam die Fehlermeldung, dass mein Passwort falsch sei. Nun habe ich keinen Zugang mehr zu meinem Hotmail-Konto. Kann es sein, dass der Trojaner noch auf meinem PC ist und meine Daten übermittelt hat? Könnten evtl. auch andere Daten übermittelt worden sein? P.S Ich habe gerade versucht die FRS und additional dateien anzuhängen aber ich weiß nicht genau wie das gehen soll. Wenn ich das hier reinsetze, dann steht dass die Maximum an Zeichen erreicht ist. Wie mache ich das am geschicktesten? Ich bedanke mich für jede Art von Hilfe. LG pytagoras Geändert von pytagoras (06.02.2014 um 23:32 Uhr) |
07.02.2014, 07:07 | #2 |
/// the machine /// TB-Ausbilder | Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen! Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke. So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
07.03.2014, 22:13 | #3 |
| Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen!Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-03-2014 01 07-03-2014 21:52:38 Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe (IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe (Microsoft Corporation) C:\Windows\system32\SLsvc.exe (ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe (Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Symantec Corporation) c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (CyberLink Corp.) C:\Program Files\HP\QuickPlay\QPService.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (Symantec Corporation) c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\aestsrv.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe () C:\Windows\SMINST\BLService.exe () C:\Program Files\CyberLink\Shared Files\RichVideo.exe (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe (Microsoft Corporation) C:\Windows\ehome\ehsched.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe () C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe (Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe (Symantec Corporation) c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (Hewlett-Packard) c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe () C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe () C:\Users\Selda\Downloads\Defogger.exe (Microsoft Corporation) C:\Windows\system32\conime.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2299176 2011-10-14] (Synaptics Incorporated) HKLM\...\Run: [UCam_Menu] - C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2007-12-24] (CyberLink Corp.) HKLM\...\Run: [QPService] - C:\Program Files\HP\QuickPlay\QPService.exe [468264 2008-05-14] (CyberLink Corp.) HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [ccApp] - c:\Program Files\Common Files\Symantec Shared\ccApp.exe [51048 2008-02-07] (Symantec Corporation) HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [202032 2008-03-14] ( Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [OnScreenDisplay] - C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [554288 2007-11-01] ( Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [40048 2007-05-11] (Adobe Systems Incorporated) HKLM\...\Run: [HP Health Check Scheduler] - c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [70912 2008-04-15] (Hewlett-Packard) HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.) HKLM\...\Run: [hpWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2007-11-20] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [442467 2008-06-27] (IDT, Inc.) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-3714923429-2905602066-2517820217-1000\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2289664 2008-02-26] (Hewlett-Packard Company) HKU\S-1-5-21-3714923429-2905602066-2517820217-1000\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-02-18] (Google Inc.) HKU\S-1-5-21-3714923429-2905602066-2517820217-1000\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20728480 2014-01-14] (Skype Technologies S.A.) HKU\S-1-5-21-3714923429-2905602066-2517820217-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cnnb HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cnnb HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cnnb SearchScopes: HKLM - {32E69FD7-A893-44A3-9124-1A8723526FCD} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de SearchScopes: HKLM - {B172245C-EEC5-4805-9477-49F2999D1362} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933 SearchScopes: HKCU - {32E69FD7-A893-44A3-9124-1A8723526FCD} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de SearchScopes: HKCU - {B172245C-EEC5-4805-9477-49F2999D1362} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933 BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO: No Name - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll (Symantec Corporation) BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC) BHO: No Name - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation) Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation) Toolbar: HKCU - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Java(TM) Platform SE 7 U51) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (MetaStream 3 Plugin) - C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll () CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (Google Docs) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-18] CHR Extension: (Google Drive) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-18] CHR Extension: (YouTube) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-18] CHR Extension: (Google-Suche) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-18] CHR Extension: (Google Wallet) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-18] CHR Extension: (Google Mail) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-18] ========================== Services (Whitelisted) ================= R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\aestsrv.exe [73728 2008-02-12] (Andrea Electronics Corporation) R2 Automatic LiveUpdate Scheduler; c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe [238968 2008-02-09] (Symantec Corporation) R2 ccEvtMgr; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2008-02-07] (Symantec Corporation) R2 ccSetMgr; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2008-02-07] (Symantec Corporation) R2 CLTNetCnService; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2008-02-07] (Symantec Corporation) S3 comHost; c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe [55640 2007-08-22] (Symantec Corporation) R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-04-15] (Hewlett-Packard) S3 LiveUpdate; c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE [3220856 2008-09-05] (Symantec Corporation) R2 LiveUpdate Notice; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2008-02-07] (Symantec Corporation) R2 Recovery Service for Windows; C:\Windows\SMINST\BLService.exe [341328 2008-03-26] () R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2007-01-09] () R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe [221273 2008-06-27] (IDT, Inc.) R3 Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [1245064 2008-05-25] () S3 usnjsvc; C:\Program Files\MSN Messenger\usnsvc.exe [97136 2007-01-19] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R0 ahcix86s; C:\Windows\System32\DRIVERS\ahcix86s.sys [170000 2008-04-14] (AMD Technologies Inc.) R0 Amddfltr; C:\Windows\System32\DRIVERS\Amddfltr.sys [15416 2008-01-07] (Advanced Micro Devices) S3 COH_Mon; C:\Windows\system32\Drivers\COH_Mon.sys [23888 2008-07-30] (Symantec Corporation) R2 CO_Mon; C:\Windows\system32\drivers\CO_Mon.sys [36056 2007-08-09] (Symantec Corporation) R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2014-01-22] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2014-01-22] (Symantec Corporation) S3 HpqRemHid; C:\Windows\System32\DRIVERS\HpqRemHid.sys [7168 2007-07-11] (Hewlett-Packard Development Company, L.P.) R1 IDSvix86; C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20140304.001\IDSvix86.sys [286328 2014-01-29] (Symantec Corporation) R3 NAVENG; C:\ProgramData\Symantec\Definitions\VirusDefs\20140307.003\NAVENG.SYS [93272 2014-02-17] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Symantec\Definitions\VirusDefs\20140307.003\NAVEX15.SYS [1612376 2014-02-17] (Symantec Corporation) R1 SPBBCDrv; C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys [447024 2009-03-17] (Symantec Corporation) R3 SRTSP; C:\Windows\System32\Drivers\SRTSP.SYS [279088 2008-02-01] (Symantec Corporation) S3 SRTSPL; C:\Windows\System32\Drivers\SRTSPL.SYS [317616 2008-02-01] (Symantec Corporation) R1 SRTSPX; C:\Windows\System32\Drivers\SRTSPX.SYS [43696 2008-02-01] (Symantec Corporation) R3 SYMDNS; C:\Windows\System32\Drivers\SYMDNS.SYS [13616 2009-02-19] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [124464 2014-02-17] (Symantec Corporation) R3 SYMFW; C:\Windows\System32\Drivers\SYMFW.SYS [96560 2009-02-19] (Symantec Corporation) R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [24112 2009-02-19] (Symantec Corporation) R3 SYMNDISV; C:\Windows\System32\Drivers\SYMNDISV.SYS [41008 2009-02-19] (Symantec Corporation) R3 SYMREDRV; C:\Windows\System32\Drivers\SYMREDRV.SYS [22320 2009-02-19] (Symantec Corporation) R1 SYMTDI; C:\Windows\System32\Drivers\SYMTDI.SYS [184496 2009-02-19] (Symantec Corporation) U1 eabfiltr; S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-07 21:52 - 2014-03-07 21:52 - 00018233 _____ () C:\Users\Selda\Downloads\FRST.txt 2014-03-07 21:52 - 2014-03-07 21:52 - 00000000 ____D () C:\FRST 2014-03-07 21:51 - 2014-03-07 21:51 - 01145344 _____ (Farbar) C:\Users\Selda\Downloads\FRST.exe 2014-03-07 21:50 - 2014-03-07 21:50 - 00000472 _____ () C:\Users\Selda\Downloads\defogger_disable.log 2014-03-07 21:50 - 2014-03-07 21:50 - 00000000 _____ () C:\Users\Selda\defogger_reenable 2014-03-07 21:49 - 2014-03-07 21:49 - 00050477 _____ () C:\Users\Selda\Downloads\Defogger.exe 2014-03-07 21:31 - 2014-03-07 21:31 - 00000974 _____ () C:\Users\Selda\Desktop\test.txt 2014-03-06 21:02 - 2014-03-06 21:02 - 00004608 _____ () C:\Users\Selda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-03-06 19:25 - 2014-03-06 19:25 - 00000000 ____D () C:\Users\Selda\AppData\Local\Apple Computer 2014-03-06 19:24 - 2014-03-06 20:25 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Apple Computer 2014-03-06 19:21 - 2014-03-06 19:22 - 00000000 ____D () C:\Program Files\QuickTime 2014-03-06 19:21 - 2014-03-06 19:21 - 00001726 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-03-06 19:21 - 2014-03-06 19:21 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-03-06 19:19 - 2014-03-06 19:19 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\Users\Selda\AppData\Local\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\ProgramData\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\Program Files\Apple Software Update 2014-03-06 19:15 - 2014-03-06 19:17 - 41945432 _____ (Apple Inc.) C:\Users\Selda\Downloads\QuickTimeInstaller.exe 2014-03-06 19:08 - 2014-03-06 19:08 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\at.helbling.eversion.pamina 2014-03-06 19:07 - 2014-03-06 19:07 - 00000941 _____ () C:\Users\Public\Desktop\PaMina e-version.lnk 2014-03-06 19:07 - 2014-03-06 19:07 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-03-06 19:07 - 2014-03-06 19:07 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-03-06 19:06 - 2014-03-06 19:07 - 00000000 ____D () C:\Program Files\Helbling 2014-03-06 19:06 - 2014-03-06 19:06 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR 2014-03-04 23:54 - 2014-03-06 23:00 - 00000000 ____D () C:\Users\Selda\Desktop\Hits aktuell 2014-03-04 00:18 - 2014-03-04 00:18 - 00000000 ____D () C:\ProgramData\HP Product Assistant 2014-03-02 16:16 - 2014-03-02 16:16 - 00010484 _____ () C:\Users\Selda\Downloads\Einfuehrungsstunde Tanzen.zip 2014-03-02 16:09 - 2014-03-02 16:09 - 00023552 _____ () C:\Users\Selda\Downloads\Freies Tanzen.xls 2014-02-25 23:04 - 2014-02-25 23:04 - 00000000 ____D () C:\Users\Selda\Desktop\bewegungslieder 2014-02-25 00:52 - 2014-02-25 00:52 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-02-25 00:19 - 2014-02-25 00:19 - 00000056 ____H () C:\Windows\system32\ezsidmv.dat 2014-02-23 22:54 - 2014-02-23 22:54 - 00000000 ____D () C:\ProgramData\WEBREG 2014-02-23 22:29 - 2014-02-23 22:54 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\HP 2014-02-23 22:28 - 2014-02-23 22:31 - 00000680 _____ () C:\Users\Selda\AppData\Local\d3d9caps.dat 2014-02-23 22:19 - 2014-02-23 22:19 - 00001870 _____ () C:\Users\Public\Desktop\Shop für HP Zubehör.lnk 2014-02-23 22:19 - 2014-02-23 22:19 - 00000000 ____D () C:\ProgramData\HPSSUPPLY 2014-02-23 22:18 - 2014-02-23 22:18 - 00002029 _____ () C:\Users\Public\Desktop\HP Photosmart Essential.lnk 2014-02-23 22:14 - 2014-02-23 22:14 - 00001204 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk 2014-02-23 22:11 - 2014-02-23 22:11 - 00000000 ____D () C:\Program Files\Common Files\Hewlett-Packard 2014-02-23 22:10 - 2014-02-23 22:18 - 00000000 ____D () C:\Program Files\Common Files\HP 2014-02-23 22:01 - 2007-02-02 11:27 - 00117760 _____ (Hewlett-Packard Company) C:\Windows\system32\hpz3l4v2.dll 2014-02-23 22:01 - 2006-11-02 19:32 - 00018747 _____ () C:\Windows\system32\HPCEAC06.HPI 2014-02-23 22:01 - 2006-06-06 14:20 - 00241721 _____ (Hewlett-Packard) C:\Windows\system32\HPBMINI.DLL 2014-02-23 22:01 - 2005-06-20 14:33 - 00163840 _____ (Hewlett-Packard) C:\Windows\system32\HPJCMN2U.DLL 2014-02-23 22:01 - 2005-06-20 14:33 - 00094208 _____ (Hewlett-Packard) C:\Windows\system32\HPJIPX1U.DLL 2014-02-23 22:01 - 2005-06-20 14:33 - 00049152 _____ (Hewlett-Packard) C:\Windows\system32\HPBNRAC2.DLL 2014-02-23 21:59 - 2014-02-27 15:00 - 00000000 ____D () C:\ProgramData\HP 2014-02-23 21:59 - 2014-02-27 14:27 - 00146162 _____ () C:\Windows\hpoins18.dat 2014-02-23 21:59 - 2014-02-27 14:27 - 00001313 _____ () C:\ProgramData\hpzinstall.log 2014-02-23 21:58 - 2007-03-01 01:05 - 00006600 _____ () C:\Windows\hpomdl18.dat 2014-02-23 21:58 - 2007-02-01 09:24 - 00258048 _____ (Hewlett-Packard) C:\Windows\system32\hpzids01.dll 2014-02-23 21:53 - 2014-02-23 21:57 - 167339144 _____ () C:\Users\Selda\Downloads\AIO_CDA_Full_Network_deu_NB.exe 2014-02-23 21:18 - 2014-02-23 21:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf 2014-02-23 19:42 - 2014-02-23 19:42 - 00387584 _____ () C:\Users\Selda\Downloads\KL_bodyparts_guessing.ppt 2014-02-23 19:42 - 2014-02-23 19:42 - 00387584 _____ () C:\Users\Selda\Downloads\KL_bodyparts_guessing (1).ppt 2014-02-23 19:42 - 2014-02-23 19:42 - 00214528 _____ () C:\Users\Selda\Downloads\KL_mybody.ppt 2014-02-23 11:46 - 2014-02-23 11:46 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2014-02-23 02:00 - 2009-09-10 03:01 - 03023360 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2014-02-23 02:00 - 2009-09-10 03:00 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll 2014-02-23 02:00 - 2009-09-10 03:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-02-23 01:59 - 2009-10-01 02:02 - 02537472 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2014-02-23 01:59 - 2009-10-01 02:02 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll 2014-02-23 01:59 - 2009-10-01 02:02 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll 2014-02-23 01:59 - 2009-10-01 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\BthMtpContextHandler.dll 2014-02-23 01:59 - 2009-10-01 02:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\WPDShextAutoplay.exe 2014-02-23 01:59 - 2009-10-01 02:01 - 00546816 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceWMDRM.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceTypes.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceClassExtension.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceConnectApi.dll 2014-02-23 01:14 - 2012-07-26 04:39 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-02-23 01:14 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-02-23 01:14 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-02-23 01:14 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-02-23 01:14 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-02-23 01:14 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-02-23 01:14 - 2012-07-26 03:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2014-02-23 01:14 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-02-23 01:14 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-02-23 01:14 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-02-23 01:14 - 2009-07-14 13:12 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\winusb.dll 2014-02-23 00:49 - 2014-02-23 00:49 - 03063561 _____ (Macromedia, Inc.) C:\Users\Public\Documents\MobileTV.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02989660 _____ (Macromedia, Inc.) C:\Users\Public\Documents\DVD.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02864396 _____ (Macromedia, Inc.) C:\Users\Public\Documents\MPV.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02331174 _____ (Macromedia, Inc.) C:\Users\Public\Documents\Karaoke.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02231606 _____ (Macromedia, Inc.) C:\Users\Public\Documents\Games.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 00000021 _____ () C:\Users\Public\Documents\hpqp.txt 2014-02-23 00:49 - 2014-02-23 00:49 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\CyberLink 2014-02-23 00:49 - 2014-02-23 00:49 - 00000000 ____D () C:\Users\Public\Documents\DEU 2014-02-22 16:57 - 2013-10-30 01:35 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-02-22 16:57 - 2013-08-27 03:47 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-02-22 16:57 - 2013-08-27 03:47 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-02-22 16:57 - 2013-08-27 03:47 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-02-22 16:57 - 2013-08-27 03:47 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-02-22 16:57 - 2013-08-27 02:52 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-22 16:57 - 2013-08-27 02:50 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-02-22 16:57 - 2013-08-27 02:32 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-22 16:57 - 2013-08-27 02:28 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-02-22 16:57 - 2013-08-27 02:28 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-02-22 16:57 - 2013-08-01 04:16 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-02-22 16:57 - 2013-08-01 03:49 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-02-22 16:57 - 2013-07-20 11:44 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-02-22 16:57 - 2013-06-15 14:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2014-02-22 16:57 - 2013-06-15 12:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-02-22 16:57 - 2012-05-11 16:57 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-02-22 16:57 - 2011-10-14 17:03 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2014-02-22 16:57 - 2011-10-14 17:00 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\mciseq.dll 2014-02-22 16:57 - 2011-07-29 17:01 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2014-02-22 16:57 - 2011-07-29 17:01 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2014-02-22 16:57 - 2011-07-29 17:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2014-02-22 16:57 - 2011-07-29 17:00 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2014-02-22 16:57 - 2011-04-21 14:55 - 00508416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2014-02-22 16:57 - 2009-06-17 14:23 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS 2014-02-22 16:56 - 2013-12-05 03:12 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-22 16:56 - 2013-10-30 03:12 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll 2014-02-22 16:56 - 2013-10-30 02:43 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-02-22 16:56 - 2013-10-30 01:43 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-02-22 16:56 - 2013-07-17 20:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-02-22 16:56 - 2013-07-10 10:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-02-22 16:56 - 2013-07-05 05:53 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-02-22 16:56 - 2012-11-02 11:18 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-02-22 16:56 - 2012-11-02 09:26 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe 2014-02-22 16:56 - 2012-09-25 17:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2014-02-22 16:56 - 2012-08-21 12:47 - 00224640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-02-22 16:56 - 2012-06-29 17:01 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2014-02-22 16:56 - 2012-06-08 18:47 - 11586048 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-02-22 16:56 - 2012-03-21 00:28 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2014-02-22 16:56 - 2011-10-14 17:02 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2014-02-22 16:55 - 2011-11-18 18:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-02-22 16:55 - 2011-02-22 15:13 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-02-22 16:54 - 2013-06-29 03:07 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-02-22 16:54 - 2013-06-29 03:07 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-02-22 16:54 - 2013-06-29 03:07 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-02-22 16:54 - 2013-06-29 03:06 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-02-22 16:54 - 2013-03-03 20:07 - 01082232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-02-22 16:54 - 2012-11-20 05:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-02-22 16:54 - 2012-09-28 17:11 - 00892928 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-02-22 16:54 - 2011-12-14 17:17 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2014-02-22 16:54 - 2011-05-05 14:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-02-22 16:54 - 2011-05-05 14:54 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-02-22 16:54 - 2011-03-12 22:55 - 00876032 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-02-22 16:53 - 2013-10-11 03:08 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-02-22 16:53 - 2013-10-11 03:08 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-02-22 16:53 - 2013-10-11 03:08 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wshcon.dll 2014-02-22 16:53 - 2013-10-11 01:35 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-02-22 16:53 - 2013-10-11 01:35 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-02-22 16:53 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-02-22 16:53 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-02-22 16:53 - 2013-08-02 05:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-02-22 16:53 - 2013-07-12 10:04 - 00134272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-02-22 16:53 - 2013-05-02 05:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-02-22 16:53 - 2013-05-02 05:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\printcom.dll 2014-02-22 16:53 - 2013-04-24 05:00 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2014-02-22 16:53 - 2013-04-24 02:46 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2014-02-22 16:53 - 2012-11-22 04:54 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll 2014-02-22 16:53 - 2012-11-08 04:48 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2014-02-22 16:53 - 2012-11-02 11:19 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-02-22 16:52 - 2013-10-22 08:19 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-02-22 16:52 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-02-22 16:52 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-02-22 16:52 - 2013-10-11 01:39 - 00218228 _____ () C:\Windows\system32\WFP.TMF 2014-02-22 16:52 - 2013-07-16 05:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2014-02-22 16:52 - 2013-07-09 13:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-02-22 16:52 - 2013-07-08 05:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2014-02-22 16:52 - 2013-07-08 05:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-02-22 16:52 - 2013-06-27 00:01 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-02-22 16:52 - 2013-06-04 05:16 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-02-22 16:52 - 2013-06-04 02:49 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-02-22 16:52 - 2013-06-01 05:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-02-22 16:52 - 2013-03-09 04:45 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-02-22 16:52 - 2013-03-09 02:28 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-02-22 16:52 - 2012-02-29 16:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2014-02-22 16:52 - 2012-02-29 14:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2014-02-22 16:52 - 2011-11-16 17:23 - 00377344 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2014-02-22 16:52 - 2011-10-25 16:58 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-02-22 16:52 - 2011-08-25 17:15 - 00555520 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll 2014-02-22 16:52 - 2011-08-25 17:14 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-02-22 16:52 - 2011-08-25 17:14 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2014-02-22 16:52 - 2011-08-25 14:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\oleaccrc.dll 2014-02-22 16:51 - 2013-07-04 05:21 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-02-22 16:51 - 2013-07-03 03:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2014-02-22 16:51 - 2013-07-03 03:10 - 00025472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-02-22 16:51 - 2013-04-17 13:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2014-02-22 16:51 - 2013-03-08 04:53 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-02-22 16:51 - 2013-03-08 04:52 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-02-22 16:51 - 2012-05-01 15:03 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-02-22 16:51 - 2011-06-15 17:12 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2014-02-22 16:50 - 2012-06-04 16:26 - 00440704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-02-22 16:50 - 2012-06-02 01:04 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-02-22 16:50 - 2011-11-16 17:23 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-02-22 16:50 - 2011-11-16 17:21 - 01259008 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-02-22 16:50 - 2011-11-16 15:12 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-02-22 16:49 - 2013-02-12 02:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-02-22 16:49 - 2010-05-04 20:13 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\msshsq.dll 2014-02-22 16:27 - 2013-07-08 05:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-02-22 16:27 - 2013-07-08 05:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-02-22 16:27 - 2013-07-08 05:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-02-22 16:20 - 2012-01-09 16:54 - 00613376 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2014-02-22 16:05 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-02-22 16:05 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-02-22 16:05 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-02-22 16:05 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-02-22 16:05 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-02-22 16:05 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-02-22 16:05 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-02-22 16:04 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-02-22 16:04 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 12345344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-02-21 22:05 - 2014-02-21 22:05 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-21 22:05 - 2014-02-21 22:05 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-21 22:05 - 2014-02-21 22:05 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-02-21 22:05 - 2014-02-21 22:05 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\advpack.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-02-21 22:05 - 2014-02-21 22:05 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-02-21 22:03 - 2014-02-21 22:03 - 02873344 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 01075712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00979456 _____ (Microsoft Corporation) C:\Windows\system32\MFH264Dec.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\MFHEAACdec.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4src.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 01554432 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe 2014-02-21 22:02 - 2014-02-21 22:02 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2014-02-21 22:02 - 2014-02-21 22:02 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\dxdiag.exe 2014-02-21 21:58 - 2014-02-21 21:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00189440 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\vi-VN 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\eu-ES 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\ca-ES 2014-02-21 21:05 - 2014-02-21 21:05 - 00000000 ____D () C:\Windows\system32\SPReview 2014-02-21 20:37 - 2009-04-10 23:28 - 00928768 _____ (Microsoft Corporation) C:\Windows\system32\scavenge.dll 2014-02-21 20:36 - 2009-04-10 23:27 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\compcln.exe 2014-02-21 20:33 - 2009-04-10 23:28 - 00550400 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00466944 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2014-02-21 20:33 - 2009-04-10 23:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\sdohlp.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2014-02-21 20:33 - 2009-04-10 23:28 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\SCardSvr.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2014-02-21 20:33 - 2009-04-10 23:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\rtffilt.dll 2014-02-21 20:33 - 2009-04-10 23:27 - 00241128 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll 2014-02-21 20:33 - 2009-04-10 21:46 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2014-02-21 20:33 - 2009-04-10 21:45 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2014-02-21 20:32 - 2009-04-10 23:32 - 00149480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2014-02-21 20:32 - 2009-04-10 23:32 - 00050664 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL 2014-02-21 20:32 - 2009-04-10 23:32 - 00043496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciidex.sys 2014-02-21 20:32 - 2009-04-10 23:32 - 00014312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciide.sys 2014-02-21 20:32 - 2009-04-10 23:28 - 02153472 _____ (Microsoft Corporation) C:\Windows\system32\oobefldr.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 01823744 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 01107968 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00825856 _____ (Microsoft Corporation) C:\Windows\system32\rasdlg.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00644608 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\pnpui.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rasplap.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\RelMon.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\P2PGraph.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL 2014-02-21 20:32 - 2009-04-10 23:28 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\offfilt.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\pnpsetup.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\rasmontr.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\nlhtml.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\ntmarta.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\oleprn.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\propdefs.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\PNPXAssoc.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\perfdisk.dll 2014-02-21 20:32 - 2009-04-10 23:27 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr 2014-02-21 20:32 - 2009-04-10 23:27 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\reg.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\rekeywiz.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\PnPutil.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\rasdial.exe 2014-02-21 20:32 - 2009-04-10 23:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime 2014-02-21 20:32 - 2009-04-10 23:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime 2014-02-21 20:32 - 2009-04-10 23:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime 2014-02-21 20:32 - 2009-04-10 23:23 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime 2014-02-21 20:32 - 2009-04-10 22:03 - 12240896 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0007.dll 2014-02-21 20:32 - 2009-04-10 22:03 - 02644480 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0009.dll 2014-02-21 20:32 - 2009-04-10 21:46 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rassstp.sys 2014-02-21 20:32 - 2009-04-10 21:46 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspppoe.sys 2014-02-21 20:32 - 2009-04-10 21:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys 2014-02-21 20:32 - 2009-04-10 21:43 - 00392170 _____ () C:\Windows\system32\onex.tmf 2014-02-21 20:32 - 2009-04-10 21:43 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys 2014-02-21 20:32 - 2009-04-10 21:43 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2014-02-21 20:32 - 2009-04-10 21:43 - 00062208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ohci1394.sys 2014-02-21 20:32 - 2009-04-10 21:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2014-02-21 20:32 - 2009-04-10 21:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys 2014-02-21 20:32 - 2009-02-19 17:20 - 00009212 _____ () C:\Windows\system32\RacUR.xml 2014-02-21 20:32 - 2009-02-18 11:43 - 00000153 _____ () C:\Windows\system32\RacUREx.xml 2014-02-21 20:32 - 2009-02-18 11:39 - 00779136 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll 2014-02-21 20:31 - 2009-04-10 23:32 - 00190424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys 2014-02-21 20:31 - 2009-04-10 23:32 - 00141288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ecache.sys 2014-02-21 20:31 - 2009-04-10 23:32 - 00053736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys 2014-02-21 20:31 - 2009-04-10 23:32 - 00027624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Dumpata.sys 2014-02-21 20:31 - 2009-04-10 23:28 - 01591296 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 01459200 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00978432 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe 2014-02-21 20:31 - 2009-04-10 23:28 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\emdmgmt.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\IasMigReader.exe 2014-02-21 20:31 - 2009-04-10 23:28 - 00454144 _____ (Microsoft) C:\Windows\system32\IasMigPlugin.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\dsound.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\devmgr.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2014-02-21 20:31 - 2009-04-10 23:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\es.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\fundisc.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\dsprop.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00117248 _____ () C:\Windows\system32\EhStorAuthn.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\EhStorShell.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\dmsynth.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\dmusic.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\fdBth.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\iashlpr.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\fdSSDP.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\iasads.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\feclient.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\iasdatastore.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\EhStorPwdMgr.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\hidserv.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\fdBthProxy.dll 2014-02-21 20:31 - 2009-04-10 23:27 - 02926592 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 02092544 _____ (Microsoft Corporation) C:\Windows\system32\dfsr.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00407040 _____ (Microsoft Corporation) C:\Windows\system32\dpapimig.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\gpresult.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\hdwwiz.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\fc.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\gpupdate.exe 2014-02-21 20:31 - 2009-04-10 23:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll 2014-02-21 20:31 - 2009-04-10 21:48 - 00344698 _____ () C:\Windows\system32\eaphost.tmf 2014-02-21 20:31 - 2009-04-10 21:43 - 00442788 _____ () C:\Windows\system32\dot3.tmf 2014-02-21 20:31 - 2009-04-10 21:43 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys 2014-02-21 20:31 - 2009-04-10 21:42 - 00561152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2014-02-21 20:31 - 2009-04-10 21:42 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-02-21 20:31 - 2009-04-10 21:39 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-02-21 20:31 - 2009-04-10 21:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxg.sys 2014-02-21 20:31 - 2009-04-10 21:13 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys 2014-02-21 20:31 - 2009-04-10 21:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys 2014-02-21 20:30 - 2009-04-10 23:33 - 00614376 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2014-02-21 20:30 - 2009-04-10 23:32 - 00527848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00265688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00245736 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00223208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00180712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00161752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00125928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00109032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00099816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-02-21 20:30 - 2009-04-10 23:32 - 00048104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00035304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00019944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\atapi.sys 2014-02-21 20:30 - 2009-04-10 23:28 - 06103040 _____ (Microsoft Corporation) C:\Windows\system32\chtbrkr.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 03174400 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 03072000 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 02515968 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 02225664 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 02134528 _____ (Microsoft Corporation) C:\Windows\system32\FunctionDiscoveryFolder.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01985024 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01856512 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01788416 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\apds.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01671680 _____ (Microsoft Corporation) C:\Windows\system32\chsbrkr.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01645568 _____ (Microsoft Corporation) C:\Windows\system32\connect.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01589248 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01502720 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01480704 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01342464 _____ (Microsoft Corporation) C:\Windows\system32\brcpl.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01324032 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01209856 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01112064 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01086464 _____ (Microsoft Corporation) C:\Windows\system32\NetProjW.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01053696 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00971264 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\mswdat10.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\ipsecsnp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00670720 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\msrepl40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\CertEnrollUI.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00618496 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2VDEC.DLL 2014-02-21 20:30 - 2009-04-10 23:28 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\comuid.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00516608 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\cmdial32.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\msxbde40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00450560 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\msexch40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\msvcp60.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\mspbde40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00368640 _____ () C:\Windows\system32\msjetoledb40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00364032 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2014-02-21 20:30 - 2009-04-10 23:28 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\msrd3x40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2014-02-21 20:30 - 2009-04-10 23:28 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\msrd2x40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\msjtes40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\modemui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\mstext40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\msltus40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\mscandui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\adsldpc.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayDriverLib.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mstlsapi.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\msctfp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\mpr.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\msjter40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingProxy.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\bthci.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msstrc.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\bthserv.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\networkitemfactory.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\msscb.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\bitsigd.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\msimtf.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\NcdProp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\MsCtfMonitor.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msisip.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\CHxReadingStringIME.dll 2014-02-21 20:30 - 2009-04-10 23:27 - 01122304 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl 2014-02-21 20:30 - 2009-04-10 23:27 - 01102848 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl 2014-02-21 20:30 - 2009-04-10 23:27 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl 2014-02-21 20:30 - 2009-04-10 23:27 - 00636416 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\certreq.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\fsquirt.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00130024 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll 2014-02-21 20:30 - 2009-04-10 23:27 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2014-02-21 20:30 - 2009-04-10 23:27 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\newdev.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\conime.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingWizard.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\cipher.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\cmmon32.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\csrstub.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cbsra.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\bthudtask.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ipconfig.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEject.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\msacm32.drv 2014-02-21 20:30 - 2009-04-10 23:23 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime 2014-02-21 20:30 - 2009-04-10 23:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime 2014-02-21 20:30 - 2009-04-10 23:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime 2014-02-21 20:30 - 2009-04-10 22:42 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys 2014-02-21 20:30 - 2009-04-10 21:46 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys 2014-02-21 20:30 - 2009-04-10 21:45 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2014-02-21 20:30 - 2009-04-10 21:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys 2014-02-21 20:30 - 2009-04-10 21:39 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys 2014-02-21 20:30 - 2009-04-10 21:39 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\iscsilog.dll 2014-02-21 20:30 - 2009-04-10 21:27 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2014-02-21 20:30 - 2009-04-10 21:14 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2014-02-21 20:30 - 2009-04-10 21:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2014-02-21 20:30 - 2009-03-29 21:42 - 00155456 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2014-02-21 20:30 - 2009-03-29 21:42 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2014-02-21 20:30 - 2009-02-18 11:38 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-02-21 20:30 - 2009-02-18 11:38 - 00035168 _____ (Microsoft Corporation) C:\Windows\system32\infocardcpl.cpl 2014-02-21 20:29 - 2009-04-10 23:33 - 00926184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2014-02-21 20:29 - 2009-04-10 23:33 - 00292840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys 2014-02-21 20:29 - 2009-04-10 23:32 - 00438744 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2014-02-21 20:29 - 2009-04-10 23:32 - 00019944 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2014-02-21 20:29 - 2009-04-10 23:32 - 00017896 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2014-02-21 20:29 - 2009-04-10 23:32 - 00017384 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 02167808 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 02012160 _____ (Microsoft Corporation) C:\Windows\system32\milcore.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01671680 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01580544 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01575936 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL 2014-02-21 20:29 - 2009-04-10 23:28 - 01533440 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01524736 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01382912 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2014-02-21 20:29 - 2009-04-10 23:28 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\wercon.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01055232 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01017856 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00968192 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz2.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00876032 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00852992 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2014-02-21 20:29 - 2009-04-10 23:28 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00657408 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL 2014-02-21 20:29 - 2009-04-10 23:28 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\wiaaut.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00532992 _____ (Microsoft Corporation) C:\Windows\system32\wpcao.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00507904 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\WscEapPr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\wow32.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iassdo.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\wscntfy.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\iassam.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\wevtutil.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wpcsvc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\imapi.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL 2014-02-21 20:29 - 2009-04-10 23:28 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\wshext.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\wlgpclnt.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\iassvcs.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\xmlfilter.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\mmci.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\l2nacp.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iaspolcy.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\whealogr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\ifmon.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\wsepno.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\uxsms.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\version.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\winrnr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wscisvif.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\vdmdbg.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\midimap.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mmcico.dll 2014-02-21 20:29 - 2009-04-10 23:27 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe 2014-02-21 20:29 - 2009-04-10 23:27 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl 2014-02-21 20:29 - 2009-04-10 23:27 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe 2014-02-21 20:29 - 2009-04-10 23:27 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\Magnify.exe 2014-02-21 20:29 - 2009-04-10 23:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv 2014-02-21 20:29 - 2009-04-10 23:27 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe 2014-02-21 20:29 - 2009-04-10 23:27 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax 2014-02-21 20:29 - 2009-04-10 23:27 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2014-02-21 20:29 - 2009-04-10 23:22 - 00883712 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME 2014-02-21 20:29 - 2009-04-10 21:42 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2014-02-21 20:29 - 2009-04-10 21:38 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2014-02-21 20:29 - 2009-04-10 21:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys 2014-02-21 20:29 - 2009-04-10 21:22 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys 2014-02-21 20:29 - 2009-04-10 18:54 - 03662128 _____ () C:\Windows\system32\locale.nls 2014-02-21 20:29 - 2009-02-18 11:38 - 00619864 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-02-21 20:29 - 2009-02-18 11:38 - 00009048 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-02-21 20:28 - 2009-04-10 23:33 - 00986600 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2014-02-21 20:28 - 2009-04-10 23:32 - 00122344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Storport.sys 2014-02-21 20:28 - 2009-04-10 23:28 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 02205184 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 01224192 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 01081344 _____ (Microsoft Corporation) C:\Windows\system32\SLCExt.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00996352 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00777216 _____ (Microsoft Corporation) C:\Windows\system32\slcc.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00582144 _____ (Microsoft Corporation) C:\Windows\system32\SLCommDlg.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00425472 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\SLUI.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\SnippingTool.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\SLC.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\sperror.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\SLLUA.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\spoolss.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\softkbd.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00083456 _____ (Microsoft) C:\Windows\system32\SMBHelperClass.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\slwmi.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\SLUINotify.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Storprop.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\slcinst.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\TSTheme.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\spcmsg.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\spwinsat.dll 2014-02-21 20:28 - 2009-04-10 23:27 - 03408896 _____ (Microsoft Corporation) C:\Windows\system32\SLsvc.exe 2014-02-21 20:28 - 2009-04-10 23:27 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2014-02-21 20:28 - 2009-04-10 21:45 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\smb.sys 2014-02-21 20:28 - 2009-04-10 21:42 - 00052992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys 2014-02-21 20:28 - 2009-04-10 21:42 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys 2014-02-21 20:28 - 2009-04-10 21:14 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2014-02-21 20:28 - 2009-04-10 19:52 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spsys.sys 2014-02-21 20:28 - 2009-04-10 18:59 - 00107612 _____ () C:\Windows\system32\StructuredQuerySchema.bin 2014-02-21 20:28 - 2009-02-19 17:20 - 00009239 _____ () C:\Windows\system32\spcinstrumentation.man 2014-02-21 20:28 - 2009-02-18 11:39 - 00092918 _____ () C:\Windows\system32\slmgr.vbs 2014-02-21 20:28 - 2009-02-18 11:39 - 00035680 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-02-21 20:27 - 2009-04-10 23:32 - 00053224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys 2014-02-21 20:27 - 2009-04-10 23:28 - 01576960 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 01152000 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\thawbrkr.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\ulib.dll 2014-02-21 20:27 - 2009-04-10 23:27 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp 2014-02-21 20:27 - 2009-04-10 23:23 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime 2014-02-21 20:27 - 2009-04-10 21:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-02-21 20:27 - 2009-04-10 21:42 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys 2014-02-21 20:27 - 2009-03-06 18:11 - 00130008 _____ () C:\Windows\system32\systemsf.ebd 2014-02-21 20:20 - 2014-02-21 20:20 - 00000000 ____D () C:\Windows\system32\EventProviders 2014-02-21 20:06 - 2014-02-21 20:15 - 365230920 _____ (Microsoft Corporation) C:\Users\Selda\Downloads\Windows6.0-KB948465-X86.exe 2014-02-21 18:55 - 2014-02-21 22:37 - 00008448 _____ () C:\Windows\IE9_main.log 2014-02-21 18:55 - 2014-02-21 18:55 - 18733360 _____ (Microsoft Corporation) C:\Users\Selda\Downloads\IE9-WindowsVista-x86-deu.exe |
07.03.2014, 23:30 | #4 |
| Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen!Code:
ATTFilter 2014-02-20 03:30 - 2014-02-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-02-20 03:30 - 2014-02-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-02-18 22:15 - 2014-02-18 22:15 - 00000784 _____ () C:\Windows\ie8_main.log 2014-02-18 21:00 - 2014-02-18 21:06 - 00000438 _____ () C:\Users\Selda\AppData\Roaming\wklnhst.dat 2014-02-18 21:00 - 2014-02-18 21:03 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Template 2014-02-18 19:53 - 2010-09-06 17:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2014-02-18 19:53 - 2010-09-06 17:19 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2014-02-18 19:51 - 2014-02-18 19:51 - 00000000 ____D () C:\Users\Selda\AppData\Local\Skype 2014-02-18 19:50 - 2014-02-18 19:50 - 00001880 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-02-18 19:50 - 2014-02-18 19:50 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-02-18 19:49 - 2014-02-18 19:50 - 00000000 ___RD () C:\Program Files\Skype 2014-02-18 19:39 - 2014-02-18 22:12 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Google 2014-02-18 13:04 - 2008-05-27 05:59 - 00018904 _____ () C:\Windows\system32\StructuredQuerySchemaTrivial.bin 2014-02-18 13:04 - 2007-11-08 10:04 - 11967524 _____ () C:\Windows\system32\korwbrkr.lex 2014-02-18 12:57 - 2010-02-12 11:48 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-02-18 10:48 - 2009-11-08 10:55 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2014-02-18 10:48 - 2009-11-08 10:55 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2014-02-18 10:48 - 2009-11-08 10:55 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2014-02-18 10:48 - 2009-11-08 10:55 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2014-02-18 10:48 - 2009-11-08 10:55 - 00049472 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2014-02-18 02:20 - 2014-02-18 02:20 - 00000000 ____D () C:\Windows\system32\WindowsPowerShell 2014-02-18 01:32 - 2014-02-18 01:36 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-18 01:00 - 2014-03-04 11:29 - 00001963 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-02-18 00:57 - 2014-03-07 21:21 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-18 00:57 - 2014-03-07 21:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-18 00:57 - 2014-03-07 20:55 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-18 00:57 - 2014-02-21 15:01 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-02-18 00:57 - 2014-02-21 15:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-02-18 00:57 - 2014-02-18 19:39 - 00000000 ____D () C:\Users\Selda\AppData\Local\Google 2014-02-18 00:57 - 2014-02-18 01:00 - 00000000 ____D () C:\Program Files\Google 2014-02-18 00:57 - 2014-02-18 00:58 - 00000000 ____D () C:\ProgramData\Google 2014-02-18 00:37 - 2010-02-21 00:06 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\nshhttp.dll 2014-02-18 00:37 - 2010-02-21 00:05 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll 2014-02-18 00:37 - 2010-02-20 21:53 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2014-02-18 00:36 - 2014-02-18 00:37 - 00283642 _____ () C:\Windows\msxml4-KB954430-enu.LOG 2014-02-18 00:34 - 2014-02-18 00:35 - 00289738 _____ () C:\Windows\msxml4-KB973688-enu.LOG 2014-02-18 00:34 - 2014-02-18 00:34 - 00000000 ____D () C:\Program Files\MSXML 4.0 2014-02-18 00:31 - 2009-10-09 22:56 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\winrs.exe 2014-02-18 00:31 - 2009-10-09 22:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\winrshost.exe 2014-02-18 00:31 - 2009-10-09 22:56 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe 2014-02-18 00:31 - 2009-10-09 22:56 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\winrsmgr.dll 2014-02-18 00:30 - 2009-10-09 22:56 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-02-18 00:30 - 2009-10-09 22:56 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2014-02-18 00:30 - 2009-10-09 22:56 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\winrscmd.dll 2014-02-18 00:30 - 2009-10-09 22:56 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2014-02-18 00:30 - 2009-10-09 22:56 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2014-02-18 00:30 - 2009-10-09 22:56 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll 2014-02-18 00:30 - 2009-10-09 22:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll 2014-02-18 00:30 - 2009-10-09 22:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\winrssrv.dll 2014-02-18 00:30 - 2009-10-09 22:55 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2014-02-18 00:30 - 2009-10-09 22:55 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\wecsvc.dll 2014-02-18 00:30 - 2009-10-09 22:55 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\wevtfwd.dll 2014-02-18 00:30 - 2009-10-09 22:55 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\wecutil.exe 2014-02-18 00:30 - 2009-10-09 22:55 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\wecapi.dll 2014-02-18 00:30 - 2009-10-09 22:55 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll 2014-02-18 00:30 - 2009-08-01 07:27 - 00201184 _____ () C:\Windows\system32\winrm.vbs 2014-02-18 00:30 - 2009-07-16 18:30 - 00004675 _____ () C:\Windows\system32\wsmanconfig_schema.xml 2014-02-18 00:30 - 2009-07-16 18:30 - 00002426 _____ () C:\Windows\system32\WsmTxt.xsl 2014-02-18 00:25 - 2009-07-10 12:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll 2014-02-18 00:25 - 2008-02-29 07:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\kbd106n.dll 2014-02-18 00:24 - 2009-08-14 14:49 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\NETSTAT.EXE 2014-02-18 00:24 - 2009-08-14 14:49 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\ARP.EXE 2014-02-18 00:24 - 2009-08-14 14:49 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\ROUTE.EXE 2014-02-18 00:24 - 2009-08-14 14:49 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\MRINFO.EXE 2014-02-18 00:24 - 2009-08-14 14:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe 2014-02-18 00:24 - 2009-08-14 14:49 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\TCPSVCS.EXE 2014-02-18 00:24 - 2009-08-14 14:49 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\HOSTNAME.EXE 2014-02-18 00:24 - 2009-08-14 14:48 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll 2014-02-18 00:23 - 2010-09-13 16:46 - 10628096 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-02-18 00:23 - 2010-09-13 14:56 - 08147456 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-02-18 00:23 - 2009-07-15 13:39 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2014-02-18 00:23 - 2009-07-15 13:39 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2014-02-18 00:23 - 2009-07-15 13:39 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2014-02-18 00:22 - 2010-12-28 16:55 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2014-02-18 00:21 - 2011-04-29 14:25 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-02-18 00:21 - 2011-04-29 14:25 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-02-18 00:13 - 2013-12-18 06:13 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-02-18 00:12 - 2010-04-16 17:46 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-02-18 00:11 - 2011-02-22 14:23 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2014-02-18 00:11 - 2010-06-16 16:30 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2014-02-18 00:11 - 2009-10-23 18:10 - 00714240 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2014-02-18 00:11 - 2009-07-11 20:01 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2014-02-18 00:11 - 2009-07-11 20:01 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll 2014-02-18 00:11 - 2009-07-11 20:01 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2014-02-18 00:11 - 2009-07-11 20:01 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll 2014-02-18 00:11 - 2009-07-11 18:03 - 02501921 _____ () C:\Windows\system32\wlan.tmf 2014-02-18 00:11 - 2009-07-11 18:03 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\L2SecHC.dll 2014-02-18 00:11 - 2009-06-15 15:52 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2014-02-18 00:11 - 2009-06-15 15:51 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2014-02-18 00:11 - 2009-04-11 07:28 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll 2014-02-18 00:09 - 2011-07-06 16:31 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2014-02-18 00:09 - 2011-04-29 14:24 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-02-18 00:09 - 2011-04-29 14:24 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-02-18 00:09 - 2011-02-18 15:03 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-02-18 00:09 - 2010-08-17 15:11 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-02-18 00:08 - 2014-03-07 20:45 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Skype 2014-02-18 00:08 - 2010-10-18 14:37 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-02-18 00:08 - 2010-08-26 17:37 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2014-02-18 00:08 - 2010-06-18 18:31 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll 2014-02-18 00:08 - 2010-04-05 18:02 - 00317952 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL 2014-02-18 00:08 - 2010-01-25 13:00 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-18 00:08 - 2010-01-25 13:00 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-18 00:08 - 2010-01-25 09:21 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-18 00:08 - 2010-01-25 09:21 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-18 00:08 - 2009-06-15 15:54 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-02-18 00:08 - 2009-06-15 15:52 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-02-18 00:07 - 2011-03-03 16:40 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Apphlpdm.dll 2014-02-18 00:07 - 2011-03-03 14:35 - 04240384 _____ (Microsoft) C:\Windows\system32\GameUXLegacyGDFs.dll 2014-02-18 00:07 - 2010-08-31 16:46 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll 2014-02-18 00:07 - 2010-08-31 16:46 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll 2014-02-18 00:07 - 2010-08-26 17:34 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-02-18 00:07 - 2010-02-18 14:30 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2014-02-18 00:07 - 2010-02-18 12:28 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys 2014-02-18 00:07 - 2010-01-25 13:00 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-18 00:07 - 2010-01-25 13:00 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-18 00:07 - 2010-01-25 12:58 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-18 00:07 - 2010-01-25 09:21 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-18 00:07 - 2010-01-25 09:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-18 00:07 - 2009-06-10 12:41 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL 2014-02-18 00:06 - 2011-05-02 18:16 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2014-02-18 00:06 - 2010-11-04 19:56 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2014-02-18 00:06 - 2010-11-04 19:55 - 00601600 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-02-18 00:06 - 2010-11-04 19:55 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2014-02-18 00:06 - 2010-11-04 19:55 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2014-02-18 00:06 - 2010-11-04 17:34 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2014-02-18 00:06 - 2010-08-20 17:05 - 00867328 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2014-02-18 00:06 - 2009-09-10 17:48 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-02-18 00:06 - 2009-07-15 13:39 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll 2014-02-18 00:06 - 2009-07-15 11:21 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.tlb 2014-02-18 00:06 - 2009-07-15 11:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\amcompat.tlb 2014-02-18 00:06 - 2009-04-11 07:27 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2014-02-18 00:06 - 2009-04-11 07:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2014-02-18 00:06 - 2009-04-11 05:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2014-02-18 00:05 - 2011-04-14 15:59 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2014-02-18 00:05 - 2010-12-29 19:28 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2014-02-18 00:05 - 2010-12-29 19:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\sbeio.dll 2014-02-18 00:05 - 2010-12-29 19:26 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2014-02-18 00:05 - 2010-12-17 14:54 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-02-18 00:05 - 2010-06-28 18:00 - 01316864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2014-02-18 00:05 - 2010-01-13 18:34 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll 2014-02-18 00:05 - 2009-12-08 18:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2014-02-18 00:05 - 2009-09-04 12:41 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll 2014-02-18 00:05 - 2009-08-10 13:35 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2014-02-18 00:05 - 2009-06-10 12:42 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll 2014-02-18 00:05 - 2009-04-11 07:28 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2014-02-18 00:05 - 2009-04-11 07:28 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tscupgrd.exe 2014-02-18 00:05 - 2009-04-11 07:28 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-02-18 00:04 - 2011-04-21 14:58 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-02-18 00:04 - 2011-03-10 18:03 - 01162240 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2014-02-18 00:04 - 2011-03-10 18:03 - 01136640 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2014-02-18 00:04 - 2011-03-02 16:44 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2014-02-18 00:04 - 2011-03-02 16:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2014-02-18 00:04 - 2010-12-14 15:49 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe 2014-02-18 00:04 - 2010-05-27 21:08 - 00081920 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll 2014-02-18 00:04 - 2010-04-05 18:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2014-02-18 00:04 - 2010-01-21 16:05 - 00062464 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\system32\l3codeca.acm 2014-02-18 00:04 - 2009-10-07 12:36 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2014-02-18 00:04 - 2009-07-17 14:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\atl.dll 2014-02-18 00:04 - 2009-05-04 10:59 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2014-02-18 00:04 - 2009-04-11 07:27 - 00220672 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\system32\l3codecp.acm 2014-02-18 00:03 - 2009-12-04 19:30 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll 2014-02-18 00:03 - 2009-12-04 19:28 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll 2014-02-18 00:03 - 2009-12-04 19:28 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll 2014-02-18 00:03 - 2009-12-04 19:28 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll 2014-02-18 00:03 - 2009-12-04 19:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll 2014-02-18 00:03 - 2009-12-04 19:28 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll 2014-02-18 00:03 - 2009-12-04 19:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll 2014-02-18 00:03 - 2009-12-04 19:27 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll 2014-02-17 23:58 - 2014-02-18 19:50 - 00000000 ____D () C:\ProgramData\Skype 2014-02-17 23:47 - 2009-05-08 13:53 - 00604672 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2014-02-17 23:43 - 2014-02-18 10:33 - 00000000 ____D () C:\Users\Public\Documents\Symantec 2014-02-17 23:31 - 2009-09-10 15:58 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\unregmp2.exe 2014-02-17 23:26 - 2014-02-17 23:26 - 00000000 ____D () C:\Windows\Sun 2014-02-17 23:26 - 2014-02-17 23:26 - 00000000 ____D () C:\ProgramData\Sun 2014-02-17 23:26 - 2014-02-17 23:26 - 00000000 ____D () C:\ProgramData\Oracle 2014-02-17 23:26 - 2014-02-17 23:26 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-02-17 23:26 - 2014-02-17 23:25 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-02-17 23:25 - 2014-02-17 23:25 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-02-17 23:25 - 2014-02-17 23:25 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-02-17 23:25 - 2014-02-17 23:24 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-02-17 23:24 - 2014-03-06 19:02 - 00000000 ____D () C:\Users\Selda\AppData\Local\Adobe 2014-02-17 23:24 - 2014-02-17 23:24 - 00000000 ____D () C:\Program Files\Java 2014-02-17 23:23 - 2014-02-17 23:23 - 00000000 ____D () C:\Users\Selda\AppData\Local\AOL 2014-02-17 22:15 - 2014-03-01 15:19 - 00000052 _____ () C:\Windows\system32\DOErrors.log 2014-02-17 22:15 - 2014-02-17 22:15 - 00000000 ____D () C:\Users\Selda\AppData\Local\Hewlett-Packard 2014-02-17 22:14 - 2014-02-17 22:14 - 00000000 ____D () C:\Users\Selda\Documents\Bluetooth-Exchange-Ordner 2014-02-17 22:14 - 2014-02-17 22:14 - 00000000 ____D () C:\Users\Selda\Bluetooth Software 2014-02-17 22:13 - 2014-03-07 21:42 - 00000582 _____ () C:\Windows\Tasks\Norton Internet Security - Systemprüfung ausführen - Selda.job 2014-02-17 22:13 - 2014-02-23 11:53 - 00000000 ____D () C:\Users\Selda\AppData\Local\QuickPlay 2014-02-17 22:13 - 2014-02-20 15:21 - 00070744 _____ () C:\Users\Selda\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Symantec 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\ATI 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 ____D () C:\Users\Selda\AppData\Local\ATI 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 _____ () C:\Users\Selda\AppData\Local\QSwitch.txt 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 _____ () C:\Users\Selda\AppData\Local\DSwitch.txt 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 _____ () C:\Users\Selda\AppData\Local\AtStart.txt 2014-02-17 22:12 - 2014-02-25 22:58 - 00000944 _____ () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-02-17 22:12 - 2014-02-21 23:05 - 00000949 _____ () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-17 22:12 - 2014-02-21 21:50 - 00000915 _____ () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk 2014-02-17 22:12 - 2014-02-17 22:15 - 00000000 ____D () C:\Users\Selda\AppData\Local\VirtualStore 2014-02-17 22:12 - 2014-02-17 22:12 - 00000044 _____ () C:\Windows\system\hpsysdrv.dat 2014-02-17 22:11 - 2014-02-17 22:11 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Macromedia 2014-02-17 22:10 - 2014-03-06 19:03 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Adobe 2014-02-17 22:10 - 2014-03-01 18:21 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Hewlett-Packard 2014-02-17 22:10 - 2014-02-17 22:10 - 00000373 ____H () C:\IPH.PH 2014-02-17 22:10 - 2014-02-17 22:10 - 00000000 ____D () C:\ProgramData\Viewpoint 2014-02-17 22:10 - 2014-02-17 22:10 - 00000000 ____D () C:\Program Files\Viewpoint 2014-02-17 22:10 - 2014-02-17 22:10 - 00000000 ____D () C:\Program Files\Common Files\AOL 2014-02-17 22:10 - 2014-02-17 22:10 - 00000000 ____D () C:\Program Files\AIM6 2014-02-17 22:10 - 2008-05-25 02:54 - 00001894 _____ () C:\Users\Public\Desktop\Für Kinder.lnk 2014-02-17 22:10 - 2008-05-25 02:53 - 00002035 _____ () C:\Users\Public\Desktop\eBay.lnk 2014-02-17 22:09 - 2008-05-25 02:57 - 00001859 _____ () C:\Users\Public\Desktop\HP Total Care Advisor.lnk 2014-02-17 22:08 - 2014-02-17 22:08 - 00000000 __RSH () C:\Windows\system32\Drivers\103C_HP_cNB_Pavilion dv5 Notebook PC_Y5335KV_0U_QCNF8404NQ5_E465488-042_4A_I3600_SQuanta_V98.36_F.38_T091111_WV3-1_L407_M3069_J320_7AMD_8F31_92.20_#140217_N10EC8168;168C002A_(FV675EA#ABD)_XMOBILE_CN10_Z_2Rev 1.MRK 2014-02-17 22:07 - 2014-03-07 21:50 - 00000000 ____D () C:\Users\Selda 2014-02-17 22:07 - 2014-02-17 22:07 - 00000020 ___SH () C:\Users\Selda\ntuser.ini 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\Startmenü 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\Netzwerkumgebung 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\Druckumgebung 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\Documents\Eigene Musik 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\Documents\Eigene Bilder 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\AppData\Local\Verlauf 2014-02-17 22:07 - 2014-02-17 21:54 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 2014-02-17 22:07 - 2014-02-17 21:52 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-02-17 22:07 - 2008-01-21 03:42 - 00000000 ___RD () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-02-17 22:07 - 2008-01-21 03:42 - 00000000 ___RD () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Programme 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-17 21:55 - 2014-02-17 21:55 - 00000000 ____D () C:\ProgramData\ATI 2014-02-17 21:54 - 2014-03-07 19:44 - 00000269 _____ () C:\Users\Public\Documents\hpqp.ini 2014-02-17 21:54 - 2014-02-17 21:54 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 2014-02-17 21:54 - 2014-02-17 21:54 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 2014-02-17 21:54 - 2014-02-17 21:54 - 00000000 ____D () C:\ProgramData\CyberLink 2014-02-17 21:54 - 2000-06-23 12:46 - 00033820 _____ () C:\Windows\WMPrfDeu.prx 2014-02-17 21:49 - 2014-02-17 21:49 - 00000000 ____D () C:\Program Files\Common Files\LightScribe 2014-02-17 21:48 - 2014-02-17 21:55 - 00000045 _____ () C:\Windows\system32\HDDTempError.log 2014-02-17 21:47 - 2014-02-17 21:47 - 00000000 _____ () C:\Windows\ativpsrm.bin 2014-02-17 21:45 - 2014-02-17 21:45 - 00000000 ____D () C:\Windows\system32\es-MX 2014-02-17 21:45 - 2014-02-17 21:45 - 00000000 ____D () C:\Windows\system32\es-AR 2014-02-17 21:45 - 2014-02-17 21:45 - 00000000 ____D () C:\Program Files\WIDCOMM 2014-02-17 21:45 - 2008-02-01 09:41 - 00233472 _____ (Broadcom Corporation.) C:\Windows\system32\BtwRSupport.dll 2014-02-17 21:45 - 2008-02-01 09:41 - 00080936 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwavdt.sys 2014-02-17 21:45 - 2008-02-01 09:41 - 00080424 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwaudio.sys 2014-02-17 21:45 - 2008-02-01 09:41 - 00016168 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwrchid.sys 2014-02-17 21:44 - 2014-02-17 21:44 - 00000000 ____D () C:\Program Files\AMD 2014-02-17 21:44 - 2008-01-07 21:42 - 00015416 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\Amddfltr.sys 2014-02-17 21:43 - 2014-02-17 21:43 - 00000000 ____D () C:\Windows\system32\HPMDP 2014-02-17 21:43 - 2014-02-17 21:43 - 00000000 ____D () C:\Windows\Driver Cache 2014-02-17 21:43 - 2014-02-17 21:43 - 00000000 ____D () C:\Program Files\AVerMedia 2014-02-17 21:42 - 2014-02-17 21:42 - 00000000 ____D () C:\Windows\system32\nn-NO 2014-02-17 21:42 - 2014-02-17 21:42 - 00000000 ____D () C:\ProgramData\Atheros 2014-02-17 21:42 - 2014-02-17 21:42 - 00000000 ____D () C:\Program Files\Cisco 2014-02-17 21:42 - 2014-02-17 21:42 - 00000000 ____D () C:\Program Files\Atheros 2014-02-17 21:42 - 2008-04-27 11:07 - 00909824 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athr.sys 2014-02-17 21:42 - 2008-04-22 05:13 - 00376832 _____ (Atheros) C:\Windows\system32\S64CPA.exe 2014-02-17 21:42 - 2008-04-22 05:13 - 00053248 _____ (Atheros) C:\Windows\system32\athihvui.dll 2014-02-17 21:42 - 2008-04-22 05:12 - 00393216 _____ (Atheros) C:\Windows\system32\athihvs.dll 2014-02-17 21:41 - 2014-02-17 21:41 - 00000000 ____D () C:\Program Files\Realtek 2014-02-17 21:41 - 2008-04-14 20:05 - 00118784 _____ (Realtek Corporation ) C:\Windows\system32\Drivers\Rtlh86.sys 2014-02-17 21:40 - 2008-06-27 20:53 - 00376832 _____ (Andrea Electronics Corporation) C:\Windows\system32\aestecap.dll 2014-02-17 21:40 - 2008-06-27 20:53 - 00133632 _____ (Andrea Electronics Corporation) C:\Windows\system32\aestacap.dll 2014-02-17 21:40 - 2008-06-27 20:53 - 00073728 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTCom.dll 2014-02-17 21:40 - 2008-06-27 20:53 - 00053248 _____ (Andrea Electronics Corporation) C:\Windows\system32\aestaren.dll 2014-02-17 21:40 - 2008-06-27 20:42 - 00442467 _____ (IDT, Inc.) C:\Windows\sttray.exe 2014-02-17 21:40 - 2008-06-27 20:41 - 02473984 _____ (IDT, Inc.) C:\Windows\system32\stlang.dll 2014-02-17 21:40 - 2008-06-27 20:40 - 05615715 _____ (IDT, Inc.) C:\Windows\system32\idtcpl.cpl 2014-02-17 21:40 - 2008-06-27 20:40 - 00516096 _____ (IDT, Inc.) C:\Windows\system32\idtmini1.exe 2014-02-17 21:39 - 2014-02-17 21:41 - 00000000 ____D () C:\Program Files\IDT 2014-02-17 21:39 - 2014-02-17 21:39 - 00000251 _____ () C:\Windows\xUninstall.bat 2014-02-17 21:39 - 2008-06-27 20:43 - 00678400 _____ (IDT, Inc.) C:\Windows\system32\stapo.dll 2014-02-17 21:39 - 2008-06-27 20:42 - 00173568 _____ (IDT, Inc.) C:\Windows\system32\staco.dll 2014-02-17 21:39 - 2008-06-27 20:41 - 00406016 _____ (IDT, Inc.) C:\Windows\system32\stapi32.dll 2014-02-17 21:38 - 2014-02-17 21:39 - 00000000 ____D () C:\Windows\JMCR_DIR 2014-02-17 21:38 - 2014-02-17 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01000.Wdf 2014-02-17 21:37 - 2014-02-17 21:37 - 00000000 ____D () C:\Program Files\Synaptics 2014-02-17 21:35 - 2014-02-17 21:36 - 00000000 ____D () C:\Program Files\ATI Technologies 2014-02-17 21:33 - 2014-02-17 21:33 - 00000000 ____D () C:\Program Files\ATI 2014-02-17 21:29 - 2014-03-06 10:34 - 00000012 _____ () C:\Windows\bthservsdp.dat 2014-02-17 21:28 - 2014-03-07 21:23 - 01913636 _____ () C:\Windows\WindowsUpdate.log ==================== One Month Modified Files and Folders ======= 2014-03-07 21:52 - 2014-03-07 21:52 - 00018233 _____ () C:\Users\Selda\Downloads\FRST.txt 2014-03-07 21:52 - 2014-03-07 21:52 - 00000000 ____D () C:\FRST 2014-03-07 21:51 - 2014-03-07 21:51 - 01145344 _____ (Farbar) C:\Users\Selda\Downloads\FRST.exe 2014-03-07 21:50 - 2014-03-07 21:50 - 00000472 _____ () C:\Users\Selda\Downloads\defogger_disable.log 2014-03-07 21:50 - 2014-03-07 21:50 - 00000000 _____ () C:\Users\Selda\defogger_reenable 2014-03-07 21:50 - 2014-02-17 22:07 - 00000000 ____D () C:\Users\Selda 2014-03-07 21:49 - 2014-03-07 21:49 - 00050477 _____ () C:\Users\Selda\Downloads\Defogger.exe 2014-03-07 21:43 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-07 21:43 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-07 21:42 - 2014-02-17 22:13 - 00000582 _____ () C:\Windows\Tasks\Norton Internet Security - Systemprüfung ausführen - Selda.job 2014-03-07 21:31 - 2014-03-07 21:31 - 00000974 _____ () C:\Users\Selda\Desktop\test.txt 2014-03-07 21:23 - 2014-02-17 21:28 - 01913636 _____ () C:\Windows\WindowsUpdate.log 2014-03-07 21:21 - 2014-02-18 00:57 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-07 21:01 - 2014-02-18 00:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-03-07 20:55 - 2014-02-18 00:57 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-07 20:45 - 2014-02-18 00:08 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Skype 2014-03-07 19:44 - 2014-02-17 21:54 - 00000269 _____ () C:\Users\Public\Documents\hpqp.ini 2014-03-07 19:44 - 2006-11-02 13:37 - 00000000 ___RD () C:\Users\Public\Recorded TV 2014-03-07 19:43 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-06 23:00 - 2014-03-04 23:54 - 00000000 ____D () C:\Users\Selda\Desktop\Hits aktuell 2014-03-06 21:02 - 2014-03-06 21:02 - 00004608 _____ () C:\Users\Selda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-03-06 20:25 - 2014-03-06 19:24 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Apple Computer 2014-03-06 19:25 - 2014-03-06 19:25 - 00000000 ____D () C:\Users\Selda\AppData\Local\Apple Computer 2014-03-06 19:22 - 2014-03-06 19:21 - 00000000 ____D () C:\Program Files\QuickTime 2014-03-06 19:21 - 2014-03-06 19:21 - 00001726 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-03-06 19:21 - 2014-03-06 19:21 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-03-06 19:19 - 2014-03-06 19:19 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\Users\Selda\AppData\Local\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\ProgramData\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\Program Files\Apple Software Update 2014-03-06 19:17 - 2014-03-06 19:15 - 41945432 _____ (Apple Inc.) C:\Users\Selda\Downloads\QuickTimeInstaller.exe 2014-03-06 19:08 - 2014-03-06 19:08 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\at.helbling.eversion.pamina 2014-03-06 19:07 - 2014-03-06 19:07 - 00000941 _____ () C:\Users\Public\Desktop\PaMina e-version.lnk 2014-03-06 19:07 - 2014-03-06 19:07 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-03-06 19:07 - 2014-03-06 19:07 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-03-06 19:07 - 2014-03-06 19:06 - 00000000 ____D () C:\Program Files\Helbling 2014-03-06 19:07 - 2008-05-25 02:43 - 00000000 ____D () C:\ProgramData\Adobe 2014-03-06 19:07 - 2008-05-25 02:43 - 00000000 ____D () C:\Program Files\Adobe 2014-03-06 19:06 - 2014-03-06 19:06 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR 2014-03-06 19:03 - 2014-02-17 22:10 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Adobe 2014-03-06 19:02 - 2014-02-17 23:24 - 00000000 ____D () C:\Users\Selda\AppData\Local\Adobe 2014-03-06 10:35 - 2006-11-02 14:01 - 00019530 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-03-06 10:34 - 2014-02-17 21:29 - 00000012 _____ () C:\Windows\bthservsdp.dat 2014-03-04 11:29 - 2014-02-18 01:00 - 00001963 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-03-04 00:18 - 2014-03-04 00:18 - 00000000 ____D () C:\ProgramData\HP Product Assistant 2014-03-02 17:26 - 2006-11-02 11:33 - 01565124 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-02 16:16 - 2014-03-02 16:16 - 00010484 _____ () C:\Users\Selda\Downloads\Einfuehrungsstunde Tanzen.zip 2014-03-02 16:09 - 2014-03-02 16:09 - 00023552 _____ () C:\Users\Selda\Downloads\Freies Tanzen.xls 2014-03-01 18:21 - 2014-02-17 22:10 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Hewlett-Packard 2014-03-01 15:19 - 2014-02-17 22:15 - 00000052 _____ () C:\Windows\system32\DOErrors.log 2014-03-01 15:19 - 2008-05-25 02:11 - 00000000 ____D () C:\ProgramData\Hewlett-Packard 2014-02-28 00:59 - 2008-05-25 01:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared 2014-02-28 00:46 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-02-27 15:00 - 2014-02-23 21:59 - 00000000 ____D () C:\ProgramData\HP 2014-02-27 14:27 - 2014-02-23 21:59 - 00146162 _____ () C:\Windows\hpoins18.dat 2014-02-27 14:27 - 2014-02-23 21:59 - 00001313 _____ () C:\ProgramData\hpzinstall.log 2014-02-27 14:26 - 2006-11-02 13:52 - 00109578 _____ () C:\Windows\setupact.log 2014-02-27 14:26 - 2006-11-02 11:23 - 00000179 _____ () C:\Windows\win.ini 2014-02-26 16:54 - 2008-01-21 03:47 - 00074270 _____ () C:\Windows\PFRO.log 2014-02-25 23:04 - 2014-02-25 23:04 - 00000000 ____D () C:\Users\Selda\Desktop\bewegungslieder 2014-02-25 22:58 - 2014-02-17 22:12 - 00000944 _____ () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-02-25 22:19 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache 2014-02-25 00:52 - 2014-02-25 00:52 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-02-25 00:33 - 2008-05-25 02:27 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-02-25 00:24 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\NDF 2014-02-25 00:19 - 2014-02-25 00:19 - 00000056 ____H () C:\Windows\system32\ezsidmv.dat 2014-02-23 22:54 - 2014-02-23 22:54 - 00000000 ____D () C:\ProgramData\WEBREG 2014-02-23 22:54 - 2014-02-23 22:29 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\HP 2014-02-23 22:31 - 2014-02-23 22:28 - 00000680 _____ () C:\Users\Selda\AppData\Local\d3d9caps.dat 2014-02-23 22:19 - 2014-02-23 22:19 - 00001870 _____ () C:\Users\Public\Desktop\Shop für HP Zubehör.lnk 2014-02-23 22:19 - 2014-02-23 22:19 - 00000000 ____D () C:\ProgramData\HPSSUPPLY 2014-02-23 22:19 - 2008-05-25 01:45 - 00000000 ____D () C:\Program Files\HP 2014-02-23 22:18 - 2014-02-23 22:18 - 00002029 _____ () C:\Users\Public\Desktop\HP Photosmart Essential.lnk 2014-02-23 22:18 - 2014-02-23 22:10 - 00000000 ____D () C:\Program Files\Common Files\HP 2014-02-23 22:14 - 2014-02-23 22:14 - 00001204 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk 2014-02-23 22:11 - 2014-02-23 22:11 - 00000000 ____D () C:\Program Files\Common Files\Hewlett-Packard 2014-02-23 22:11 - 2006-11-02 13:37 - 00000000 ____D () C:\Windows\twain_32 2014-02-23 22:07 - 2008-05-25 02:55 - 00030404 _____ () C:\Windows\DPINST.LOG 2014-02-23 21:57 - 2014-02-23 21:53 - 167339144 _____ () C:\Users\Selda\Downloads\AIO_CDA_Full_Network_deu_NB.exe 2014-02-23 21:18 - 2014-02-23 21:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf 2014-02-23 19:42 - 2014-02-23 19:42 - 00387584 _____ () C:\Users\Selda\Downloads\KL_bodyparts_guessing.ppt 2014-02-23 19:42 - 2014-02-23 19:42 - 00387584 _____ () C:\Users\Selda\Downloads\KL_bodyparts_guessing (1).ppt 2014-02-23 19:42 - 2014-02-23 19:42 - 00214528 _____ () C:\Users\Selda\Downloads\KL_mybody.ppt 2014-02-23 19:41 - 2008-05-25 02:39 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-02-23 11:53 - 2014-02-17 22:13 - 00000000 ____D () C:\Users\Selda\AppData\Local\QuickPlay 2014-02-23 11:48 - 2006-11-02 13:47 - 00296656 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-02-23 11:46 - 2014-02-23 11:46 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2014-02-23 11:46 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\el-GR 2014-02-23 11:46 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\de-DE 2014-02-23 11:45 - 2008-05-25 11:02 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2014-02-23 11:45 - 2006-11-02 13:37 - 00000000 ____D () C:\Windows\system32\XPSViewer 2014-02-23 11:45 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Journal 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\zh-TW 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\zh-CN 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\uk-UA 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\th-TH 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sv-SE 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sl-SI 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sk-SK 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ru-RU 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ro-RO 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pt-PT 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pt-BR 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pl-PL 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\nl-NL 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\nb-NO 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\lv-LV 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\lt-LT 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ko-KR 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ja-JP 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\it-IT 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\hu-HU 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\hr-HR 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\he-IL 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\fr-FR 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\fi-FI 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\et-EE 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\bg-BG 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ar-SA 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Program Files\Common Files\System 2014-02-23 00:49 - 2014-02-23 00:49 - 03063561 _____ (Macromedia, Inc.) C:\Users\Public\Documents\MobileTV.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02989660 _____ (Macromedia, Inc.) C:\Users\Public\Documents\DVD.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02864396 _____ (Macromedia, Inc.) C:\Users\Public\Documents\MPV.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02331174 _____ (Macromedia, Inc.) C:\Users\Public\Documents\Karaoke.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02231606 _____ (Macromedia, Inc.) C:\Users\Public\Documents\Games.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 00000021 _____ () C:\Users\Public\Documents\hpqp.txt 2014-02-23 00:49 - 2014-02-23 00:49 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\CyberLink 2014-02-23 00:49 - 2014-02-23 00:49 - 00000000 ____D () C:\Users\Public\Documents\DEU 2014-02-23 00:14 - 2008-05-25 02:54 - 00000000 ____D () C:\Program Files\EasyBits For Kids 2014-02-21 23:05 - 2014-02-17 22:12 - 00000949 _____ () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-21 23:02 - 2006-11-02 12:18 - 00000000 ___RD () C:\Windows\Offline Web Pages 2014-02-21 22:37 - 2014-02-21 18:55 - 00008448 _____ () C:\Windows\IE9_main.log 2014-02-21 22:05 - 2014-02-21 22:05 - 12345344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-02-21 22:05 - 2014-02-21 22:05 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-21 22:05 - 2014-02-21 22:05 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-21 22:05 - 2014-02-21 22:05 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-02-21 22:05 - 2014-02-21 22:05 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\advpack.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-02-21 22:05 - 2014-02-21 22:05 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-02-21 22:05 - 2006-11-02 07:32 - 00008798 _____ () C:\Windows\system32\icrav03.rat 2014-02-21 22:05 - 2006-11-02 07:32 - 00001988 _____ () C:\Windows\system32\ticrf.rat 2014-02-21 22:03 - 2014-02-21 22:03 - 02873344 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 01075712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00979456 _____ (Microsoft Corporation) C:\Windows\system32\MFH264Dec.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\MFHEAACdec.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4src.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 01554432 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe 2014-02-21 22:02 - 2014-02-21 22:02 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2014-02-21 22:02 - 2014-02-21 22:02 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\dxdiag.exe 2014-02-21 21:58 - 2014-02-21 21:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00189440 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-02-21 21:50 - 2014-02-17 22:12 - 00000915 _____ () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Photo Gallery 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Defender 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Collaboration 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Calendar 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Movie Maker 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\vi-VN 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\eu-ES 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\ca-ES 2014-02-21 21:39 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\SLUI 2014-02-21 21:39 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers 2014-02-21 21:39 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\IME 2014-02-21 21:05 - 2014-02-21 21:05 - 00000000 ____D () C:\Windows\system32\SPReview 2014-02-21 20:20 - 2014-02-21 20:20 - 00000000 ____D () C:\Windows\system32\EventProviders 2014-02-21 20:15 - 2014-02-21 20:06 - 365230920 _____ (Microsoft Corporation) C:\Users\Selda\Downloads\Windows6.0-KB948465-X86.exe 2014-02-21 18:55 - 2014-02-21 18:55 - 18733360 _____ (Microsoft Corporation) C:\Users\Selda\Downloads\IE9-WindowsVista-x86-deu.exe 2014-02-21 18:18 - 2008-05-25 01:30 - 00000000 ____D () C:\Program Files\Norton Internet Security 2014-02-21 15:01 - 2014-02-18 00:57 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-02-21 15:01 - 2014-02-18 00:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-02-20 15:21 - 2014-02-17 22:13 - 00070744 _____ () C:\Users\Selda\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-20 03:38 - 2008-05-25 02:26 - 00000000 ____D () C:\Program Files\Microsoft Works 2014-02-20 03:30 - 2014-02-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-02-20 03:30 - 2014-02-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-02-20 03:25 - 2006-11-02 12:18 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-02-18 22:15 - 2014-02-18 22:15 - 00000784 _____ () C:\Windows\ie8_main.log 2014-02-18 22:12 - 2014-02-18 19:39 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Google 2014-02-18 21:06 - 2014-02-18 21:00 - 00000438 _____ () C:\Users\Selda\AppData\Roaming\wklnhst.dat 2014-02-18 21:03 - 2014-02-18 21:00 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Template 2014-02-18 19:51 - 2014-02-18 19:51 - 00000000 ____D () C:\Users\Selda\AppData\Local\Skype 2014-02-18 19:50 - 2014-02-18 19:50 - 00001880 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-02-18 19:50 - 2014-02-18 19:50 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-02-18 19:50 - 2014-02-18 19:49 - 00000000 ___RD () C:\Program Files\Skype 2014-02-18 19:50 - 2014-02-17 23:58 - 00000000 ____D () C:\ProgramData\Skype 2014-02-18 19:39 - 2014-02-18 00:57 - 00000000 ____D () C:\Users\Selda\AppData\Local\Google 2014-02-18 10:56 - 2008-05-25 02:40 - 00000000 ____D () C:\Program Files\Microsoft.NET 2014-02-18 10:33 - 2014-02-17 23:43 - 00000000 ____D () C:\Users\Public\Documents\Symantec 2014-02-18 07:21 - 2008-05-25 02:09 - 00000012 _____ () C:\Windows\CSUP.txt 2014-02-18 02:20 - 2014-02-18 02:20 - 00000000 ____D () C:\Windows\system32\WindowsPowerShell 2014-02-18 01:36 - 2014-02-18 01:32 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-18 01:00 - 2014-02-18 00:57 - 00000000 ____D () C:\Program Files\Google 2014-02-18 00:58 - 2014-02-18 00:57 - 00000000 ____D () C:\ProgramData\Google 2014-02-18 00:37 - 2014-02-18 00:36 - 00283642 _____ () C:\Windows\msxml4-KB954430-enu.LOG 2014-02-18 00:35 - 2014-02-18 00:34 - 00289738 _____ () C:\Windows\msxml4-KB973688-enu.LOG 2014-02-18 00:34 - 2014-02-18 00:34 - 00000000 ____D () C:\Program Files\MSXML 4.0 2014-02-18 00:17 - 2008-05-25 02:54 - 00588472 _____ (EasyBits Software AS) C:\Windows\system32\ezsvc7x.dll 2014-02-17 23:51 - 2008-05-25 01:29 - 00000000 ____D () C:\ProgramData\Symantec 2014-02-17 23:50 - 2008-05-25 01:29 - 00124464 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS 2014-02-17 23:50 - 2008-05-25 01:29 - 00010635 _____ () C:\Windows\system32\Drivers\SYMEVENT.CAT 2014-02-17 23:50 - 2008-05-25 01:29 - 00000000 ____D () C:\Program Files\Symantec 2014-02-17 23:45 - 2006-11-02 12:18 - 00000000 __RHD () C:\Users\Default 2014-02-17 23:26 - 2014-02-17 23:26 - 00000000 ____D () C:\Windows\Sun 2014-02-17 23:26 - 2014-02-17 23:26 - 00000000 ____D () C:\ProgramData\Sun 2014-02-17 23:26 - 2014-02-17 23:26 - 00000000 ____D () C:\ProgramData\Oracle 2014-02-17 23:26 - 2014-02-17 23:26 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-02-17 23:25 - 2014-02-17 23:26 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-02-17 23:25 - 2014-02-17 23:25 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-02-17 23:25 - 2014-02-17 23:25 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-02-17 23:24 - 2014-02-17 23:25 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-02-17 23:24 - 2014-02-17 23:24 - 00000000 ____D () C:\Program Files\Java 2014-02-17 23:23 - 2014-02-17 23:23 - 00000000 ____D () C:\Users\Selda\AppData\Local\AOL 2014-02-17 23:23 - 2008-05-25 02:03 - 00000049 __RSH () C:\Users\Public\Documents\HBEPGUID.TXT 2014-02-17 22:15 - 2014-02-17 22:15 - 00000000 ____D () C:\Users\Selda\AppData\Local\Hewlett-Packard 2014-02-17 22:15 - 2014-02-17 22:12 - 00000000 ____D () C:\Users\Selda\AppData\Local\VirtualStore 2014-02-17 22:14 - 2014-02-17 22:14 - 00000000 ____D () C:\Users\Selda\Documents\Bluetooth-Exchange-Ordner 2014-02-17 22:14 - 2014-02-17 22:14 - 00000000 ____D () C:\Users\Selda\Bluetooth Software 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Symantec 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\ATI 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 ____D () C:\Users\Selda\AppData\Local\ATI 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 _____ () C:\Users\Selda\AppData\Local\QSwitch.txt 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 _____ () C:\Users\Selda\AppData\Local\DSwitch.txt 2014-02-17 22:13 - 2014-02-17 22:13 - 00000000 _____ () C:\Users\Selda\AppData\Local\AtStart.txt 2014-02-17 22:12 - 2014-02-17 22:12 - 00000044 _____ () C:\Windows\system\hpsysdrv.dat 2014-02-17 22:12 - 2008-04-10 11:26 - 00000000 ____D () C:\Windows\SMINST 2014-02-17 22:12 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system 2014-02-17 22:11 - 2014-02-17 22:11 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Macromedia 2014-02-17 22:10 - 2014-02-17 22:10 - 00000373 ____H () C:\IPH.PH 2014-02-17 22:10 - 2014-02-17 22:10 - 00000000 ____D () C:\ProgramData\Viewpoint 2014-02-17 22:10 - 2014-02-17 22:10 - 00000000 ____D () C:\Program Files\Viewpoint 2014-02-17 22:10 - 2014-02-17 22:10 - 00000000 ____D () C:\Program Files\Common Files\AOL 2014-02-17 22:10 - 2014-02-17 22:10 - 00000000 ____D () C:\Program Files\AIM6 2014-02-17 22:10 - 2008-05-25 10:55 - 00000000 ___HD () C:\HP 2014-02-17 22:10 - 2008-05-25 02:11 - 00000000 ___RD () C:\Program Files\Online Services 2014-02-17 22:09 - 2006-11-02 13:37 - 00000000 ____D () C:\Windows\system32\restore 2014-02-17 22:09 - 1999-03-30 19:17 - 00000000 ___HD () C:\System.sav 2014-02-17 22:08 - 2014-02-17 22:08 - 00000000 __RSH () C:\Windows\system32\Drivers\103C_HP_cNB_Pavilion dv5 Notebook PC_Y5335KV_0U_QCNF8404NQ5_E465488-042_4A_I3600_SQuanta_V98.36_F.38_T091111_WV3-1_L407_M3069_J320_7AMD_8F31_92.20_#140217_N10EC8168;168C002A_(FV675EA#ABD)_XMOBILE_CN10_Z_2Rev 1.MRK 2014-02-17 22:07 - 2014-02-17 22:07 - 00000020 ___SH () C:\Users\Selda\ntuser.ini 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\Startmenü 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\Netzwerkumgebung 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\Druckumgebung 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\Documents\Eigene Musik 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\Documents\Eigene Bilder 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-17 22:07 - 2014-02-17 22:07 - 00000000 _SHDL () C:\Users\Selda\AppData\Local\Verlauf 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\Programme 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-17 22:03 - 2014-02-17 22:03 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-17 22:03 - 2006-11-02 12:18 - 00000000 ____D () C:\Program Files\Windows NT 2014-02-17 21:56 - 2008-05-25 11:05 - 00000000 ____D () C:\Windows\panther 2014-02-17 21:55 - 2014-02-17 21:55 - 00000000 ____D () C:\ProgramData\ATI 2014-02-17 21:55 - 2014-02-17 21:48 - 00000045 _____ () C:\Windows\system32\HDDTempError.log 2014-02-17 21:55 - 2006-11-02 13:48 - 00005506 _____ () C:\Windows\DtcInstall.log 2014-02-17 21:54 - 2014-02-17 22:07 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 2014-02-17 21:54 - 2014-02-17 21:54 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 2014-02-17 21:54 - 2014-02-17 21:54 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 2014-02-17 21:54 - 2014-02-17 21:54 - 00000000 ____D () C:\ProgramData\CyberLink 2014-02-17 21:54 - 2008-05-25 01:27 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-02-17 21:53 - 2008-05-25 02:44 - 00000000 ____D () C:\Program Files\CyberLink 2014-02-17 21:52 - 2014-02-17 22:07 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-02-17 21:52 - 2008-05-25 02:44 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-02-17 21:52 - 2008-05-25 02:44 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-02-17 21:49 - 2014-02-17 21:49 - 00000000 ____D () C:\Program Files\Common Files\LightScribe 2014-02-17 21:47 - 2014-02-17 21:47 - 00000000 _____ () C:\Windows\ativpsrm.bin 2014-02-17 21:45 - 2014-02-17 21:45 - 00000000 ____D () C:\Windows\system32\es-MX 2014-02-17 21:45 - 2014-02-17 21:45 - 00000000 ____D () C:\Windows\system32\es-AR 2014-02-17 21:45 - 2014-02-17 21:45 - 00000000 ____D () C:\Program Files\WIDCOMM 2014-02-17 21:44 - 2014-02-17 21:44 - 00000000 ____D () C:\Program Files\AMD 2014-02-17 21:43 - 2014-02-17 21:43 - 00000000 ____D () C:\Windows\system32\HPMDP 2014-02-17 21:43 - 2014-02-17 21:43 - 00000000 ____D () C:\Windows\Driver Cache 2014-02-17 21:43 - 2014-02-17 21:43 - 00000000 ____D () C:\Program Files\AVerMedia 2014-02-17 21:43 - 2008-05-25 01:22 - 00000000 ____D () C:\Program Files\Hewlett-Packard 2014-02-17 21:42 - 2014-02-17 21:42 - 00000000 ____D () C:\Windows\system32\nn-NO 2014-02-17 21:42 - 2014-02-17 21:42 - 00000000 ____D () C:\ProgramData\Atheros 2014-02-17 21:42 - 2014-02-17 21:42 - 00000000 ____D () C:\Program Files\Cisco 2014-02-17 21:42 - 2014-02-17 21:42 - 00000000 ____D () C:\Program Files\Atheros 2014-02-17 21:41 - 2014-02-17 21:41 - 00000000 ____D () C:\Program Files\Realtek 2014-02-17 21:41 - 2014-02-17 21:39 - 00000000 ____D () C:\Program Files\IDT 2014-02-17 21:39 - 2014-02-17 21:39 - 00000251 _____ () C:\Windows\xUninstall.bat 2014-02-17 21:39 - 2014-02-17 21:38 - 00000000 ____D () C:\Windows\JMCR_DIR 2014-02-17 21:38 - 2014-02-17 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01000.Wdf 2014-02-17 21:37 - 2014-02-17 21:37 - 00000000 ____D () C:\Program Files\Synaptics 2014-02-17 21:36 - 2014-02-17 21:35 - 00000000 ____D () C:\Program Files\ATI Technologies 2014-02-17 21:33 - 2014-02-17 21:33 - 00000000 ____D () C:\Program Files\ATI 2014-02-17 21:30 - 2008-02-08 07:51 - 00005949 _____ () C:\Windows\TSSysprep.log Some content of TEMP: ==================== C:\Users\Selda\AppData\Local\Temp\HPQSi.exe C:\Users\Selda\AppData\Local\Temp\SP42277.exe C:\Users\Selda\AppData\Local\Temp\symlcsv1.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-07 19:50 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 07-03-2014 01 Ran by at 2014-03-07 21:54:28 Running from C:\Users\\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Norton Internet Security (Enabled - Up to date) {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton Internet Security (Enabled - Up to date) {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8} FW: Norton Internet Security (Enabled) {B0F2DB13-C654-2E74-30D4-99C9310F0F2E} ==================== Installed Programs ====================== 32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version: - Microsoft Corporation) Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden ActiveCheck component for HP Active Support Library (Version: 3.0.0.2 - Hewlett-Packard) Hidden Adobe AIR (HKLM\...\Adobe AIR) (Version: 2.7.0.19530 - Adobe Systems Incorporated) Adobe AIR (Version: 2.7.0.19530 - Adobe Systems Incorporated) Hidden Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Reader 8.1.0 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A81000000003}) (Version: 8.1.0 - Adobe Systems Incorporated) Adobe Shockwave Player (HKLM\...\{1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A}) (Version: 10.2.0.023 - Adobe Systems, Inc.) AIM (HKLM\...\AIM_6) (Version: - ) AIO_CDA_ProductContext (Version: 82.0.233.000 - Hewlett-Packard) Hidden AIO_CDA_Software (Version: 82.0.233.000 - Hewlett-Packard) Hidden AIO_Scan (Version: 82.0.173.000 - Hewlett-Packard) Hidden AMD Driver Support for HP 3D DriverGuard (Version: 5.1.0000.0066 - Advanced Micro Devices, Inc.) Hidden AOL Toolbar 5.0 (HKLM\...\AOL Toolbar) (Version: 5.2.69.1 - AOL LLC) AppCore (Version: 1.3 - Symantec Corporation) Hidden Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Atheros Driver Installation Program (HKLM\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 5.0 - Atheros) ATI Catalyst Install Manager (HKLM\...\{80C2AD19-97A2-C829-38DE-5FD5B47F122B}) (Version: 3.0.664.0 - ATI Technologies, Inc.) AVerMedia A309 (MiniCard, DVB-T) 1.0.0.43 (HKLM\...\AVerMedia A309 (MiniCard, DVB-T)) (Version: 1.0.0.43 - AVerMedia TECHNOLOGIES, Inc.) BufferChm (Version: 82.0.173.000 - Hewlett-Packard) Hidden C6100 (Version: 82.0.233.000 - Hewlett-Packard) Hidden c6100_Help (Version: 82.0.233.000 - Hewlett-Packard) Hidden Catalyst Control Center - Branding (HKLM\...\{3FA93E4C-CB3B-4B25-B091-9DB0FCC56A74}) (Version: 1.00.0000 - ATI) Catalyst Control Center Core Implementation (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Graphics Full Existing (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Graphics Full New (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Graphics Light (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Chinese Standard (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Chinese Traditional (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Czech (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Danish (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Dutch (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Finnish (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization French (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization German (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Greek (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Hungarian (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Italian (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Japanese (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Korean (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Norwegian (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Polish (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Portuguese (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Russian (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Spanish (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Swedish (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Thai (Version: 2008.0328.2322.39969 - ATI) Hidden Catalyst Control Center Localization Turkish (Version: 2008.0328.2322.39969 - ATI) Hidden CCC Help Chinese Standard (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Chinese Traditional (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Czech (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Danish (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Dutch (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help English (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Finnish (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help French (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help German (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Greek (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Hungarian (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Italian (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Japanese (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Korean (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Norwegian (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Polish (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Portuguese (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Russian (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Spanish (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Swedish (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Thai (Version: 2008.0328.2321.39969 - ATI) Hidden CCC Help Turkish (Version: 2008.0328.2321.39969 - ATI) Hidden ccc-core-static (Version: 2008.0328.2322.39969 - Ihr Firmenname) Hidden ccCommon (Version: 107.0.4.3 - Symantec) Hidden ccc-utility (Version: 2008.0328.2322.39969 - ATI) Hidden Cisco EAP-FAST Module (HKLM\...\{415B2719-AD3A-4944-B404-C472DB6085B3}) (Version: 2.1.6 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM\...\{83770D14-21B9-44B3-8689-F7B523F94560}) (Version: 1.0.12 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM\...\{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}) (Version: 1.0.13 - Cisco Systems, Inc.) Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Component Framework (Version: 2006.1.3.35 - Symantec Corporation) Hidden Copy (Version: 82.0.188.000 - Hewlett-Packard) Hidden CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden CyberLink DVD Suite (HKLM\...\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 5.5.1519 - CyberLink Corp.) CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.1616 - CyberLink Corp.) CyberLink YouCam (Version: 2.0.1616 - CyberLink Corp.) Hidden Destinations (Version: 82.0.173.000 - Hewlett-Packard) Hidden DeviceManagementQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden DocProc (Version: 8.1.0.0 - Hewlett-Packard) Hidden DocProcQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden Fax (Version: 82.0.188.000 - Hewlett-Packard) Hidden Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.) Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden HP Active Support Library (Version: 3.1.4.1 - Hewlett-Packard) Hidden HP Customer Experience Enhancements (HKLM\...\{B16DA0F8-26BC-4FFC-9363-1D9F3E6C3E21}) (Version: 5.7.0.2630 - Hewlett-Packard) HP Customer Participation Program 8.0 (HKLM\...\HPExtendedCapabilities) (Version: 8.0 - HP) HP Doc Viewer (HKLM\...\{082702D5-5DD8-4600-BCE5-48B15174687F}) (Version: 1.03.0001 - Hewlett-Packard) HP DVD Play 3.7 (HKLM\...\{45D707E9-F3C4-11D9-A373-0050BAE317E1}) (Version: - ) HP Easy Setup - Frontend (HKLM\...\{51E5C397-0AA0-48DD-9CB6-7259AFFDFB0A}) (Version: 5.7.0.2630 - Hewlett-Packard) HP Help and Support (HKLM\...\{28C3E5E6-5ACA-408D-9A46-089C5334EC97}) (Version: 2.0.7.0 - Hewlett-Packard) HP Imaging Device Functions 8.0 (HKLM\...\HP Imaging Device Functions) (Version: 8.0 - HP) HP Integrated Module with Bluetooth wireless technology 6.0.1.6200 (HKLM\...\{03D1988F-469F-4843-8E6E-E5FE9D17889D}) (Version: 6.0.1.6200 - HP) HP OCR Software 8.0 (HKLM\...\HPOCR) (Version: 8.0 - HP) HP Photosmart Essential (HKLM\...\{EB21A812-671B-4D08-B974-2A347F0D8F70}) (Version: 1.12.0.46 - HP) HP Photosmart.All-In-One Driver Software 8.0 .A (HKLM\...\{282E5AB2-8E47-4571-B6FA-6B512555B557}) (Version: 8.0 - HP) HP Product Assistant (Version: 100.000.001.000 - Hewlett-Packard) Hidden HP Quick Launch Buttons 6.40 D3 (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.40 D3 - Hewlett-Packard) HP QuickTouch 1.00 D2 (HKLM\...\{30DAA715-5032-40F9-A0AE-95C9AEBB3E3F}) (Version: 1.0.9 - Hewlett-Packard) HP Solution Center 8.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 8.0 - HP) HP Total Care Advisor (HKLM\...\{f32502b5-5b64-4882-bf61-77f23edcac4f}) (Version: 2.1.3359.2635 - Hewlett-Packard) HP Update (HKLM\...\{C8FD5BC1-92EF-4C15-92A9-F9AC7F61985F}) (Version: 4.000.010.008 - Hewlett-Packard) HP User Guides 0102 (HKLM\...\{F48098CD-2D66-4861-85EC-DC1D4D09D5F9}) (Version: 1.01.0000 - Hewlett-Packard) HP Wireless Assistant (HKLM\...\{A5CE7175-080D-49AC-B5A3-E7E3502428F5}) (Version: 3.00 I2 - Hewlett-Packard) HPAsset component for HP Active Support Library (Version: 3.0.2.2 - Hewlett-Packard) Hidden HPNetworkAssistant (Version: 1.1.70 - Hewlett-Packard.) Hidden HPProductAssistant (Version: 82.0.173.000 - Hewlett-Packard) Hidden HPSSupply (HKLM\...\{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}) (Version: 2.1.3.0000 - Ihr Firmenname) IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.5893.0 - IDT) Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden JMicron JMB38X Flash Media Controller (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.00.10.04 - JMicron Technology Corp.) LabelPrint (HKLM\...\{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.20.2719 - CyberLink Corp.) LightScribe System Software 1.12.33.2 (HKLM\...\{582287DA-0806-4AC0-BF19-C15E3A466034}) (Version: 1.12.33.2 - LightScribe) LiveUpdate (Symantec Corporation) (HKLM\...\PsuedoLiveUpdate) (Version: 3.4.1.232 - Symantec Corporation) LiveUpdate (Symantec Corporation) (Version: 3.4.1.238 - Symantec Corporation) Hidden MarketResearch (Version: 82.0.174.000 - Hewlett-Packard) Hidden Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) My HP Games (HKLM\...\WildTangent hp Master Uninstall) (Version: 1.0.0.43 - WildTangent) Norton AntiVirus (Version: 15.5.0.23 - Symantec Corporation) Hidden Norton AntiVirus Help (Version: 15.0 - Symantec Corporation) Hidden Norton Confidential Core (Version: 2.5.0.32 - Symantec Corporation) Hidden Norton Internet Security (Symantec Corporation) (HKLM\...\SymSetup.{C1C185CA-C531-49F5-A6FA-B838405A049D}) (Version: 15.5.0.23 - Symantec Corporation) Norton Internet Security (Version: 15.5.0.23 - Symantec Corporation) Hidden Norton Protection Center (Version: 3.6.0.18 - Symantec Corporation) Hidden PaMina e-version (HKLM\...\at.helbling.eversion.pamina) (Version: 4.0 - Helbling Verlag Gmbh) PaMina e-version (Version: 4.0 - Helbling Verlag Gmbh) Hidden Power2Go (HKLM\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.3919 - CyberLink Corp.) PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 6.5.2719 - CyberLink Corp.) PowerDirector (Version: 6.5.2719 - CyberLink Corp.) Hidden ProtectSmart Hard Drive Protection (HKLM\...\{CB71A20E-B1B4-4562-81FA-33E1DBD0342F}) (Version: 3.10 A7 - Hewlett-Packard) QuickPlay SlingPlayer 0.4.6 (HKLM\...\SlingMedia.QPSlingPlayer_is1) (Version: 0.4.6 - SlingMedia) QuickTime 7 (HKLM\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Realtek 8169 8168 8101E 8102E Ethernet Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek) Scan (Version: 8.1.0.0 - Hewlett-Packard) Hidden Skins (Version: 2008.0328.2322.39969 - ATI) Hidden Skype™ 6.13 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.13.104 - Skype Technologies S.A.) SolutionCenter (Version: 82.0.188.000 - Hewlett-Packard) Hidden SPBBC 32bit (Version: 4.1.0.15 - Symantec Corporation) Hidden Status (Version: 82.0.173.000 - Hewlett-Packard) Hidden Symantec Real Time Storage Protection Component (Version: 10.2.3.9 - Symantec Corporation) Hidden SymNet (Version: 8.0.3.4 - Symantec Corporation) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated) Toolbox (Version: 82.0.173.000 - Hewlett-Packard) Hidden TrayApp (Version: 82.0.188.000 - Hewlett-Packard) Hidden UnloadSupport (Version: 1.00.0000 - Hewlett-Packard) Hidden Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) Viewpoint Media Player (HKLM\...\ViewpointMediaPlayer) (Version: - ) WebReg (Version: 82.0.173.000 - Hewlett-Packard) Hidden Windows Live Messenger (HKLM\...\{279DB581-239C-4E13-97F8-0F48E40BE75C}) (Version: 8.1.0178.00 - Microsoft Corporation) ==================== Restore Points ========================= 18-02-2014 18:44:50 Windows Update 20-02-2014 02:01:15 Windows Update 20-02-2014 23:27:59 Windows Update 21-02-2014 13:55:05 Windows Update 21-02-2014 14:07:11 Windows Update 21-02-2014 19:22:54 Windows Vista™ Service Pack 2 21-02-2014 20:57:31 Windows-Modulinstallation 21-02-2014 21:05:54 Windows Update 22-02-2014 15:04:03 Windows Update 22-02-2014 23:58:09 Windows Update 23-02-2014 20:23:50 Gerätetreiber-Paketinstallation: Hewlett-Packard Bildverarbeitungsgeräte 23-02-2014 21:01:40 Gerätetreiber-Paketinstallation: Hewlett-Packard Drucker 23-02-2014 21:02:21 Gerätetreiber-Paketinstallation: Hewlett-Packard Bildverarbeitungsgeräte 23-02-2014 21:04:07 Gerätetreiber-Paketinstallation: Hewlett-Packard USB-Controller 24-02-2014 23:32:51 Windows Update 24-02-2014 23:43:21 Windows Update 25-02-2014 23:43:19 Windows Update 27-02-2014 13:37:39 Windows Update 01-03-2014 18:32:49 Geplanter Prüfpunkt 03-03-2014 23:16:38 Installed HP Product Assistant 04-03-2014 09:49:56 Windows Update 06-03-2014 18:19:33 Installed QuickTime 7 07-03-2014 18:51:05 Windows Update ==================== Hosts content: ========================== 2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {08BE33D2-17BD-411E-801D-8D7E373998C0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {3837E7C3-D0F8-4DAB-B526-87CD5A3A0791} - System32\Tasks\ExtendedServicePlan => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2008-04-15] () Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {4670F04F-62FD-40D4-8610-E391CE317F10} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated) Task: {49070B72-00ED-4279-8033-C84138404505} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-18] (Google Inc.) Task: {54C0AC4D-0933-46C8-932E-681089274F8A} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation) Task: {6E1DEF76-D261-4612-8F93-54E710B12853} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-18] (Google Inc.) Task: {8FD24EE8-F692-444E-BBE6-3921706DB98C} - System32\Tasks\HP Health Check => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-04-15] (Hewlett-Packard) Task: {9D3C8042-CB4E-4296-8B16-3E7D84AE0368} - System32\Tasks\Norton Internet Security - Systemprüfung ausführen - Selda => c:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exe [2008-02-07] (Symantec Corporation) Task: {A37AEA0E-82EF-4739-8C59-675E376B925A} - System32\Tasks\ServicePlan => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2008-04-15] () Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => Rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntries Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Norton Internet Security - Systemprüfung ausführen - Selda.job => c:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exe ==================== Loaded Modules (whitelisted) ============= 2014-02-21 20:30 - 2009-04-10 23:28 - 00368640 _____ () C:\Windows\system32\msjetoledb40.dll 2008-05-25 01:45 - 2008-05-14 21:56 - 00120216 _____ () C:\Program Files\HP\QuickPlay\Kernel\TV\CLSchMgr.dll 2008-05-25 01:45 - 2008-05-14 21:56 - 00259480 _____ () C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapEngine.dll 2008-05-25 01:45 - 2008-05-14 21:56 - 00345384 _____ () C:\Program Files\HP\QuickPlay\Kernel\TV\CLTinyDB.dll 2008-03-28 10:19 - 2008-03-28 10:19 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll 2007-07-12 12:55 - 2007-07-12 12:55 - 01581056 _____ () C:\Program Files\Common Files\LightScribe\QtCore4.dll 2007-08-14 12:59 - 2007-08-14 12:59 - 06365184 _____ () C:\Program Files\Common Files\LightScribe\QtGui4.dll 2007-07-12 12:55 - 2007-07-12 12:55 - 00131072 _____ () C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll 2008-01-16 17:51 - 2008-01-16 17:51 - 00126976 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll 2008-05-25 02:59 - 2008-03-26 14:26 - 00341328 _____ () C:\Windows\SMINST\BLService.exe 2008-05-25 02:59 - 2006-09-13 12:54 - 00081920 _____ () C:\Windows\SMINST\STString.dll 2008-05-25 02:59 - 2007-11-14 14:46 - 00126976 _____ () C:\Windows\SMINST\STWmiM.dll 2008-05-25 02:52 - 2007-01-09 10:25 - 00272024 _____ () C:\Program Files\CyberLink\Shared Files\RichVideo.exe 2008-05-25 01:45 - 2008-05-14 21:56 - 00066856 _____ () C:\Program Files\HP\QuickPlay\Kernel\Common\MCEMediaStatus.dll 2008-05-25 01:58 - 2008-04-11 08:04 - 00685360 _____ () C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe 2008-02-27 14:48 - 2008-02-27 14:48 - 00016384 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll 2008-05-25 01:29 - 2008-05-25 01:29 - 01245064 _____ () C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe 2008-05-25 01:29 - 2008-05-25 01:29 - 00357768 _____ () C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcnet.dll 2014-03-04 11:29 - 2014-03-02 03:35 - 00051016 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll 2014-03-04 11:29 - 2014-03-02 03:35 - 04061000 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\pdf.dll 2014-03-04 11:29 - 2014-03-02 03:35 - 00394568 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll 2014-03-04 11:29 - 2014-03-02 03:35 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll 2014-02-18 11:00 - 2014-02-18 11:00 - 04591616 _____ () C:\Users\Selda\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libglesv2.dll 2014-02-18 11:00 - 2014-02-18 11:00 - 00112128 _____ () C:\Users\Selda\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libegl.dll 2014-03-04 11:29 - 2014-03-02 03:35 - 13632840 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll 2014-03-07 21:49 - 2014-03-07 21:49 - 00050477 _____ () C:\Users\Selda\Downloads\Defogger.exe ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (03/07/2014 07:44:20 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/06/2014 08:24:35 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/06/2014 06:26:34 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/06/2014 10:34:35 AM) (Source: EventSystem) (User: ) Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} Error: (03/05/2014 04:16:18 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/04/2014 11:06:59 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/04/2014 10:34:34 PM) (Source: Application Hang) (User: ) Description: Programm hpsdpapp.exe, Version 5.7.0.2630 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: ba8 Anfangszeit: 01cf37efede2f050 Zeitpunkt der Beendigung: 4 Error: (03/04/2014 05:05:04 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/04/2014 10:43:23 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/02/2014 05:22:16 PM) (Source: Application Error) (User: ) Description: Fehlerhafte Anwendung svchost.exe_hpqcxs08, Version 6.0.6001.18000, Zeitstempel 0x47918b89, fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode 0xc0000005, Fehleroffset 0x3e210cc4, Prozess-ID 0xc04, Anwendungsstartzeit svchost.exe_hpqcxs080. System errors: ============= Error: (03/07/2014 07:44:20 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (03/07/2014 07:43:39 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 07.03.2014 um 19:36:18 unerwartet heruntergefahren. Error: (03/06/2014 10:13:04 PM) (Source: VDS Dynamic Provider) (User: ) Description: Der Anbieter konnte Benachrichtigungen nicht speichern, die vom Treiber stammen. Der Dienst für virtuelle Datenträger muss neu gestartet werden. hr=80042505 Error: (03/06/2014 08:25:01 PM) (Source: Service Control Manager) (User: ) Description: hpqwmiex%%1053 Error: (03/06/2014 08:25:01 PM) (Source: Service Control Manager) (User: ) Description: 30000hpqwmiex Error: (03/06/2014 08:25:01 PM) (Source: DCOM) (User: ) Description: 1053hpqwmiex{F5539356-2F02-40D4-999E-FA61F45FE12E} Error: (03/06/2014 08:24:36 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (03/06/2014 08:23:45 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 06.03.2014 um 20:22:40 unerwartet heruntergefahren. Error: (03/06/2014 06:26:35 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (03/06/2014 05:48:13 AM) (Source: VDS Dynamic Provider) (User: ) Description: Der Anbieter konnte Benachrichtigungen nicht speichern, die vom Treiber stammen. Der Dienst für virtuelle Datenträger muss neu gestartet werden. hr=80042505 Microsoft Office Sessions: ========================= Error: (03/04/2014 01:23:33 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6690.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 49328 seconds with 60 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-02-21 20:22:25.635 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-21 20:22:25.419 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-21 20:22:25.199 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-21 20:22:24.962 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-21 20:22:24.729 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2008-05-25 04:07:08.008 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2008-05-25 04:07:07.992 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2008-05-25 04:07:07.992 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2008-05-25 04:07:07.976 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2008-05-25 04:07:01.222 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 70% Total physical RAM: 3068.9 MB Available physical RAM: 917.96 MB Total Pagefile: 6357.81 MB Available Pagefile: 4426.98 MB Total Virtual: 2047.88 MB Available Virtual: 1908.34 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:289.16 GB) (Free:206.9 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (HP_RECOVERY) (Fixed) (Total:8.92 GB) (Free:1.62 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 298 GB) (Disk ID: 6F7D32D3) Partition 1: (Active) - (Size=289 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=9 GB) - (Type=07 NTFS) ==================== End Of Log ============================ ich habe soeben den GMER Scan durchgeführt und es traten tatsächlich Probleme auf. Zunächst schaltete sich mein Norton Virenschutz wieder ein. Damit keine Verfälschungen im Scan auftreten habe ich den Scan gestoppt, woraufhin die Fehlermedung "GMER has found system modification, which might have been caused by ROOTKIT activity". Allerdings war anders als in eurer Beschreibung, nicht die Möglichkeit des Abwählens ("No") möglich, sondern nur ein "OK" Klick. Daraufhin habe ich das Fenster mit der Meldung geschlossen und den Scan fortgeführt, da der Haken von "show all" und allen anderen Laufwerken entfernt und auf "Quickscan" gesetzt war. Allerdings kamen dann Fehlermeldungen von Programmen auf wie z.B. Skype und anderen Anwedungen. Deshalb habe ich den Scan einige Zeit später abgebrochen, nachdem sich diese Meldungen häuften. Dann erschien die Fehlermeldung mit dem ROOTKIT erneut. Den Scan bis zu diesem Zeitpunkt habe ich abgespeichert und schicke euch diesen anbei. P.S. Der Scan hat über eine halbe Stunde gedauert, ist das üblich? LG pytagoras Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net Rootkit scan 2014-03-07 23:11:02 Windows 6.0.6002 Service Pack 2 \Device\Harddisk0\DR0 -> \Device\00000099 rev. 298,09GB Running: Gmer-19357.exe; Driver: C:\Users\Selda\AppData\Local\Temp\ugloypob.sys ---- System - GMER 2.1 ---- SSDT 8809CEF0 ZwAlertResumeThread SSDT 8809CFD0 ZwAlertThread SSDT 8809C730 ZwAllocateVirtualMemory SSDT 87F57D18 ZwAlpcConnectPort SSDT 8809CC40 ZwCreateMutant SSDT 8809D5B0 ZwCreateThread SSDT 880C1F70 ZwDebugActiveProcess SSDT 8809C590 ZwFreeVirtualMemory SSDT 8809CD30 ZwImpersonateAnonymousToken SSDT 8809CE10 ZwImpersonateThread SSDT 8809C2B0 ZwMapViewOfSection SSDT 8809CB60 ZwOpenEvent SSDT 8804B240 ZwOpenProcessToken SSDT 8809C9A0 ZwOpenSection SSDT 880C1008 ZwOpenThreadToken SSDT 8812E870 ZwResumeThread SSDT 880C1428 ZwSetContextThread SSDT 8809C120 ZwSetInformationProcess SSDT 880C1338 ZwSetInformationThread SSDT 8809CA80 ZwSuspendProcess SSDT 880C1178 ZwSuspendThread SSDT \??\C:\Windows\system32\drivers\CO_Mon.sys ZwTerminateProcess [0xAC37D760] SSDT 880C1258 ZwTerminateThread SSDT 8809C1F0 ZwUnmapViewOfSection SSDT 8809C660 ZwWriteVirtualMemory ---- Kernel code sections - GMER 2.1 ---- .text ntkrnlpa.exe!KeSetEvent + 11D 81EB1768 2 Bytes [F0, CE] {INTO } .text ntkrnlpa.exe!KeSetEvent + 120 81EB176B 5 Bytes [88, D0, CF, 09, 88] .text ntkrnlpa.exe!KeSetEvent + 131 81EB177C 4 Bytes [30, C7, 09, 88] .text ntkrnlpa.exe!KeSetEvent + 13D 81EB1788 4 Bytes [18, 7D, F5, 87] .text ntkrnlpa.exe!KeSetEvent + 1F5 81EB1840 4 Bytes [40, CC, 09, 88] .text ... .text C:\Windows\system32\DRIVERS\atikmdag.sys section is writeable [0x9F601000, 0x1FA4DA, 0xE8000020] ---- User IAT/EAT - GMER 2.1 ---- IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [73FB7817] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [73FFB4F1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [73FBBB22] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [73FAF695] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [73FB75E9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [73FAE7CA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM] [73FE73F5] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream] [73FBDA60] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [73FAFFFA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [73FAFF61] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [73FA71CF] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM] [7403CB00] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile] [73FDC8D8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [73FAD968] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [73FA6853] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [73FA687E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll IAT C:\Windows\Explorer.EXE[1956] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [73FB2AD1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\gdiplus.dll ---- Devices - GMER 2.1 ---- AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys AttachedDevice \Driver\tdx \Device\Tcp SYMTDI.SYS AttachedDevice \Driver\tdx \Device\Udp SYMTDI.SYS ---- Threads - GMER 2.1 ---- Thread System [4:356] A075D26E Thread System [4:360] A0A794C6 Thread System [4:364] A0A10698 ---- Processes - GMER 2.1 ---- Library C:\Users\Selda\Downloads\Gmer-19357.exe (*** hidden *** ) @ C:\Users\Selda\Downloads\Gmer-19357.exe [3820] 0x00400000 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\002186bd27f7 ---- Disk sectors - GMER 2.1 ---- Disk \Device\Harddisk0\DR0 unknown MBR code Disk \Device\Harddisk0\DR0 sector 0: rootkit-like behavior ---- EOF - GMER 2.1 ---- |
08.03.2014, 20:15 | #5 |
/// the machine /// TB-Ausbilder | Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen! Kommt schonmal vor. Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
09.03.2014, 19:42 | #6 |
| Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen!Code:
ATTFilter ComboFix 14-03-05.01 - 09.03.2014 15:07:39.1.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.49.1031.18.3069.1358 [GMT 1:00] ausgeführt von:: c:\users\\Desktop\ComboFix.exe AV: Norton Internet Security *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855} FW: Norton Internet Security *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E} SP: Norton Internet Security *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\security\Database\tmp.edb . . ((((((((((((((((((((((( Dateien erstellt von 2014-02-09 bis 2014-03-09 )))))))))))))))))))))))))))))) . . 2014-03-09 14:17 . 2014-03-09 14:17 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-03-09 14:03 . 2014-03-09 14:03 12568 ----a-w- c:\windows\system32\drivers\PROCEXP113.SYS 2014-03-09 11:27 . 2014-03-09 11:27 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5C52E2B1-6610-4A10-A0AC-0AC373AD59FA}\offreg.dll 2014-03-07 20:52 . 2014-03-07 20:57 -------- d-----w- C:\FRST 2014-03-07 18:52 . 2014-02-06 07:08 7947048 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5C52E2B1-6610-4A10-A0AC-0AC373AD59FA}\mpengine.dll 2014-03-06 18:22 . 2014-03-06 18:22 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll 2014-03-06 18:22 . 2014-03-06 18:22 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll 2014-03-06 18:22 . 2014-03-06 18:22 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll 2014-03-06 18:22 . 2014-03-06 18:22 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll 2014-03-06 18:22 . 2014-03-06 18:22 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll 2014-03-06 18:21 . 2014-03-06 18:22 -------- d-----w- c:\program files\QuickTime 2014-03-06 18:21 . 2014-03-06 18:21 -------- d-----w- c:\programdata\Apple Computer 2014-03-06 18:19 . 2014-03-06 18:19 -------- d-----w- c:\program files\Common Files\Apple 2014-03-06 18:18 . 2014-03-06 18:18 -------- d-----w- c:\program files\Apple Software Update 2014-03-06 18:18 . 2014-03-06 18:18 -------- d-----w- c:\programdata\Apple 2014-03-06 18:06 . 2014-03-06 18:06 -------- d-----w- c:\program files\Common Files\Adobe AIR 2014-03-06 18:06 . 2014-03-06 18:07 -------- d-----w- c:\program files\Helbling 2014-03-03 23:18 . 2014-03-03 23:18 -------- d-----w- c:\programdata\HP Product Assistant 2014-02-25 23:47 . 2014-02-25 23:47 -------- d-----w- c:\windows\Migration 2014-02-24 23:33 . 2014-02-24 23:33 -------- d-----w- c:\program files\Microsoft 2014-02-23 21:54 . 2014-02-23 21:54 -------- d-----w- c:\programdata\WEBREG 2014-02-23 21:11 . 2014-02-23 21:11 -------- d-----w- c:\program files\Common Files\Hewlett-Packard 2014-02-23 21:10 . 2014-02-23 21:18 -------- d-----w- c:\program files\Common Files\HP 2014-02-23 21:05 . 2007-02-02 10:26 273920 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpzpp4v2.dll 2014-02-23 21:01 . 2007-02-02 10:27 117760 ----a-w- c:\windows\system32\hpz3l4v2.dll 2014-02-23 21:01 . 2005-06-20 13:33 94208 ----a-w- c:\windows\system32\HPJIPX1U.DLL 2014-02-23 21:01 . 2005-06-20 13:33 163840 ----a-w- c:\windows\system32\HPJCMN2U.DLL 2014-02-23 21:01 . 2006-06-06 13:20 241721 ----a-w- c:\windows\system32\HPBMINI.DLL 2014-02-23 21:01 . 2005-06-20 13:33 49152 ----a-w- c:\windows\system32\HPBNRAC2.DLL 2014-02-23 20:59 . 2014-02-27 14:00 -------- d-----w- c:\programdata\HP 2014-02-23 20:58 . 2007-02-01 08:24 258048 ----a-w- c:\windows\system32\hpzids01.dll 2014-02-23 10:46 . 2014-02-23 10:46 -------- d-----w- c:\program files\Windows Portable Devices 2014-02-23 01:00 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll 2014-02-23 01:00 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll 2014-02-23 01:00 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll 2014-02-23 00:14 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll 2014-02-23 00:14 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys 2014-02-23 00:14 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys 2014-02-23 00:14 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll 2014-02-23 00:14 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll 2014-02-23 00:14 . 2009-07-14 12:12 16896 ----a-w- c:\windows\system32\winusb.dll 2014-02-23 00:14 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys 2014-02-23 00:14 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe 2014-02-23 00:14 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll 2014-02-23 00:14 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll 2014-02-22 15:56 . 2012-09-25 16:19 75776 ----a-w- c:\windows\system32\synceng.dll 2014-02-22 15:55 . 2011-02-22 14:13 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2014-02-22 15:55 . 2011-11-18 17:47 66560 ----a-w- c:\windows\system32\packager.dll 2014-02-22 15:54 . 2012-11-20 04:22 204288 ----a-w- c:\windows\system32\ncrypt.dll 2014-02-22 15:54 . 2013-03-03 19:07 1082232 ----a-w- c:\windows\system32\drivers\ntfs.sys 2014-02-22 15:54 . 2011-12-14 16:17 680448 ----a-w- c:\windows\system32\msvcrt.dll 2014-02-22 15:54 . 2013-06-29 02:07 197632 ----a-w- c:\windows\system32\drivers\usbhub.sys 2014-02-22 15:54 . 2013-06-29 02:07 73216 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2014-02-22 15:54 . 2013-06-29 02:07 226304 ----a-w- c:\windows\system32\drivers\usbport.sys 2014-02-22 15:54 . 2013-06-29 02:06 6016 ----a-w- c:\windows\system32\drivers\usbd.sys 2014-02-22 15:54 . 2011-05-05 13:54 39936 ----a-w- c:\windows\system32\drivers\usbehci.sys 2014-02-22 15:54 . 2011-05-05 13:54 19456 ----a-w- c:\windows\system32\drivers\usbohci.sys 2014-02-22 15:54 . 2011-03-12 21:55 876032 ----a-w- c:\windows\system32\XpsPrint.dll 2014-02-22 15:52 . 2013-06-26 23:01 527064 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2014-02-22 15:51 . 2013-03-08 03:52 2067968 ----a-w- c:\windows\system32\mstscax.dll 2014-02-22 15:51 . 2013-07-04 04:21 532480 ----a-w- c:\windows\system32\comctl32.dll 2014-02-22 15:51 . 2012-05-01 14:03 180736 ----a-w- c:\windows\system32\drivers\rdpwd.sys 2014-02-22 15:51 . 2013-03-08 03:53 376320 ----a-w- c:\windows\system32\winsrv.dll 2014-02-22 15:51 . 2013-04-17 12:30 24576 ----a-w- c:\windows\system32\cryptdlg.dll 2014-02-22 15:51 . 2013-07-03 02:33 35328 ----a-w- c:\windows\system32\drivers\usbscan.sys 2014-02-22 15:51 . 2013-07-03 02:10 25472 ----a-w- c:\windows\system32\drivers\hidparse.sys 2014-02-22 15:51 . 2011-09-30 15:57 707584 ----a-w- c:\program files\Common Files\System\wab32.dll 2014-02-22 15:50 . 2012-06-04 15:26 440704 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2014-02-22 15:50 . 2012-06-02 00:04 278528 ----a-w- c:\windows\system32\schannel.dll 2014-02-22 15:50 . 2011-11-16 16:23 72704 ----a-w- c:\windows\system32\secur32.dll 2014-02-22 15:50 . 2011-11-16 16:21 1259008 ----a-w- c:\windows\system32\lsasrv.dll 2014-02-22 15:50 . 2011-11-16 14:12 9728 ----a-w- c:\windows\system32\lsass.exe 2014-02-22 15:49 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll 2014-02-22 15:49 . 2013-02-12 01:57 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys 2014-02-22 15:49 . 2013-04-09 03:52 1218048 ----a-w- c:\program files\Windows Journal\NBDoc.DLL 2014-02-22 15:49 . 2013-04-09 03:51 964608 ----a-w- c:\program files\Windows Journal\JNWDRV.dll 2014-02-22 15:49 . 2012-02-01 15:10 1404928 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\InkObj.dll 2014-02-22 15:49 . 2013-04-09 03:51 983552 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll 2014-02-22 15:49 . 2013-04-09 03:51 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll 2014-02-22 15:49 . 2012-02-01 13:58 47104 ----a-w- c:\program files\Windows Journal\PDIALOG.exe 2014-02-22 15:27 . 2013-07-08 04:20 172544 ----a-w- c:\windows\system32\wintrust.dll 2014-02-22 15:27 . 2013-07-08 04:16 98304 ----a-w- c:\windows\system32\cryptnet.dll 2014-02-22 15:27 . 2013-07-08 04:16 133120 ----a-w- c:\windows\system32\cryptsvc.dll 2014-02-22 15:20 . 2012-01-09 15:54 613376 ----a-w- c:\windows\system32\rdpencom.dll 2014-02-22 15:05 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe 2014-02-22 15:05 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll 2014-02-22 15:05 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll 2014-02-22 15:05 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll 2014-02-22 15:05 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll 2014-02-22 15:05 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll 2014-02-22 15:05 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll 2014-02-22 15:04 . 2012-06-02 14:19 171904 ----a-w- c:\windows\system32\wuwebv.dll 2014-02-22 15:04 . 2012-06-02 14:12 33792 ----a-w- c:\windows\system32\wuapp.exe 2014-02-21 21:03 . 2014-02-21 21:03 979456 ----a-w- c:\windows\system32\MFH264Dec.dll 2014-02-21 21:03 . 2014-02-21 21:03 357376 ----a-w- c:\windows\system32\MFHEAACdec.dll 2014-02-21 21:03 . 2014-02-21 21:03 302592 ----a-w- c:\windows\system32\mfmp4src.dll 2014-02-21 21:03 . 2014-02-21 21:03 98816 ----a-w- c:\windows\system32\mfps.dll 2014-02-21 21:03 . 2014-02-21 21:03 586240 ----a-w- c:\windows\system32\stobject.dll 2014-02-21 21:03 . 2014-02-21 21:03 2873344 ----a-w- c:\windows\system32\mf.dll 2014-02-21 21:03 . 2014-02-21 21:03 261632 ----a-w- c:\windows\system32\mfreadwrite.dll 2014-02-21 21:03 . 2014-02-21 21:03 209920 ----a-w- c:\windows\system32\mfplat.dll 2014-02-21 21:02 . 2014-02-21 21:02 135680 ----a-w- c:\windows\system32\XpsRasterService.dll 2014-02-21 21:02 . 2014-02-21 21:02 667648 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe 2014-02-21 21:02 . 2014-02-21 21:02 478720 ----a-w- c:\windows\system32\dxgi.dll 2014-02-21 21:02 . 2014-02-21 21:02 26112 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll 2014-02-21 21:02 . 2014-02-21 21:02 258048 ----a-w- c:\windows\system32\winspool.drv 2014-02-21 21:02 . 2014-02-21 21:02 847360 ----a-w- c:\windows\system32\OpcServices.dll 2014-02-21 21:02 . 2014-02-21 21:02 1554432 ----a-w- c:\windows\system32\xpsservices.dll 2014-02-21 20:58 . 2014-02-21 20:58 369664 ----a-w- c:\windows\system32\WMPhoto.dll 2014-02-21 20:58 . 2014-02-21 20:58 252928 ----a-w- c:\windows\system32\dxdiag.exe 2014-02-21 20:58 . 2014-02-21 20:58 195584 ----a-w- c:\windows\system32\dxdiagn.dll 2014-02-21 20:58 . 2014-02-21 20:58 974848 ----a-w- c:\windows\system32\WindowsCodecs.dll 2014-02-21 20:58 . 2014-02-21 20:58 519680 ----a-w- c:\windows\system32\d3d11.dll 2014-02-21 20:58 . 2014-02-21 20:58 321024 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll 2014-02-21 20:58 . 2014-02-21 20:58 189440 ----a-w- c:\windows\system32\WindowsCodecsExt.dll 2014-02-21 20:39 . 2014-02-21 20:39 -------- d-----w- c:\windows\system32\ca-ES 2014-02-21 20:39 . 2014-02-21 20:39 -------- d-----w- c:\windows\system32\eu-ES 2014-02-21 20:39 . 2014-02-21 20:39 -------- d-----w- c:\windows\system32\vi-VN 2014-02-21 20:05 . 2014-02-21 20:05 -------- d-----w- c:\windows\system32\SPReview 2014-02-21 19:37 . 2009-04-10 22:28 928768 ----a-w- c:\windows\system32\scavenge.dll 2014-02-21 19:36 . 2009-04-10 22:27 57856 ----a-w- c:\windows\system32\compcln.exe 2014-02-21 19:32 . 2009-04-10 22:28 31744 ----a-w- c:\windows\system32\perfdisk.dll 2014-02-21 19:31 . 2009-04-10 22:28 69632 ----a-w- c:\windows\system32\sendmail.dll 2014-02-21 19:30 . 2009-04-10 22:27 41984 ----a-w- c:\windows\system32\ftp.exe 2014-02-21 19:28 . 2009-04-10 22:33 986600 ----a-w- c:\windows\system32\winload.exe . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-02-21 20:58 . 2014-02-21 20:58 4096 ----a-w- c:\windows\system32\drivers\de-DE\dxgkrnl.sys.mui 2014-02-17 23:17 . 2008-05-25 01:54 588472 ----a-w- c:\windows\system32\ezsvc7x.dll 2014-02-17 22:50 . 2008-05-25 00:29 124464 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS 2014-01-17 15:24 . 2014-01-17 15:24 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx 2014-01-17 15:24 . 2014-01-17 15:24 69632 ----a-w- c:\windows\system32\QuickTime.qts . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920] "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-02-26 2289664] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2014-02-17 39408] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2014-01-14 20728480] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-10-14 2299176] "UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-12-24 222504] "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-05-14 468264] "ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-02-07 51048] "QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-03-14 202032] "OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-11-01 554288] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048] "HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-04-15 70912] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 49152] "hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-11-20 488752] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] "SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2008-06-27 442467] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-09-13 59720] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2014-01-17 421888] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-1-16 727592] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-1-2 210520] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] @="Service" . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 . S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\aestsrv.exe [2008-02-12 73728] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - COMHOST . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs REG_MULTI_SZ BthServ LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs ezSharedSvc . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2008-02-26 13:06 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-03-04 10:21 1150280 ----a-w- c:\program files\Google\Chrome\Application\33.0.1750.146\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2014-03-09 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-17 14:02] . 2014-03-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2014-02-17 23:57] . 2014-03-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2014-02-17 23:57] . 2014-03-07 c:\windows\Tasks\Norton Internet Security - Systemprüfung ausführen - Selda.job - c:\program files\Norton Internet Security\Norton AntiVirus\Navw32.exe [2008-02-07 12:05] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://www.google.com/ mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cnnb IE: &AOL Toolbar-Suche - c:\programdata\AOL\ieToolbar\resources\de-DE\local\search.html IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm TCP: DhcpNameServer = 192.168.178.1 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . SafeBoot-WudfPf SafeBoot-WudfRd AddRemove-AVerMedia A309 (MiniCard, DVB-T) - c:\program files\AVerMedia\AVerMedia A309 (MiniCard . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net Rootkit scan 2014-03-09 15:17 Windows 6.0.6002 Service Pack 2 NTFS . Scanne versteckte Prozesse... . Scanne versteckte Autostarteinträge... . Scanne versteckte Dateien... . . c:\windows\TEMP\TMP0000008E42B937B1D5A4D673 524288 bytes . Scan erfolgreich abgeschlossen versteckte Dateien: 1 . ************************************************************************** . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . Zeit der Fertigstellung: 2014-03-09 15:20:25 ComboFix-quarantined-files.txt 2014-03-09 14:20 . Vor Suchlauf: 7 Verzeichnis(se), 222.246.465.536 Bytes frei Nach Suchlauf: 14 Verzeichnis(se), 223.048.851.456 Bytes frei . - - End Of File - - 18BBE12DB961E9E9561750B6BEF944F0 85D751F0E41B8E520AEE8C07A8DA777B |
10.03.2014, 14:40 | #7 |
/// the machine /// TB-Ausbilder | Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen! Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
23.03.2014, 21:05 | #8 |
| Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen! Ich habe den Malware Quick Scan durchgeführt. Allerdings kam keine Option des Ergebnisse-löschens. Ich habe mich bei dem Scan an die Anleitung gehalten. Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.03.23.08 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 S :: S-PC [Administrator] Schutz: Aktiviert 23.03.2014 19:53:34 mbam-log-2014-03-23 (19-53-34).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 234391 Laufzeit: 15 Minute(n), 50 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 Code:
ATTFilter # AdwCleaner v3.022 - Bericht erstellt am 23/03/2014 um 20:18:14 # Aktualisiert 13/03/2014 von Xplode # Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits) # Benutzername : S - S-PC # Gestartet von : C:\Users\S\Downloads\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\ViewpointA Ordner Gelöscht : C:\Program Files\Viewpoint Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD} Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{76C45B18-A29E-43EA-AAF8-AF55C2E1AE17} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{96EF404C-24C7-43D0-9096-4CCC8BB7CCAC} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{97720195-206A-42AE-8E65-260B9BA5589F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{986F7A5A-9676-47E1-8642-F41F8C3FCF82} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B18788A4-92BD-440E-A4D1-380C36531119} Schlüssel Gelöscht : HKLM\Software\MetaStream Schlüssel Gelöscht : HKLM\Software\Viewpoint Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer ***** [ Browser ] ***** -\\ Internet Explorer v9.0.8112.16540 -\\ Google Chrome v33.0.1750.154 [ Datei : C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [2777 octets] - [23/03/2014 20:16:51] AdwCleaner[S0].txt - [2702 octets] - [23/03/2014 20:18:15] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2762 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.2 (02.20.2014:1) OS: Windows Vista (TM) Home Premium x86 Ran by S on 23.03.2014 at 20:39:43,35 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{32E69FD7-A893-44A3-9124-1A8723526FCD} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{B172245C-EEC5-4805-9477-49F2999D1362} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{32E69FD7-A893-44A3-9124-1A8723526FCD} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{B172245C-EEC5-4805-9477-49F2999D1362} ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 23.03.2014 at 20:46:57,43 Computer was rebooted End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
23.03.2014, 21:11 | #9 |
| Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen!Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01 Ran by S (administrator) on S-PC on 23-03-2014 21:07:02 Running from C:\Users\Selda\Desktop Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe (IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe (Microsoft Corporation) C:\Windows\system32\SLsvc.exe (Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe (ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Symantec Corporation) c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\aestsrv.exe (CyberLink Corp.) C:\Program Files\HP\QuickPlay\QPService.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Symantec Corporation) c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe () C:\Windows\SMINST\BLService.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe () C:\Program Files\CyberLink\Shared Files\RichVideo.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Microsoft Corporation) C:\Windows\system32\conime.exe (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe (Microsoft Corporation) C:\Windows\ehome\ehsched.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE () C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe (Symantec Corporation) c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (Hewlett-Packard) c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe () C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2299176 2011-10-14] (Synaptics Incorporated) HKLM\...\Run: [UCam_Menu] - C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2007-12-24] (CyberLink Corp.) HKLM\...\Run: [QPService] - C:\Program Files\HP\QuickPlay\QPService.exe [468264 2008-05-14] (CyberLink Corp.) HKLM\...\Run: [ccApp] - c:\Program Files\Common Files\Symantec Shared\ccApp.exe [51048 2008-02-07] (Symantec Corporation) HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [202032 2008-03-14] ( Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [OnScreenDisplay] - C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [554288 2007-11-01] ( Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [40048 2007-05-11] (Adobe Systems Incorporated) HKLM\...\Run: [HP Health Check Scheduler] - c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [70912 2008-04-15] (Hewlett-Packard) HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.) HKLM\...\Run: [hpWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2007-11-20] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [442467 2008-06-27] (IDT, Inc.) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKU\S-1-5-21-3714923429-2905602066-2517820217-1000\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2289664 2008-02-26] (Hewlett-Packard Company) HKU\S-1-5-21-3714923429-2905602066-2517820217-1000\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-02-18] (Google Inc.) HKU\S-1-5-21-3714923429-2905602066-2517820217-1000\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20728480 2014-01-14] (Skype Technologies S.A.) HKU\S-1-5-21-3714923429-2905602066-2517820217-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation) HKU\S-1-5-21-3714923429-2905602066-2517820217-1000\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO: No Name - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll (Symantec Corporation) BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC) BHO: No Name - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation) Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation) Toolbar: HKCU - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Java(TM) Platform SE 7 U51) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (MetaStream 3 Plugin) - C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll No File CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (Google Docs) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-18] CHR Extension: (Google Drive) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-18] CHR Extension: (YouTube) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-18] CHR Extension: (Google-Suche) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-18] CHR Extension: (Google Wallet) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-18] CHR Extension: (Google Mail) - C:\Users\Selda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-18] ========================== Services (Whitelisted) ================= R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\aestsrv.exe [73728 2008-02-12] (Andrea Electronics Corporation) R2 Automatic LiveUpdate Scheduler; c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe [238968 2008-02-09] (Symantec Corporation) R2 ccEvtMgr; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2008-02-07] (Symantec Corporation) R2 ccSetMgr; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2008-02-07] (Symantec Corporation) R2 CLTNetCnService; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2008-02-07] (Symantec Corporation) S3 comHost; c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe [55640 2007-08-22] (Symantec Corporation) R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-04-15] (Hewlett-Packard) S3 LiveUpdate; c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE [3220856 2008-09-05] (Symantec Corporation) R2 LiveUpdate Notice; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2008-02-07] (Symantec Corporation) R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 Recovery Service for Windows; C:\Windows\SMINST\BLService.exe [341328 2008-03-26] () R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2007-01-09] () R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe [221273 2008-06-27] (IDT, Inc.) R3 Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [1245064 2008-05-25] () S3 usnjsvc; C:\Program Files\MSN Messenger\usnsvc.exe [97136 2007-01-19] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R0 ahcix86s; C:\Windows\System32\DRIVERS\ahcix86s.sys [170000 2008-04-14] (AMD Technologies Inc.) R0 Amddfltr; C:\Windows\System32\DRIVERS\Amddfltr.sys [15416 2008-01-07] (Advanced Micro Devices) S3 COH_Mon; C:\Windows\system32\Drivers\COH_Mon.sys [23888 2008-07-30] (Symantec Corporation) R2 CO_Mon; C:\Windows\system32\drivers\CO_Mon.sys [36056 2007-08-09] (Symantec Corporation) R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2014-01-22] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2014-01-22] (Symantec Corporation) S3 HpqRemHid; C:\Windows\System32\DRIVERS\HpqRemHid.sys [7168 2007-07-11] (Hewlett-Packard Development Company, L.P.) R1 IDSvix86; C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20140317.001\IDSvix86.sys [286328 2014-01-29] (Symantec Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) R3 NAVENG; C:\ProgramData\Symantec\Definitions\VirusDefs\20140322.002\NAVENG.SYS [93272 2014-02-17] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Symantec\Definitions\VirusDefs\20140322.002\NAVEX15.SYS [1612376 2014-02-17] (Symantec Corporation) R1 SPBBCDrv; C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys [447024 2009-03-17] (Symantec Corporation) R3 SRTSP; C:\Windows\System32\Drivers\SRTSP.SYS [279088 2008-02-01] (Symantec Corporation) S3 SRTSPL; C:\Windows\System32\Drivers\SRTSPL.SYS [317616 2008-02-01] (Symantec Corporation) R1 SRTSPX; C:\Windows\System32\Drivers\SRTSPX.SYS [43696 2008-02-01] (Symantec Corporation) R3 SYMDNS; C:\Windows\System32\Drivers\SYMDNS.SYS [13616 2009-02-19] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [124464 2014-02-17] (Symantec Corporation) R3 SYMFW; C:\Windows\System32\Drivers\SYMFW.SYS [96560 2009-02-19] (Symantec Corporation) R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [24112 2009-02-19] (Symantec Corporation) R3 SYMNDISV; C:\Windows\System32\Drivers\SYMNDISV.SYS [41008 2009-02-19] (Symantec Corporation) R3 SYMREDRV; C:\Windows\System32\Drivers\SYMREDRV.SYS [22320 2009-02-19] (Symantec Corporation) R1 SYMTDI; C:\Windows\System32\Drivers\SYMTDI.SYS [184496 2009-02-19] (Symantec Corporation) U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation) S3 catchme; \??\C:\Users\Selda\AppData\Local\Temp\catchme.sys [X] U1 eabfiltr; S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-23 21:06 - 2014-03-23 21:06 - 00000000 ____D () C:\Users\Selda\Desktop\FRST-OlderVersion 2014-03-23 20:46 - 2014-03-23 21:06 - 00001243 _____ () C:\Users\Selda\Desktop\JRT.txt 2014-03-23 20:32 - 2014-03-23 20:32 - 00000000 ____D () C:\Windows\ERUNT 2014-03-23 20:29 - 2014-03-23 20:29 - 00002843 _____ () C:\Users\Selda\Desktop\AdwCleaner[S0].txt 2014-03-23 20:16 - 2014-03-23 20:18 - 00000000 ____D () C:\AdwCleaner 2014-03-23 19:49 - 2014-03-23 19:49 - 00000906 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-03-23 19:49 - 2014-03-23 19:49 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Malwarebytes 2014-03-23 19:49 - 2014-03-23 19:49 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-23 19:49 - 2014-03-23 19:49 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware 2014-03-23 19:49 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-23 19:47 - 2014-03-23 19:47 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Selda\Downloads\mbam-setup-1.75.0.1300.exe 2014-03-23 19:47 - 2014-03-23 19:47 - 01950720 _____ () C:\Users\Selda\Desktop\adwcleaner.exe 2014-03-23 19:47 - 2014-03-23 19:47 - 01037734 _____ (Thisisu) C:\Users\Selda\Desktop\JRT.exe 2014-03-17 21:57 - 2014-03-17 21:57 - 00000971 _____ () C:\Users\Selda\Desktop\LibreOffice Writer.lnk 2014-03-17 18:00 - 2014-03-17 18:00 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\LibreOffice 2014-03-17 17:59 - 2014-03-17 17:59 - 00000931 _____ () C:\Users\Public\Desktop\LibreOffice 4.2.lnk 2014-03-17 17:55 - 2014-03-17 17:59 - 00000000 ____D () C:\Program Files\LibreOffice 4 2014-03-17 17:50 - 2014-03-17 17:56 - 220602368 _____ () C:\Users\Selda\Downloads\LibreOffice_4.2.2_Win_x86 (1).msi 2014-03-17 17:45 - 2014-03-17 17:50 - 220602368 _____ () C:\Users\Selda\Downloads\LibreOffice_4.2.2_Win_x86.msi 2014-03-16 20:28 - 2014-03-16 20:28 - 00000000 ____D () C:\Users\Selda\AppData\Local\Microsoft Help 2014-03-16 20:28 - 2014-03-16 20:28 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-03-16 17:23 - 2014-03-17 19:15 - 00000000 ____D () C:\Users\Selda\Desktop\Musik GUB 18.3 2014-03-12 03:02 - 2014-02-23 06:47 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-12 03:02 - 2014-02-23 06:43 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-12 03:02 - 2014-02-23 06:41 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-12 03:02 - 2014-02-23 06:40 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-12 03:02 - 2014-02-23 06:39 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-12 03:02 - 2014-02-23 06:38 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-03-12 03:02 - 2014-02-23 06:38 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-03-12 03:02 - 2014-02-23 06:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-12 03:02 - 2014-02-23 06:37 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-12 03:02 - 2014-02-23 06:37 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-03-12 03:02 - 2014-02-23 06:37 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-12 03:02 - 2014-02-23 06:37 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-03-12 03:02 - 2014-02-23 06:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-12 03:02 - 2014-02-23 06:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-03-12 03:02 - 2014-02-23 06:35 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-03-12 03:01 - 2014-02-23 06:50 - 12347904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-11 22:45 - 2014-03-11 22:45 - 00545280 _____ () C:\Users\Selda\Desktop\bewegungslieder geschnitten.MSWMM 2014-03-11 21:28 - 2014-03-11 21:28 - 00000000 ____D () C:\ProgramData\WindowsSearch 2014-03-11 20:55 - 2014-02-07 11:38 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-03-11 20:55 - 2014-02-03 11:37 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-03-11 20:54 - 2014-01-30 08:46 - 00876032 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-03-11 20:54 - 2013-11-13 01:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-03-11 20:47 - 2014-03-11 20:47 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Printer Info Cache 2014-03-11 20:47 - 2014-03-11 20:47 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Image Zone Express 2014-03-10 23:44 - 2014-03-10 23:45 - 00531440 _____ () C:\Users\Selda\Downloads\Outlook (1).zip 2014-03-10 23:44 - 2014-03-10 23:44 - 00531430 _____ () C:\Users\Selda\Downloads\Outlook.zip 2014-03-09 21:28 - 2014-03-11 20:57 - 00000000 ____D () C:\Users\Selda\Downloads\mamas bewerbung 2014-03-09 21:27 - 2014-03-09 21:27 - 00026234 _____ () C:\Users\Selda\Downloads\mamas bewerbung.zip 2014-03-09 16:22 - 2014-03-09 16:22 - 00020376 _____ () C:\Users\Selda\Desktop\zweiter scan.txt 2014-03-09 15:20 - 2014-03-09 15:20 - 00020376 _____ () C:\ComboFix.txt 2014-03-09 15:05 - 2014-03-09 15:20 - 00000000 ____D () C:\ComboFix 2014-03-09 15:05 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-03-09 15:05 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-03-09 15:05 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-03-09 15:05 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-03-09 15:05 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-03-09 15:05 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-03-09 15:05 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-03-09 15:05 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-03-09 15:03 - 2014-03-09 15:20 - 00000000 ____D () C:\Qoobox 2014-03-09 15:03 - 2014-03-09 15:18 - 00000000 ____D () C:\Windows\erdnt 2014-03-09 15:03 - 2014-03-09 15:03 - 00012568 _____ (Sysinternals - www.sysinternals.com) C:\Windows\system32\Drivers\PROCEXP113.SYS 2014-03-09 14:49 - 2014-03-09 14:52 - 05187267 ____R (Swearware) C:\Users\Selda\Desktop\ComboFix.exe 2014-03-09 13:50 - 2014-03-09 13:51 - 00000000 ____D () C:\Users\Selda\Desktop\Referendariat 2014-03-07 23:11 - 2014-03-07 23:11 - 00011164 _____ () C:\Users\Selda\Desktop\gmer.log 2014-03-07 21:59 - 2014-03-07 21:59 - 00380416 _____ () C:\Users\Selda\Desktop\Gmer-19357.exe 2014-03-07 21:54 - 2014-03-07 21:57 - 00035626 _____ () C:\Users\Selda\Desktop\Addition.txt 2014-03-07 21:52 - 2014-03-23 21:07 - 00017552 _____ () C:\Users\Selda\Desktop\FRST.txt 2014-03-07 21:52 - 2014-03-23 21:07 - 00000000 ____D () C:\FRST 2014-03-07 21:51 - 2014-03-23 21:06 - 01145856 _____ (Farbar) C:\Users\Selda\Desktop\FRST.exe 2014-03-07 21:50 - 2014-03-07 21:50 - 00000472 _____ () C:\Users\Selda\Desktop\defogger_disable.log 2014-03-07 21:50 - 2014-03-07 21:50 - 00000000 _____ () C:\Users\Selda\defogger_reenable 2014-03-07 21:49 - 2014-03-07 21:49 - 00050477 _____ () C:\Users\Selda\Desktop\Defogger.exe 2014-03-07 21:31 - 2014-03-07 21:31 - 00000974 _____ () C:\Users\Selda\Desktop\test.txt 2014-03-06 21:02 - 2014-03-06 21:02 - 00004608 _____ () C:\Users\Selda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-03-06 19:25 - 2014-03-06 19:25 - 00000000 ____D () C:\Users\Selda\AppData\Local\Apple Computer 2014-03-06 19:24 - 2014-03-06 20:25 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Apple Computer 2014-03-06 19:21 - 2014-03-06 19:22 - 00000000 ____D () C:\Program Files\QuickTime 2014-03-06 19:21 - 2014-03-06 19:21 - 00001726 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-03-06 19:21 - 2014-03-06 19:21 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-03-06 19:19 - 2014-03-06 19:19 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\Users\Selda\AppData\Local\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\ProgramData\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\Program Files\Apple Software Update 2014-03-06 19:15 - 2014-03-06 19:17 - 41945432 _____ (Apple Inc.) C:\Users\Selda\Downloads\QuickTimeInstaller.exe 2014-03-06 19:08 - 2014-03-16 16:54 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\at.helbling.eversion.pamina 2014-03-06 19:07 - 2014-03-06 19:07 - 00000941 _____ () C:\Users\Public\Desktop\PaMina e-version.lnk 2014-03-06 19:07 - 2014-03-06 19:07 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-03-06 19:07 - 2014-03-06 19:07 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-03-06 19:06 - 2014-03-16 16:44 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR 2014-03-06 19:06 - 2014-03-06 19:07 - 00000000 ____D () C:\Program Files\Helbling 2014-03-04 23:54 - 2014-03-06 23:00 - 00000000 ____D () C:\Users\Selda\Desktop\Hits aktuell 2014-03-04 00:18 - 2014-03-04 00:18 - 00000000 ____D () C:\ProgramData\HP Product Assistant 2014-03-02 16:16 - 2014-03-02 16:16 - 00010484 _____ () C:\Users\Selda\Downloads\Einfuehrungsstunde Tanzen.zip 2014-03-02 16:09 - 2014-03-02 16:09 - 00023552 _____ () C:\Users\Selda\Downloads\Freies Tanzen.xls 2014-02-27 16:37 - 2014-02-27 16:37 - 00773968 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll 2014-02-27 16:37 - 2014-02-27 16:37 - 00421200 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll 2014-02-25 23:04 - 2014-02-25 23:04 - 00000000 ____D () C:\Users\Selda\Desktop\bewegungslieder 2014-02-25 00:52 - 2014-02-25 00:52 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-02-25 00:19 - 2014-02-25 00:19 - 00000056 ____H () C:\Windows\system32\ezsidmv.dat 2014-02-23 22:54 - 2014-02-23 22:54 - 00000000 ____D () C:\ProgramData\WEBREG 2014-02-23 22:29 - 2014-02-23 22:54 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\HP 2014-02-23 22:28 - 2014-02-23 22:31 - 00000680 _____ () C:\Users\Selda\AppData\Local\d3d9caps.dat 2014-02-23 22:19 - 2014-02-23 22:19 - 00001870 _____ () C:\Users\Public\Desktop\Shop für HP Zubehör.lnk 2014-02-23 22:19 - 2014-02-23 22:19 - 00000000 ____D () C:\ProgramData\HPSSUPPLY 2014-02-23 22:18 - 2014-02-23 22:18 - 00002029 _____ () C:\Users\Public\Desktop\HP Photosmart Essential.lnk 2014-02-23 22:14 - 2014-02-23 22:14 - 00001204 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk 2014-02-23 22:11 - 2014-02-23 22:11 - 00000000 ____D () C:\Program Files\Common Files\Hewlett-Packard 2014-02-23 22:10 - 2014-02-23 22:18 - 00000000 ____D () C:\Program Files\Common Files\HP 2014-02-23 22:01 - 2007-02-02 11:27 - 00117760 _____ (Hewlett-Packard Company) C:\Windows\system32\hpz3l4v2.dll 2014-02-23 22:01 - 2006-11-02 19:32 - 00018747 _____ () C:\Windows\system32\HPCEAC06.HPI 2014-02-23 22:01 - 2006-06-06 14:20 - 00241721 _____ (Hewlett-Packard) C:\Windows\system32\HPBMINI.DLL 2014-02-23 22:01 - 2005-06-20 14:33 - 00163840 _____ (Hewlett-Packard) C:\Windows\system32\HPJCMN2U.DLL 2014-02-23 22:01 - 2005-06-20 14:33 - 00094208 _____ (Hewlett-Packard) C:\Windows\system32\HPJIPX1U.DLL 2014-02-23 22:01 - 2005-06-20 14:33 - 00049152 _____ (Hewlett-Packard) C:\Windows\system32\HPBNRAC2.DLL 2014-02-23 21:59 - 2014-02-27 15:00 - 00000000 ____D () C:\ProgramData\HP 2014-02-23 21:59 - 2014-02-27 14:27 - 00146162 _____ () C:\Windows\hpoins18.dat 2014-02-23 21:59 - 2014-02-27 14:27 - 00001313 _____ () C:\ProgramData\hpzinstall.log 2014-02-23 21:58 - 2007-03-01 01:05 - 00006600 _____ () C:\Windows\hpomdl18.dat 2014-02-23 21:58 - 2007-02-01 09:24 - 00258048 _____ (Hewlett-Packard) C:\Windows\system32\hpzids01.dll 2014-02-23 21:53 - 2014-02-23 21:57 - 167339144 _____ () C:\Users\Selda\Downloads\AIO_CDA_Full_Network_deu_NB.exe 2014-02-23 21:18 - 2014-02-23 21:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf 2014-02-23 19:42 - 2014-02-23 19:42 - 00387584 _____ () C:\Users\Selda\Downloads\KL_bodyparts_guessing.ppt 2014-02-23 19:42 - 2014-02-23 19:42 - 00387584 _____ () C:\Users\Selda\Downloads\KL_bodyparts_guessing (1).ppt 2014-02-23 19:42 - 2014-02-23 19:42 - 00214528 _____ () C:\Users\Selda\Downloads\KL_mybody.ppt 2014-02-23 11:46 - 2014-02-23 11:46 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2014-02-23 02:00 - 2009-09-10 03:01 - 03023360 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2014-02-23 02:00 - 2009-09-10 03:00 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll 2014-02-23 02:00 - 2009-09-10 03:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-02-23 01:59 - 2009-10-01 02:02 - 02537472 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2014-02-23 01:59 - 2009-10-01 02:02 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll 2014-02-23 01:59 - 2009-10-01 02:02 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll 2014-02-23 01:59 - 2009-10-01 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\BthMtpContextHandler.dll 2014-02-23 01:59 - 2009-10-01 02:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\WPDShextAutoplay.exe 2014-02-23 01:59 - 2009-10-01 02:01 - 00546816 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceWMDRM.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceTypes.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceClassExtension.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2014-02-23 01:59 - 2009-10-01 02:01 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceConnectApi.dll 2014-02-23 01:14 - 2012-07-26 04:39 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-02-23 01:14 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-02-23 01:14 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-02-23 01:14 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-02-23 01:14 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-02-23 01:14 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-02-23 01:14 - 2012-07-26 03:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2014-02-23 01:14 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-02-23 01:14 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-02-23 01:14 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-02-23 01:14 - 2009-07-14 13:12 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\winusb.dll 2014-02-23 00:49 - 2014-02-23 00:49 - 03063561 _____ (Macromedia, Inc.) C:\Users\Public\Documents\MobileTV.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02989660 _____ (Macromedia, Inc.) C:\Users\Public\Documents\DVD.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02864396 _____ (Macromedia, Inc.) C:\Users\Public\Documents\MPV.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02331174 _____ (Macromedia, Inc.) C:\Users\Public\Documents\Karaoke.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02231606 _____ (Macromedia, Inc.) C:\Users\Public\Documents\Games.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 00000021 _____ () C:\Users\Public\Documents\hpqp.txt 2014-02-23 00:49 - 2014-02-23 00:49 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\CyberLink 2014-02-23 00:49 - 2014-02-23 00:49 - 00000000 ____D () C:\Users\Public\Documents\DEU 2014-02-22 16:57 - 2013-08-27 03:47 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-02-22 16:57 - 2013-08-27 03:47 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-02-22 16:57 - 2013-08-27 03:47 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-02-22 16:57 - 2013-08-27 03:47 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-02-22 16:57 - 2013-08-27 02:52 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-22 16:57 - 2013-08-27 02:50 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-02-22 16:57 - 2013-08-27 02:32 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-22 16:57 - 2013-08-27 02:28 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-02-22 16:57 - 2013-08-27 02:28 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-02-22 16:57 - 2013-08-01 04:16 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-02-22 16:57 - 2013-08-01 03:49 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-02-22 16:57 - 2013-07-20 11:44 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-02-22 16:57 - 2013-06-15 14:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2014-02-22 16:57 - 2013-06-15 12:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-02-22 16:57 - 2012-05-11 16:57 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-02-22 16:57 - 2011-10-14 17:03 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2014-02-22 16:57 - 2011-10-14 17:00 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\mciseq.dll 2014-02-22 16:57 - 2011-07-29 17:01 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2014-02-22 16:57 - 2011-07-29 17:01 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2014-02-22 16:57 - 2011-07-29 17:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2014-02-22 16:57 - 2011-07-29 17:00 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2014-02-22 16:57 - 2011-04-21 14:55 - 00508416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2014-02-22 16:57 - 2009-06-17 14:23 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS 2014-02-22 16:56 - 2013-12-05 03:12 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-22 16:56 - 2013-10-30 03:12 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll 2014-02-22 16:56 - 2013-10-30 02:43 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-02-22 16:56 - 2013-10-30 01:43 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-02-22 16:56 - 2013-07-10 10:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-02-22 16:56 - 2013-07-05 05:53 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-02-22 16:56 - 2012-11-02 11:18 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-02-22 16:56 - 2012-11-02 09:26 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe 2014-02-22 16:56 - 2012-09-25 17:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2014-02-22 16:56 - 2012-08-21 12:47 - 00224640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-02-22 16:56 - 2012-06-29 17:01 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2014-02-22 16:56 - 2012-06-08 18:47 - 11586048 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-02-22 16:56 - 2012-03-21 00:28 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2014-02-22 16:56 - 2011-10-14 17:02 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2014-02-22 16:55 - 2011-11-18 18:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-02-22 16:55 - 2011-02-22 15:13 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-02-22 16:54 - 2013-06-29 03:07 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-02-22 16:54 - 2013-06-29 03:07 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-02-22 16:54 - 2013-06-29 03:07 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-02-22 16:54 - 2013-06-29 03:06 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-02-22 16:54 - 2013-03-03 20:07 - 01082232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-02-22 16:54 - 2012-11-20 05:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-02-22 16:54 - 2012-09-28 17:11 - 00892928 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-02-22 16:54 - 2011-12-14 17:17 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2014-02-22 16:54 - 2011-05-05 14:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-02-22 16:54 - 2011-05-05 14:54 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-02-22 16:54 - 2011-03-12 22:55 - 00876032 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-02-22 16:53 - 2013-10-11 03:08 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-02-22 16:53 - 2013-10-11 03:08 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-02-22 16:53 - 2013-10-11 03:08 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wshcon.dll 2014-02-22 16:53 - 2013-10-11 01:35 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-02-22 16:53 - 2013-10-11 01:35 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-02-22 16:53 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-02-22 16:53 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-02-22 16:53 - 2013-08-02 05:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-02-22 16:53 - 2013-07-12 10:04 - 00134272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-02-22 16:53 - 2013-05-02 05:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-02-22 16:53 - 2013-05-02 05:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\printcom.dll 2014-02-22 16:53 - 2013-04-24 05:00 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2014-02-22 16:53 - 2013-04-24 02:46 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2014-02-22 16:53 - 2012-11-22 04:54 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll 2014-02-22 16:53 - 2012-11-08 04:48 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2014-02-22 16:53 - 2012-11-02 11:19 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-02-22 16:52 - 2013-10-22 08:19 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-02-22 16:52 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-02-22 16:52 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-02-22 16:52 - 2013-10-11 01:39 - 00218228 _____ () C:\Windows\system32\WFP.TMF 2014-02-22 16:52 - 2013-07-16 05:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2014-02-22 16:52 - 2013-07-09 13:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-02-22 16:52 - 2013-07-08 05:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2014-02-22 16:52 - 2013-07-08 05:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-02-22 16:52 - 2013-06-27 00:01 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-02-22 16:52 - 2013-06-04 05:16 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-02-22 16:52 - 2013-06-04 02:49 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-02-22 16:52 - 2013-03-09 04:45 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-02-22 16:52 - 2013-03-09 02:28 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-02-22 16:52 - 2012-02-29 16:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2014-02-22 16:52 - 2012-02-29 14:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2014-02-22 16:52 - 2011-11-16 17:23 - 00377344 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2014-02-22 16:52 - 2011-10-25 16:58 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-02-22 16:52 - 2011-08-25 17:15 - 00555520 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll 2014-02-22 16:52 - 2011-08-25 17:14 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-02-22 16:52 - 2011-08-25 17:14 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2014-02-22 16:52 - 2011-08-25 14:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\oleaccrc.dll 2014-02-22 16:51 - 2013-07-04 05:21 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-02-22 16:51 - 2013-07-03 03:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2014-02-22 16:51 - 2013-07-03 03:10 - 00025472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-02-22 16:51 - 2013-04-17 13:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2014-02-22 16:51 - 2013-03-08 04:53 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-02-22 16:51 - 2013-03-08 04:52 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-02-22 16:51 - 2012-05-01 15:03 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-02-22 16:51 - 2011-06-15 17:12 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2014-02-22 16:50 - 2012-06-04 16:26 - 00440704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-02-22 16:50 - 2012-06-02 01:04 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-02-22 16:50 - 2011-11-16 17:23 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-02-22 16:50 - 2011-11-16 17:21 - 01259008 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-02-22 16:50 - 2011-11-16 15:12 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-02-22 16:49 - 2013-02-12 02:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-02-22 16:49 - 2010-05-04 20:13 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\msshsq.dll 2014-02-22 16:27 - 2013-07-08 05:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-02-22 16:27 - 2013-07-08 05:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-02-22 16:27 - 2013-07-08 05:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-02-22 16:20 - 2012-01-09 16:54 - 00613376 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2014-02-22 16:05 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-02-22 16:05 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-02-22 16:05 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-02-22 16:05 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-02-22 16:05 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-02-22 16:05 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-02-22 16:05 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-02-22 16:04 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-02-22 16:04 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-02-21 22:05 - 2014-02-21 22:05 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-02-21 22:05 - 2014-02-21 22:05 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\advpack.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-02-21 22:05 - 2014-02-21 22:05 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-02-21 22:03 - 2014-02-21 22:03 - 02873344 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 01075712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00979456 _____ (Microsoft Corporation) C:\Windows\system32\MFH264Dec.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\MFHEAACdec.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4src.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 01554432 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe 2014-02-21 22:02 - 2014-02-21 22:02 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2014-02-21 22:02 - 2014-02-21 22:02 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\dxdiag.exe 2014-02-21 21:58 - 2014-02-21 21:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00189440 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\vi-VN 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\eu-ES 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\ca-ES 2014-02-21 21:05 - 2014-02-21 21:05 - 00000000 ____D () C:\Windows\system32\SPReview 2014-02-21 20:37 - 2009-04-10 23:28 - 00928768 _____ (Microsoft Corporation) C:\Windows\system32\scavenge.dll 2014-02-21 20:36 - 2009-04-10 23:27 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\compcln.exe 2014-02-21 20:33 - 2009-04-10 23:28 - 00550400 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00466944 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2014-02-21 20:33 - 2009-04-10 23:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\sdohlp.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2014-02-21 20:33 - 2009-04-10 23:28 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\SCardSvr.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2014-02-21 20:33 - 2009-04-10 23:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll 2014-02-21 20:33 - 2009-04-10 23:28 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\rtffilt.dll 2014-02-21 20:33 - 2009-04-10 23:27 - 00241128 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll 2014-02-21 20:33 - 2009-04-10 21:46 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2014-02-21 20:33 - 2009-04-10 21:45 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2014-02-21 20:32 - 2009-04-10 23:32 - 00149480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2014-02-21 20:32 - 2009-04-10 23:32 - 00050664 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL 2014-02-21 20:32 - 2009-04-10 23:32 - 00043496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciidex.sys 2014-02-21 20:32 - 2009-04-10 23:32 - 00014312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciide.sys 2014-02-21 20:32 - 2009-04-10 23:28 - 02153472 _____ (Microsoft Corporation) C:\Windows\system32\oobefldr.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 01823744 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 01107968 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00825856 _____ (Microsoft Corporation) C:\Windows\system32\rasdlg.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00644608 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\pnpui.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rasplap.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\RelMon.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\P2PGraph.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL 2014-02-21 20:32 - 2009-04-10 23:28 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\offfilt.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\pnpsetup.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\rasmontr.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\nlhtml.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\ntmarta.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\oleprn.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\propdefs.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\PNPXAssoc.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll 2014-02-21 20:32 - 2009-04-10 23:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\perfdisk.dll 2014-02-21 20:32 - 2009-04-10 23:27 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr 2014-02-21 20:32 - 2009-04-10 23:27 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\reg.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\rekeywiz.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\PnPutil.exe 2014-02-21 20:32 - 2009-04-10 23:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\rasdial.exe 2014-02-21 20:32 - 2009-04-10 23:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime 2014-02-21 20:32 - 2009-04-10 23:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime 2014-02-21 20:32 - 2009-04-10 23:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime 2014-02-21 20:32 - 2009-04-10 23:23 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime 2014-02-21 20:32 - 2009-04-10 22:03 - 12240896 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0007.dll 2014-02-21 20:32 - 2009-04-10 22:03 - 02644480 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0009.dll 2014-02-21 20:32 - 2009-04-10 21:46 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rassstp.sys 2014-02-21 20:32 - 2009-04-10 21:46 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspppoe.sys 2014-02-21 20:32 - 2009-04-10 21:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys 2014-02-21 20:32 - 2009-04-10 21:43 - 00392170 _____ () C:\Windows\system32\onex.tmf 2014-02-21 20:32 - 2009-04-10 21:43 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys 2014-02-21 20:32 - 2009-04-10 21:43 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2014-02-21 20:32 - 2009-04-10 21:43 - 00062208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ohci1394.sys 2014-02-21 20:32 - 2009-04-10 21:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2014-02-21 20:32 - 2009-04-10 21:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys 2014-02-21 20:32 - 2009-02-19 17:20 - 00009212 _____ () C:\Windows\system32\RacUR.xml 2014-02-21 20:32 - 2009-02-18 11:43 - 00000153 _____ () C:\Windows\system32\RacUREx.xml 2014-02-21 20:32 - 2009-02-18 11:39 - 00779136 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll 2014-02-21 20:31 - 2009-04-10 23:32 - 00190424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys 2014-02-21 20:31 - 2009-04-10 23:32 - 00141288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ecache.sys 2014-02-21 20:31 - 2009-04-10 23:32 - 00053736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys 2014-02-21 20:31 - 2009-04-10 23:32 - 00027624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Dumpata.sys 2014-02-21 20:31 - 2009-04-10 23:28 - 01591296 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 01459200 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00978432 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe 2014-02-21 20:31 - 2009-04-10 23:28 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\emdmgmt.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\IasMigReader.exe 2014-02-21 20:31 - 2009-04-10 23:28 - 00454144 _____ (Microsoft) C:\Windows\system32\IasMigPlugin.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\dsound.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\devmgr.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2014-02-21 20:31 - 2009-04-10 23:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\es.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\fundisc.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\dsprop.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00117248 _____ () C:\Windows\system32\EhStorAuthn.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\EhStorShell.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\dmsynth.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\dmusic.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\fdBth.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\iashlpr.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\fdSSDP.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\iasads.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\feclient.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\iasdatastore.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\EhStorPwdMgr.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\hidserv.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2014-02-21 20:31 - 2009-04-10 23:28 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\fdBthProxy.dll 2014-02-21 20:31 - 2009-04-10 23:27 - 02926592 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 02092544 _____ (Microsoft Corporation) C:\Windows\system32\dfsr.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00407040 _____ (Microsoft Corporation) C:\Windows\system32\dpapimig.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\gpresult.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\hdwwiz.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\fc.exe 2014-02-21 20:31 - 2009-04-10 23:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\gpupdate.exe 2014-02-21 20:31 - 2009-04-10 23:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll 2014-02-21 20:31 - 2009-04-10 21:48 - 00344698 _____ () C:\Windows\system32\eaphost.tmf 2014-02-21 20:31 - 2009-04-10 21:43 - 00442788 _____ () C:\Windows\system32\dot3.tmf 2014-02-21 20:31 - 2009-04-10 21:43 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys 2014-02-21 20:31 - 2009-04-10 21:42 - 00561152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2014-02-21 20:31 - 2009-04-10 21:42 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-02-21 20:31 - 2009-04-10 21:39 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-02-21 20:31 - 2009-04-10 21:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxg.sys 2014-02-21 20:31 - 2009-04-10 21:13 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys 2014-02-21 20:31 - 2009-04-10 21:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys 2014-02-21 20:30 - 2009-04-10 23:33 - 00614376 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2014-02-21 20:30 - 2009-04-10 23:32 - 00527848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00265688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00245736 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00223208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00180712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00161752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00125928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00109032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00099816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-02-21 20:30 - 2009-04-10 23:32 - 00048104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00035304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys 2014-02-21 20:30 - 2009-04-10 23:32 - 00019944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\atapi.sys 2014-02-21 20:30 - 2009-04-10 23:28 - 06103040 _____ (Microsoft Corporation) C:\Windows\system32\chtbrkr.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 03174400 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 03072000 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 02515968 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 02225664 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 02134528 _____ (Microsoft Corporation) C:\Windows\system32\FunctionDiscoveryFolder.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01985024 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01856512 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01788416 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\apds.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01671680 _____ (Microsoft Corporation) C:\Windows\system32\chsbrkr.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01645568 _____ (Microsoft Corporation) C:\Windows\system32\connect.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01589248 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01502720 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01480704 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01342464 _____ (Microsoft Corporation) C:\Windows\system32\brcpl.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01324032 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01209856 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01112064 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01086464 _____ (Microsoft Corporation) C:\Windows\system32\NetProjW.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 01053696 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00971264 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\mswdat10.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\ipsecsnp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00670720 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\msrepl40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\CertEnrollUI.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00618496 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2VDEC.DLL 2014-02-21 20:30 - 2009-04-10 23:28 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\comuid.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00516608 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\cmdial32.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\msxbde40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00450560 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\msexch40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\msvcp60.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\mspbde40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00368640 _____ () C:\Windows\system32\msjetoledb40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00364032 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2014-02-21 20:30 - 2009-04-10 23:28 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\msrd3x40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2014-02-21 20:30 - 2009-04-10 23:28 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\msrd2x40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\msjtes40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\modemui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\mstext40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\msltus40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\mscandui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\adsldpc.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayDriverLib.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mstlsapi.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\msctfp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\mpr.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\msjter40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingProxy.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\bthci.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msstrc.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\bthserv.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\networkitemfactory.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\msscb.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\bitsigd.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\msimtf.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\NcdProp.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\MsCtfMonitor.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msisip.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll 2014-02-21 20:30 - 2009-04-10 23:28 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\CHxReadingStringIME.dll 2014-02-21 20:30 - 2009-04-10 23:27 - 01122304 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl 2014-02-21 20:30 - 2009-04-10 23:27 - 01102848 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl 2014-02-21 20:30 - 2009-04-10 23:27 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl 2014-02-21 20:30 - 2009-04-10 23:27 - 00636416 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\certreq.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\fsquirt.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00130024 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll 2014-02-21 20:30 - 2009-04-10 23:27 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2014-02-21 20:30 - 2009-04-10 23:27 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\newdev.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\conime.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingWizard.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\cipher.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\cmmon32.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\csrstub.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cbsra.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\bthudtask.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ipconfig.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEject.exe 2014-02-21 20:30 - 2009-04-10 23:27 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\msacm32.drv 2014-02-21 20:30 - 2009-04-10 23:23 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime 2014-02-21 20:30 - 2009-04-10 23:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime 2014-02-21 20:30 - 2009-04-10 23:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime 2014-02-21 20:30 - 2009-04-10 22:42 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys 2014-02-21 20:30 - 2009-04-10 21:46 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys 2014-02-21 20:30 - 2009-04-10 21:45 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2014-02-21 20:30 - 2009-04-10 21:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys 2014-02-21 20:30 - 2009-04-10 21:39 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys 2014-02-21 20:30 - 2009-04-10 21:39 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\iscsilog.dll 2014-02-21 20:30 - 2009-04-10 21:27 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2014-02-21 20:30 - 2009-04-10 21:14 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2014-02-21 20:30 - 2009-04-10 21:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2014-02-21 20:30 - 2009-03-29 21:42 - 00155456 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2014-02-21 20:30 - 2009-03-29 21:42 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2014-02-21 20:30 - 2009-02-18 11:38 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-02-21 20:30 - 2009-02-18 11:38 - 00035168 _____ (Microsoft Corporation) C:\Windows\system32\infocardcpl.cpl 2014-02-21 20:29 - 2009-04-10 23:33 - 00926184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2014-02-21 20:29 - 2009-04-10 23:33 - 00292840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys 2014-02-21 20:29 - 2009-04-10 23:32 - 00438744 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2014-02-21 20:29 - 2009-04-10 23:32 - 00019944 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2014-02-21 20:29 - 2009-04-10 23:32 - 00017896 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2014-02-21 20:29 - 2009-04-10 23:32 - 00017384 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 02167808 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 02012160 _____ (Microsoft Corporation) C:\Windows\system32\milcore.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01671680 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01580544 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01575936 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL 2014-02-21 20:29 - 2009-04-10 23:28 - 01533440 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01524736 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01382912 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2014-02-21 20:29 - 2009-04-10 23:28 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\wercon.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01055232 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 01017856 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00968192 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz2.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00852992 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2014-02-21 20:29 - 2009-04-10 23:28 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00657408 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL 2014-02-21 20:29 - 2009-04-10 23:28 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\wiaaut.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00532992 _____ (Microsoft Corporation) C:\Windows\system32\wpcao.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00507904 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\WscEapPr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\wow32.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iassdo.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\wscntfy.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\iassam.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\wevtutil.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2014-02-21 20:29 - 2009-04-10 23:28 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wpcsvc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\imapi.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL 2014-02-21 20:29 - 2009-04-10 23:28 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\wshext.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\wlgpclnt.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\iassvcs.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\xmlfilter.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\mmci.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\l2nacp.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iaspolcy.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\whealogr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\ifmon.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\wsepno.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\uxsms.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\version.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\winrnr.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wscisvif.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\vdmdbg.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\midimap.dll 2014-02-21 20:29 - 2009-04-10 23:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mmcico.dll 2014-02-21 20:29 - 2009-04-10 23:27 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe 2014-02-21 20:29 - 2009-04-10 23:27 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl 2014-02-21 20:29 - 2009-04-10 23:27 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe 2014-02-21 20:29 - 2009-04-10 23:27 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\Magnify.exe 2014-02-21 20:29 - 2009-04-10 23:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv 2014-02-21 20:29 - 2009-04-10 23:27 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe 2014-02-21 20:29 - 2009-04-10 23:27 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax 2014-02-21 20:29 - 2009-04-10 23:27 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2014-02-21 20:29 - 2009-04-10 23:22 - 00883712 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME 2014-02-21 20:29 - 2009-04-10 21:42 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2014-02-21 20:29 - 2009-04-10 21:38 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2014-02-21 20:29 - 2009-04-10 21:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys 2014-02-21 20:29 - 2009-04-10 21:22 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys 2014-02-21 20:29 - 2009-04-10 18:54 - 03662128 _____ () C:\Windows\system32\locale.nls 2014-02-21 20:29 - 2009-02-18 11:38 - 00619864 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-02-21 20:29 - 2009-02-18 11:38 - 00009048 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-02-21 20:28 - 2009-04-10 23:33 - 00986600 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2014-02-21 20:28 - 2009-04-10 23:32 - 00122344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Storport.sys 2014-02-21 20:28 - 2009-04-10 23:28 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 02205184 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 01224192 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 01081344 _____ (Microsoft Corporation) C:\Windows\system32\SLCExt.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00996352 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00777216 _____ (Microsoft Corporation) C:\Windows\system32\slcc.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00582144 _____ (Microsoft Corporation) C:\Windows\system32\SLCommDlg.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00425472 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\SLUI.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\SnippingTool.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\SLC.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\sperror.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\SLLUA.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\spoolss.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\softkbd.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00083456 _____ (Microsoft) C:\Windows\system32\SMBHelperClass.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\slwmi.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\SLUINotify.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Storprop.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\slcinst.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\TSTheme.exe 2014-02-21 20:28 - 2009-04-10 23:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\spcmsg.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2014-02-21 20:28 - 2009-04-10 23:28 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\spwinsat.dll 2014-02-21 20:28 - 2009-04-10 23:27 - 03408896 _____ (Microsoft Corporation) C:\Windows\system32\SLsvc.exe 2014-02-21 20:28 - 2009-04-10 23:27 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2014-02-21 20:28 - 2009-04-10 21:45 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\smb.sys 2014-02-21 20:28 - 2009-04-10 21:42 - 00052992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys 2014-02-21 20:28 - 2009-04-10 21:42 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys 2014-02-21 20:28 - 2009-04-10 21:14 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2014-02-21 20:28 - 2009-04-10 19:52 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spsys.sys 2014-02-21 20:28 - 2009-04-10 18:59 - 00107612 _____ () C:\Windows\system32\StructuredQuerySchema.bin 2014-02-21 20:28 - 2009-02-19 17:20 - 00009239 _____ () C:\Windows\system32\spcinstrumentation.man 2014-02-21 20:28 - 2009-02-18 11:39 - 00092918 _____ () C:\Windows\system32\slmgr.vbs 2014-02-21 20:28 - 2009-02-18 11:39 - 00035680 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-02-21 20:27 - 2009-04-10 23:32 - 00053224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys 2014-02-21 20:27 - 2009-04-10 23:28 - 01576960 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 01152000 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\thawbrkr.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll 2014-02-21 20:27 - 2009-04-10 23:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\ulib.dll 2014-02-21 20:27 - 2009-04-10 23:27 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp 2014-02-21 20:27 - 2009-04-10 23:23 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime 2014-02-21 20:27 - 2009-04-10 21:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-02-21 20:27 - 2009-04-10 21:42 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys 2014-02-21 20:27 - 2009-03-06 18:11 - 00130008 _____ () C:\Windows\system32\systemsf.ebd 2014-02-21 20:20 - 2014-02-21 20:20 - 00000000 ____D () C:\Windows\system32\EventProviders 2014-02-21 20:06 - 2014-02-21 20:15 - 365230920 _____ (Microsoft Corporation) C:\Users\Selda\Downloads\Windows6.0-KB948465-X86.exe 2014-02-21 18:55 - 2014-02-21 22:37 - 00008448 _____ () C:\Windows\IE9_main.log 2014-02-21 18:55 - 2014-02-21 18:55 - 18733360 _____ (Microsoft Corporation) C:\Users\Selda\Downloads\IE9-WindowsVista-x86-deu.exe ==================== One Month Modified Files and Folders ======= 2014-03-23 21:07 - 2014-03-07 21:52 - 00017552 _____ () C:\Users\Selda\Desktop\FRST.txt 2014-03-23 21:07 - 2014-03-07 21:52 - 00000000 ____D () C:\FRST 2014-03-23 21:06 - 2014-03-23 21:06 - 00000000 ____D () C:\Users\Selda\Desktop\FRST-OlderVersion 2014-03-23 21:06 - 2014-03-23 20:46 - 00001243 _____ () C:\Users\Selda\Desktop\JRT.txt 2014-03-23 21:06 - 2014-03-07 21:51 - 01145856 _____ (Farbar) C:\Users\Selda\Desktop\FRST.exe 2014-03-23 21:01 - 2014-02-18 00:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-03-23 20:41 - 2014-02-17 21:28 - 01449866 _____ () C:\Windows\WindowsUpdate.log 2014-03-23 20:40 - 2006-11-02 13:37 - 00000000 ___RD () C:\Users\Public\Recorded TV 2014-03-23 20:38 - 2014-02-18 00:57 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-23 20:38 - 2014-02-17 21:54 - 00000269 _____ () C:\Users\Public\Documents\hpqp.ini 2014-03-23 20:38 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-23 20:38 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-23 20:38 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-23 20:37 - 2014-02-17 21:29 - 00000012 _____ () C:\Windows\bthservsdp.dat 2014-03-23 20:37 - 2006-11-02 14:01 - 00028296 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-03-23 20:32 - 2014-03-23 20:32 - 00000000 ____D () C:\Windows\ERUNT 2014-03-23 20:29 - 2014-03-23 20:29 - 00002843 _____ () C:\Users\Selda\Desktop\AdwCleaner[S0].txt 2014-03-23 20:21 - 2014-02-18 00:57 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-23 20:18 - 2014-03-23 20:16 - 00000000 ____D () C:\AdwCleaner 2014-03-23 20:00 - 2014-02-17 22:13 - 00000582 _____ () C:\Windows\Tasks\Norton Internet Security - Systemprüfung ausführen - Selda.job 2014-03-23 19:49 - 2014-03-23 19:49 - 00000906 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-03-23 19:49 - 2014-03-23 19:49 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Malwarebytes 2014-03-23 19:49 - 2014-03-23 19:49 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-23 19:49 - 2014-03-23 19:49 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware 2014-03-23 19:47 - 2014-03-23 19:47 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Selda\Downloads\mbam-setup-1.75.0.1300.exe 2014-03-23 19:47 - 2014-03-23 19:47 - 01950720 _____ () C:\Users\Selda\Desktop\adwcleaner.exe 2014-03-23 19:47 - 2014-03-23 19:47 - 01037734 _____ (Thisisu) C:\Users\Selda\Desktop\JRT.exe 2014-03-23 18:48 - 2014-02-18 00:08 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Skype 2014-03-19 03:01 - 2014-02-18 01:32 - 00000000 ____D () C:\Windows\system32\MRT 2014-03-19 03:01 - 2006-11-02 11:24 - 87350280 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-03-17 22:50 - 2014-02-17 22:13 - 00083080 _____ () C:\Users\Selda\AppData\Local\GDIPFONTCACHEV1.DAT 2014-03-17 22:49 - 2006-11-02 13:47 - 00352304 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-17 21:57 - 2014-03-17 21:57 - 00000971 _____ () C:\Users\Selda\Desktop\LibreOffice Writer.lnk 2014-03-17 19:15 - 2014-03-16 17:23 - 00000000 ____D () C:\Users\Selda\Desktop\Musik GUB 18.3 2014-03-17 18:00 - 2014-03-17 18:00 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\LibreOffice 2014-03-17 17:59 - 2014-03-17 17:59 - 00000931 _____ () C:\Users\Public\Desktop\LibreOffice 4.2.lnk 2014-03-17 17:59 - 2014-03-17 17:55 - 00000000 ____D () C:\Program Files\LibreOffice 4 2014-03-17 17:56 - 2014-03-17 17:50 - 220602368 _____ () C:\Users\Selda\Downloads\LibreOffice_4.2.2_Win_x86 (1).msi 2014-03-17 17:50 - 2014-03-17 17:45 - 220602368 _____ () C:\Users\Selda\Downloads\LibreOffice_4.2.2_Win_x86.msi 2014-03-16 20:33 - 2008-05-25 02:39 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-03-16 20:28 - 2014-03-16 20:28 - 00000000 ____D () C:\Users\Selda\AppData\Local\Microsoft Help 2014-03-16 20:28 - 2014-03-16 20:28 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-03-16 20:28 - 2006-11-02 12:18 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-03-16 16:54 - 2014-03-06 19:08 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\at.helbling.eversion.pamina 2014-03-16 16:44 - 2014-03-06 19:06 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR |
23.03.2014, 21:12 | #10 |
| Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen!Code:
ATTFilter 2014-03-16 12:25 - 2014-02-18 01:00 - 00001963 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-03-13 00:01 - 2014-02-18 00:57 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-03-13 00:01 - 2014-02-18 00:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-03-12 03:38 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache 2014-03-12 03:01 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\de-DE 2014-03-11 22:45 - 2014-03-11 22:45 - 00545280 _____ () C:\Users\Selda\Desktop\bewegungslieder geschnitten.MSWMM 2014-03-11 21:47 - 2006-11-02 11:33 - 01565124 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-11 21:44 - 2006-11-02 13:52 - 00112762 _____ () C:\Windows\setupact.log 2014-03-11 21:44 - 2006-11-02 11:23 - 00000179 _____ () C:\Windows\win.ini 2014-03-11 21:28 - 2014-03-11 21:28 - 00000000 ____D () C:\ProgramData\WindowsSearch 2014-03-11 20:57 - 2014-03-09 21:28 - 00000000 ____D () C:\Users\Selda\Downloads\mamas bewerbung 2014-03-11 20:48 - 2006-11-02 13:37 - 00000000 ____D () C:\Windows\twain_32 2014-03-11 20:47 - 2014-03-11 20:47 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Printer Info Cache 2014-03-11 20:47 - 2014-03-11 20:47 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Image Zone Express 2014-03-10 23:45 - 2014-03-10 23:44 - 00531440 _____ () C:\Users\Selda\Downloads\Outlook (1).zip 2014-03-10 23:44 - 2014-03-10 23:44 - 00531430 _____ () C:\Users\Selda\Downloads\Outlook.zip 2014-03-09 21:27 - 2014-03-09 21:27 - 00026234 _____ () C:\Users\Selda\Downloads\mamas bewerbung.zip 2014-03-09 16:27 - 2008-01-21 03:47 - 00074810 _____ () C:\Windows\PFRO.log 2014-03-09 16:22 - 2014-03-09 16:22 - 00020376 _____ () C:\Users\Selda\Desktop\zweiter scan.txt 2014-03-09 15:20 - 2014-03-09 15:20 - 00020376 _____ () C:\ComboFix.txt 2014-03-09 15:20 - 2014-03-09 15:05 - 00000000 ____D () C:\ComboFix 2014-03-09 15:20 - 2014-03-09 15:03 - 00000000 ____D () C:\Qoobox 2014-03-09 15:20 - 2006-11-02 12:18 - 00000000 __RHD () C:\Users\Default 2014-03-09 15:20 - 2006-11-02 12:18 - 00000000 ___RD () C:\Users\Public 2014-03-09 15:18 - 2014-03-09 15:03 - 00000000 ____D () C:\Windows\erdnt 2014-03-09 15:17 - 2006-11-02 11:23 - 00000215 _____ () C:\Windows\system.ini 2014-03-09 15:03 - 2014-03-09 15:03 - 00012568 _____ (Sysinternals - www.sysinternals.com) C:\Windows\system32\Drivers\PROCEXP113.SYS 2014-03-09 14:52 - 2014-03-09 14:49 - 05187267 ____R (Swearware) C:\Users\Selda\Desktop\ComboFix.exe 2014-03-09 13:51 - 2014-03-09 13:50 - 00000000 ____D () C:\Users\Selda\Desktop\Referendariat 2014-03-08 14:31 - 2014-02-17 22:15 - 00000052 _____ () C:\Windows\system32\DOErrors.log 2014-03-07 23:11 - 2014-03-07 23:11 - 00011164 _____ () C:\Users\Selda\Desktop\gmer.log 2014-03-07 21:59 - 2014-03-07 21:59 - 00380416 _____ () C:\Users\Selda\Desktop\Gmer-19357.exe 2014-03-07 21:57 - 2014-03-07 21:54 - 00035626 _____ () C:\Users\Selda\Desktop\Addition.txt 2014-03-07 21:50 - 2014-03-07 21:50 - 00000472 _____ () C:\Users\Selda\Desktop\defogger_disable.log 2014-03-07 21:50 - 2014-03-07 21:50 - 00000000 _____ () C:\Users\Selda\defogger_reenable 2014-03-07 21:50 - 2014-02-17 22:07 - 00000000 ____D () C:\Users\Selda 2014-03-07 21:49 - 2014-03-07 21:49 - 00050477 _____ () C:\Users\Selda\Desktop\Defogger.exe 2014-03-07 21:31 - 2014-03-07 21:31 - 00000974 _____ () C:\Users\Selda\Desktop\test.txt 2014-03-06 23:00 - 2014-03-04 23:54 - 00000000 ____D () C:\Users\Selda\Desktop\Hits aktuell 2014-03-06 21:02 - 2014-03-06 21:02 - 00004608 _____ () C:\Users\Selda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-03-06 20:25 - 2014-03-06 19:24 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Apple Computer 2014-03-06 19:25 - 2014-03-06 19:25 - 00000000 ____D () C:\Users\Selda\AppData\Local\Apple Computer 2014-03-06 19:22 - 2014-03-06 19:21 - 00000000 ____D () C:\Program Files\QuickTime 2014-03-06 19:21 - 2014-03-06 19:21 - 00001726 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-03-06 19:21 - 2014-03-06 19:21 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-03-06 19:19 - 2014-03-06 19:19 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\Users\Selda\AppData\Local\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\ProgramData\Apple 2014-03-06 19:18 - 2014-03-06 19:18 - 00000000 ____D () C:\Program Files\Apple Software Update 2014-03-06 19:17 - 2014-03-06 19:15 - 41945432 _____ (Apple Inc.) C:\Users\Selda\Downloads\QuickTimeInstaller.exe 2014-03-06 19:07 - 2014-03-06 19:07 - 00000941 _____ () C:\Users\Public\Desktop\PaMina e-version.lnk 2014-03-06 19:07 - 2014-03-06 19:07 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-03-06 19:07 - 2014-03-06 19:07 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-03-06 19:07 - 2014-03-06 19:06 - 00000000 ____D () C:\Program Files\Helbling 2014-03-06 19:07 - 2008-05-25 02:43 - 00000000 ____D () C:\ProgramData\Adobe 2014-03-06 19:07 - 2008-05-25 02:43 - 00000000 ____D () C:\Program Files\Adobe 2014-03-06 19:03 - 2014-02-17 22:10 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Adobe 2014-03-06 19:02 - 2014-02-17 23:24 - 00000000 ____D () C:\Users\Selda\AppData\Local\Adobe 2014-03-04 00:18 - 2014-03-04 00:18 - 00000000 ____D () C:\ProgramData\HP Product Assistant 2014-03-02 16:16 - 2014-03-02 16:16 - 00010484 _____ () C:\Users\Selda\Downloads\Einfuehrungsstunde Tanzen.zip 2014-03-02 16:09 - 2014-03-02 16:09 - 00023552 _____ () C:\Users\Selda\Downloads\Freies Tanzen.xls 2014-03-01 18:21 - 2014-02-17 22:10 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\Hewlett-Packard 2014-03-01 15:19 - 2008-05-25 02:11 - 00000000 ____D () C:\ProgramData\Hewlett-Packard 2014-02-28 00:59 - 2008-05-25 01:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared 2014-02-28 00:46 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-02-27 16:37 - 2014-02-27 16:37 - 00773968 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll 2014-02-27 16:37 - 2014-02-27 16:37 - 00421200 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll 2014-02-27 15:00 - 2014-02-23 21:59 - 00000000 ____D () C:\ProgramData\HP 2014-02-27 14:27 - 2014-02-23 21:59 - 00146162 _____ () C:\Windows\hpoins18.dat 2014-02-27 14:27 - 2014-02-23 21:59 - 00001313 _____ () C:\ProgramData\hpzinstall.log 2014-02-25 23:04 - 2014-02-25 23:04 - 00000000 ____D () C:\Users\Selda\Desktop\bewegungslieder 2014-02-25 22:58 - 2014-02-17 22:12 - 00000944 _____ () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-02-25 00:52 - 2014-02-25 00:52 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-02-25 00:33 - 2008-05-25 02:27 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-02-25 00:24 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\NDF 2014-02-25 00:19 - 2014-02-25 00:19 - 00000056 ____H () C:\Windows\system32\ezsidmv.dat 2014-02-23 22:54 - 2014-02-23 22:54 - 00000000 ____D () C:\ProgramData\WEBREG 2014-02-23 22:54 - 2014-02-23 22:29 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\HP 2014-02-23 22:31 - 2014-02-23 22:28 - 00000680 _____ () C:\Users\Selda\AppData\Local\d3d9caps.dat 2014-02-23 22:19 - 2014-02-23 22:19 - 00001870 _____ () C:\Users\Public\Desktop\Shop für HP Zubehör.lnk 2014-02-23 22:19 - 2014-02-23 22:19 - 00000000 ____D () C:\ProgramData\HPSSUPPLY 2014-02-23 22:19 - 2008-05-25 01:45 - 00000000 ____D () C:\Program Files\HP 2014-02-23 22:18 - 2014-02-23 22:18 - 00002029 _____ () C:\Users\Public\Desktop\HP Photosmart Essential.lnk 2014-02-23 22:18 - 2014-02-23 22:10 - 00000000 ____D () C:\Program Files\Common Files\HP 2014-02-23 22:14 - 2014-02-23 22:14 - 00001204 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk 2014-02-23 22:11 - 2014-02-23 22:11 - 00000000 ____D () C:\Program Files\Common Files\Hewlett-Packard 2014-02-23 22:07 - 2008-05-25 02:55 - 00030404 _____ () C:\Windows\DPINST.LOG 2014-02-23 21:57 - 2014-02-23 21:53 - 167339144 _____ () C:\Users\Selda\Downloads\AIO_CDA_Full_Network_deu_NB.exe 2014-02-23 21:18 - 2014-02-23 21:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf 2014-02-23 19:42 - 2014-02-23 19:42 - 00387584 _____ () C:\Users\Selda\Downloads\KL_bodyparts_guessing.ppt 2014-02-23 19:42 - 2014-02-23 19:42 - 00387584 _____ () C:\Users\Selda\Downloads\KL_bodyparts_guessing (1).ppt 2014-02-23 19:42 - 2014-02-23 19:42 - 00214528 _____ () C:\Users\Selda\Downloads\KL_mybody.ppt 2014-02-23 11:53 - 2014-02-17 22:13 - 00000000 ____D () C:\Users\Selda\AppData\Local\QuickPlay 2014-02-23 11:46 - 2014-02-23 11:46 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2014-02-23 11:46 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\el-GR 2014-02-23 11:45 - 2008-05-25 11:02 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2014-02-23 11:45 - 2006-11-02 13:37 - 00000000 ____D () C:\Windows\system32\XPSViewer 2014-02-23 11:45 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Journal 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\zh-TW 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\zh-CN 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\uk-UA 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\th-TH 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sv-SE 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sl-SI 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sk-SK 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ru-RU 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ro-RO 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pt-PT 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pt-BR 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pl-PL 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\nl-NL 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\nb-NO 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\lv-LV 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\lt-LT 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ko-KR 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ja-JP 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\it-IT 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\hu-HU 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\hr-HR 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\he-IL 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\fr-FR 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\fi-FI 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\et-EE 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\bg-BG 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ar-SA 2014-02-23 11:45 - 2006-11-02 12:18 - 00000000 ____D () C:\Program Files\Common Files\System 2014-02-23 06:50 - 2014-03-12 03:01 - 12347904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-23 06:47 - 2014-03-12 03:02 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-23 06:43 - 2014-03-12 03:02 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-23 06:41 - 2014-03-12 03:02 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-23 06:40 - 2014-03-12 03:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-23 06:39 - 2014-03-12 03:02 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-23 06:38 - 2014-03-12 03:02 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-02-23 06:38 - 2014-03-12 03:02 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-23 06:38 - 2014-03-12 03:02 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-23 06:37 - 2014-03-12 03:02 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-23 06:37 - 2014-03-12 03:02 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-23 06:37 - 2014-03-12 03:02 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-23 06:37 - 2014-03-12 03:02 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-23 06:36 - 2014-03-12 03:02 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-23 06:36 - 2014-03-12 03:02 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-02-23 06:35 - 2014-03-12 03:02 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-23 00:49 - 2014-02-23 00:49 - 03063561 _____ (Macromedia, Inc.) C:\Users\Public\Documents\MobileTV.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02989660 _____ (Macromedia, Inc.) C:\Users\Public\Documents\DVD.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02864396 _____ (Macromedia, Inc.) C:\Users\Public\Documents\MPV.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02331174 _____ (Macromedia, Inc.) C:\Users\Public\Documents\Karaoke.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 02231606 _____ (Macromedia, Inc.) C:\Users\Public\Documents\Games.exe 2014-02-23 00:49 - 2014-02-23 00:49 - 00000021 _____ () C:\Users\Public\Documents\hpqp.txt 2014-02-23 00:49 - 2014-02-23 00:49 - 00000000 ____D () C:\Users\Selda\AppData\Roaming\CyberLink 2014-02-23 00:49 - 2014-02-23 00:49 - 00000000 ____D () C:\Users\Public\Documents\DEU 2014-02-23 00:14 - 2008-05-25 02:54 - 00000000 ____D () C:\Program Files\EasyBits For Kids 2014-02-21 23:05 - 2014-02-17 22:12 - 00000949 _____ () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-21 23:02 - 2006-11-02 12:18 - 00000000 ___RD () C:\Windows\Offline Web Pages 2014-02-21 22:37 - 2014-02-21 18:55 - 00008448 _____ () C:\Windows\IE9_main.log 2014-02-21 22:05 - 2014-02-21 22:05 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-02-21 22:05 - 2014-02-21 22:05 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-02-21 22:05 - 2014-02-21 22:05 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\advpack.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-02-21 22:05 - 2014-02-21 22:05 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-02-21 22:05 - 2014-02-21 22:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-02-21 22:05 - 2014-02-21 22:05 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-02-21 22:05 - 2006-11-02 07:32 - 00008798 _____ () C:\Windows\system32\icrav03.rat 2014-02-21 22:05 - 2006-11-02 07:32 - 00001988 _____ () C:\Windows\system32\ticrf.rat 2014-02-21 22:03 - 2014-02-21 22:03 - 02873344 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 01075712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00979456 _____ (Microsoft Corporation) C:\Windows\system32\MFH264Dec.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\MFHEAACdec.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4src.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2014-02-21 22:03 - 2014-02-21 22:03 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 01554432 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe 2014-02-21 22:02 - 2014-02-21 22:02 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2014-02-21 22:02 - 2014-02-21 22:02 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2014-02-21 22:02 - 2014-02-21 22:02 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\dxdiag.exe 2014-02-21 21:58 - 2014-02-21 21:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll 2014-02-21 21:58 - 2014-02-21 21:58 - 00189440 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-02-21 21:50 - 2014-02-17 22:12 - 00000915 _____ () C:\Users\Selda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Photo Gallery 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Defender 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Collaboration 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Calendar 2014-02-21 21:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Movie Maker 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\vi-VN 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\eu-ES 2014-02-21 21:39 - 2014-02-21 21:39 - 00000000 ____D () C:\Windows\system32\ca-ES 2014-02-21 21:39 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\SLUI 2014-02-21 21:39 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers 2014-02-21 21:39 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\IME 2014-02-21 21:05 - 2014-02-21 21:05 - 00000000 ____D () C:\Windows\system32\SPReview 2014-02-21 20:20 - 2014-02-21 20:20 - 00000000 ____D () C:\Windows\system32\EventProviders 2014-02-21 20:15 - 2014-02-21 20:06 - 365230920 _____ (Microsoft Corporation) C:\Users\Selda\Downloads\Windows6.0-KB948465-X86.exe 2014-02-21 18:55 - 2014-02-21 18:55 - 18733360 _____ (Microsoft Corporation) C:\Users\Selda\Downloads\IE9-WindowsVista-x86-deu.exe 2014-02-21 18:18 - 2008-05-25 01:30 - 00000000 ____D () C:\Program Files\Norton Internet Security Some content of TEMP: ==================== C:\Users\Selda\AppData\Local\Temp\Quarantine.exe C:\Users\Selda\AppData\Local\Temp\symlcsv1.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-23 20:44 ==================== End Of Log ============================ |
24.03.2014, 12:29 | #11 |
/// the machine /// TB-Ausbilder | Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen! passt ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
24.03.2014, 16:23 | #12 |
| Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen! Eine Frage habe ich noch bezüglich der Wechseldatenträger. Ich habe mein Smartphone des öfteren angeschlossen, soll bzw. darf ich das zum Scannen auch am Notebook anschließen oder bezieht sich das ausschließlich auf USB-Sticks etc? |
25.03.2014, 12:03 | #13 |
/// the machine /// TB-Ausbilder | Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen! Kannste anklemmen, weiß aber nicht ob ESET das auch erkennt.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Hotmail versendet Emails mit Link an alle Kontakte. Ich kann mich nicht mehr einloggen! |
einloggen, email gehackt, emails, falsch, fehlermeldung, gelöscht, hotmail, installiert, kaspersky, laptop, link, mail, mails, meldung, nicht mehr, notebook, passwort, pcs, recovery, recovery cd, trojaner, verschickt, virus, vista, warnmeldung, zugang |