|
Plagegeister aller Art und deren Bekämpfung: Otimizer Pro richtig entfernenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
15.02.2014, 17:06 | #1 |
| Otimizer Pro richtig entfernen Hallo, ich habe bei einem Download das Programm Optimizer Pro im Hintergrund mit heruntergeladen. Habe es bereits deinstalliert. |
15.02.2014, 17:10 | #2 |
| Otimizer Pro richtig entfernen FRST Logfile:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01 Ran by Heike (administrator) on HEIKESNEUER on 16-02-2014 16:53:43 Running from C:\Users\Heike\AppData\Local\Microsoft\Windows\INetCache\IE\D3FPEGLV Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe (McAfee, Inc.) C:\Windows\system32\mfevtps.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe () C:\Program Files (x86)\XSManager\WTGService.exe (4G Systems GmbH & Co. KG) C:\Windows\service4g.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (TomTom) C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe (Windows Net) C:\Users\Heike\AppData\Roaming\Windows Net Data\net.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe (4G Systems GmbH & Co. KG) C:\Windows\starter4g.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe (WebToGo Mobiles Internet GmbH) C:\Program Files (x86)\XSManager\XSManager.exe (McAfee, Inc.) C:\Program Files\mcafee\virusscan\McVsShld.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\Core\mchost.exe (TODO: <Company name>) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Pokki) C:\Users\Heike\AppData\Local\Pokki\Engine\pokki.exe (Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (McAfee, Inc.) C:\Program Files\mcafee.com\agent\McUpdate.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor) HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-07-24] (McAfee, Inc.) HKLM-x32\...\Run: [starter4g] - C:\Windows\starter4g.exe [160992 2010-07-08] (4G Systems GmbH & Co. KG) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications)) HKU\S-1-5-21-2625690926-640048793-2273920576-1002\...\Run: [Pokki] - C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform HKU\S-1-5-21-2625690926-640048793-2273920576-1002\...\Run: [MyDriveConnect.exe] - C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [473496 2013-11-29] (TomTom) HKU\S-1-5-21-2625690926-640048793-2273920576-1002\...\Policies\Explorer: [DisallowRun] 1 HKU\S-1-5-21-2625690926-640048793-2273920576-1002\...\MountPoints2: {9e1d77ec-8b82-11e3-8257-a4db30b313de} - "E:\autorun.exe" AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [387536 2013-08-01] (NVIDIA Corporation) AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [326224 2013-08-01] (NVIDIA Corporation) Startup: C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk ShortcutTarget: net.lnk -> C:\Users\Heike\AppData\Roaming\Windows Net Data\net.exe (Windows Net) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/software/ SearchScopes: HKLM - DefaultScope {3956447B-65D3-41D8-8D78-FFCA9FEE0FAF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {3956447B-65D3-41D8-8D78-FFCA9FEE0FAF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {3956447B-65D3-41D8-8D78-FFCA9FEE0FAF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {3956447B-65D3-41D8-8D78-FFCA9FEE0FAF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKCU - DefaultScope {3956447B-65D3-41D8-8D78-FFCA9FEE0FAF} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {3956447B-65D3-41D8-8D78-FFCA9FEE0FAF} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.) Tcpip\..\Interfaces\{53DB8075-0886-457D-A91E-06A9FFA37949}: [NameServer]139.7.30.126 139.7.30.125 Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (No Name) - C:\Users\Heike\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab [2014-02-03] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-02-13] CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Heike\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-02-03] ==================== Services (Whitelisted) ================= R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider) R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2650696 2013-07-26] (Acer Incorporated) R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated) R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.) R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [326856 2013-07-10] (McAfee, Inc.) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation) R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate) R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [326856 2013-07-10] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [175464 2013-07-24] (McAfee, Inc.) S3 McAWFwk; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-25] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [326856 2013-07-10] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [326856 2013-07-10] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-07-06] (McAfee, Inc.) S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [326856 2013-07-10] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [326856 2013-07-10] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [326856 2013-07-10] (McAfee, Inc.) R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1017016 2013-08-05] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [326856 2013-07-10] (McAfee, Inc.) R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457768 2013-08-02] (Acer Incorporate) R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [448040 2013-08-02] (Acer Incorporate) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [329168 2010-04-12] () R2 XS Stick Service; C:\Windows\service4g.exe [145120 2010-07-08] (4G Systems GmbH & Co. KG) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.) S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [252728 2013-10-21] (AVG Technologies CZ, s.r.o.) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation) R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.) R3 cmnsusbser; C:\Windows\system32\DRIVERS\cmnsusbser.sys [117888 2014-02-01] (Mobile Connector) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation) R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.) S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.) R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [377040 2013-07-09] (McAfee, Inc.) S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [95984 2013-07-09] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) R4 ccSet_NARA; \SystemRoot\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-16 16:38 - 2014-02-16 16:53 - 00000000 ____D () C:\FRST 2014-02-16 16:34 - 2014-02-16 16:36 - 00000000 ____D () C:\e23cb8047bf5a592069801 2014-02-16 16:15 - 2014-02-16 16:15 - 00002739 _____ () C:\Users\Heike\Desktop\Microsoft Office PowerPoint 2007.lnk 2014-02-16 16:15 - 2014-02-16 16:15 - 00002739 _____ () C:\Users\Heike\Desktop\Microsoft Office PowerPoint 2007 (2).lnk 2014-02-16 16:15 - 2014-02-16 16:15 - 00002713 _____ () C:\Users\Heike\Desktop\Microsoft Office Word 2007.lnk 2014-02-16 16:12 - 2014-02-16 16:12 - 00002719 _____ () C:\Users\Heike\Desktop\Microsoft Office Excel 2007.lnk 2014-02-16 11:20 - 2014-02-16 11:20 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\AVG2014 2014-02-16 11:19 - 2014-02-16 11:19 - 00001001 _____ () C:\Users\Public\Desktop\AVG 2014.lnk 2014-02-16 11:19 - 2014-02-16 11:19 - 00000000 ___HD () C:\$AVG 2014-02-16 11:19 - 2014-02-16 11:19 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\TuneUp Software 2014-02-16 11:19 - 2014-02-16 11:19 - 00000000 ____D () C:\ProgramData\AVG2014 2014-02-16 11:18 - 2014-02-16 11:18 - 00000000 ____D () C:\Program Files (x86)\AVG 2014-02-16 11:08 - 2014-02-16 11:34 - 00000000 ____D () C:\Users\Heike\AppData\Local\Avg2014 2014-02-16 11:08 - 2014-02-16 11:34 - 00000000 ____D () C:\ProgramData\MFAData 2014-02-16 11:08 - 2014-02-16 11:08 - 00000000 ____D () C:\Users\Heike\AppData\Local\MFAData 2014-02-16 10:57 - 2014-02-16 10:57 - 00001395 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2014-02-16 10:57 - 2014-02-16 10:57 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking 2014-02-16 10:56 - 2014-02-16 11:21 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-02-16 10:56 - 2014-02-16 10:57 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-02-16 10:56 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2014-02-13 16:14 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe 2014-02-13 16:14 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe 2014-02-10 08:21 - 2014-02-10 08:21 - 00001472 _____ () C:\Users\Heike\Downloads\URLLink (2).acsm 2014-02-03 13:03 - 2014-02-03 13:03 - 00003556 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask 2014-02-03 12:50 - 2014-02-03 13:03 - 00000000 ___RD () C:\Windows\BrowserChoice 2014-02-03 12:32 - 2014-02-03 12:32 - 00000605 _____ () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CD-Laufwerk - Verknüpfung (2).lnk 2014-02-03 12:06 - 2013-10-22 09:18 - 01287064 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-02-03 12:06 - 2013-10-22 08:55 - 02328872 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-02-03 12:06 - 2013-10-22 07:03 - 02065448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2014-02-03 12:06 - 2013-10-22 03:07 - 02617344 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-02-03 12:06 - 2013-10-22 02:53 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll 2014-02-03 12:06 - 2013-10-19 09:51 - 00481392 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll 2014-02-03 12:06 - 2013-10-19 08:12 - 00380656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll 2014-02-03 12:06 - 2013-10-19 04:26 - 01231360 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2014-02-03 12:06 - 2013-10-17 16:42 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll 2014-02-03 12:06 - 2013-10-17 16:42 - 01373872 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2014-02-03 12:06 - 2013-10-13 03:43 - 00708616 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll 2014-02-03 12:06 - 2013-10-08 11:13 - 02551640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-02-03 12:06 - 2013-10-08 06:50 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2014-02-03 12:06 - 2013-10-08 06:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll 2014-02-03 12:06 - 2013-10-07 03:13 - 03532288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-02-03 12:06 - 2013-10-05 10:18 - 01011712 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-02-03 12:06 - 2013-10-05 09:56 - 01147904 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll 2014-02-03 12:06 - 2013-10-05 09:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll 2014-02-03 12:06 - 2013-10-05 08:39 - 06639616 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-02-03 12:06 - 2013-10-05 08:32 - 05769728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-02-03 12:06 - 2013-10-04 09:10 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll 2014-02-03 12:06 - 2013-09-17 10:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll 2014-02-03 12:06 - 2013-09-17 07:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll 2014-02-03 12:06 - 2013-09-14 15:07 - 02134120 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll 2014-02-03 12:06 - 2013-09-14 13:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll 2014-02-03 12:06 - 2013-09-10 06:26 - 04599808 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-03 12:05 - 2013-11-05 21:21 - 21196664 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-02-03 12:05 - 2013-11-05 19:51 - 18642504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-02-03 12:05 - 2013-11-05 17:20 - 13925888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2014-02-03 12:05 - 2013-11-05 17:11 - 18577408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2014-02-03 12:05 - 2013-10-23 12:29 - 00044936 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll 2014-02-03 12:05 - 2013-10-23 12:21 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-02-03 12:05 - 2013-10-23 12:13 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll 2014-02-03 12:05 - 2013-10-22 06:15 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2014-02-03 12:05 - 2013-10-22 05:04 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll 2014-02-03 12:05 - 2013-10-22 05:02 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-02-03 12:05 - 2013-10-22 04:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll 2014-02-03 12:05 - 2013-10-22 04:44 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll 2014-02-03 12:05 - 2013-10-22 03:38 - 01362944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2014-02-03 12:05 - 2013-10-22 03:22 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2014-02-03 12:05 - 2013-10-22 03:13 - 01704448 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-02-03 12:05 - 2013-10-22 02:47 - 02295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-02-03 12:05 - 2013-10-19 05:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2014-02-03 12:05 - 2013-10-19 05:03 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2014-02-03 12:05 - 2013-10-19 04:14 - 00888832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2014-02-03 12:05 - 2013-10-17 15:04 - 01204968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll 2014-02-03 12:05 - 2013-10-16 10:34 - 00518656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe 2014-02-03 12:05 - 2013-10-16 10:33 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe 2014-02-03 12:05 - 2013-10-13 04:06 - 00258904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2014-02-03 12:05 - 2013-10-10 17:44 - 00031064 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll 2014-02-03 12:05 - 2013-10-10 17:26 - 00317616 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-02-03 12:05 - 2013-10-10 17:26 - 00104320 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll 2014-02-03 12:05 - 2013-10-10 15:53 - 00235960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-02-03 12:05 - 2013-10-10 15:53 - 00088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll 2014-02-03 12:05 - 2013-10-10 12:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-02-03 12:05 - 2013-10-10 12:26 - 02801664 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2014-02-03 12:05 - 2013-10-10 12:05 - 01019392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2014-02-03 12:05 - 2013-10-10 11:34 - 01085952 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll 2014-02-03 12:05 - 2013-10-10 11:27 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll 2014-02-03 12:05 - 2013-10-09 06:40 - 00385528 _____ () C:\Windows\system32\ApnDatabase.xml 2014-02-03 12:05 - 2013-10-08 11:28 - 00523096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2014-02-03 12:05 - 2013-10-08 07:46 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2014-02-03 12:05 - 2013-10-08 06:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll 2014-02-03 12:05 - 2013-10-08 06:48 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2014-02-03 12:05 - 2013-10-08 06:15 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2014-02-03 12:05 - 2013-10-08 05:50 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2014-02-03 12:05 - 2013-10-08 05:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll 2014-02-03 12:05 - 2013-10-07 08:21 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-02-03 12:05 - 2013-10-05 16:25 - 00057176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys 2014-02-03 12:05 - 2013-10-05 15:21 - 00699840 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-02-03 12:05 - 2013-10-05 13:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-02-03 12:05 - 2013-10-05 12:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-02-03 12:05 - 2013-10-05 12:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS 2014-02-03 12:05 - 2013-10-05 12:00 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2014-02-03 12:05 - 2013-10-05 10:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-02-03 12:05 - 2013-10-05 10:07 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2014-02-03 12:05 - 2013-10-05 09:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll 2014-02-03 12:05 - 2013-10-05 09:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-02-03 12:05 - 2013-10-05 09:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\miutils.dll 2014-02-03 12:05 - 2013-10-05 09:15 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll 2014-02-03 12:05 - 2013-10-05 08:43 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll 2014-02-03 12:05 - 2013-10-05 08:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2014-02-03 12:05 - 2013-09-26 07:51 - 00669184 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll 2014-02-03 12:05 - 2013-09-26 07:34 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll 2014-02-03 12:05 - 2013-09-26 07:34 - 00515072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll 2014-02-03 12:05 - 2013-09-19 06:04 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll 2014-02-03 12:05 - 2013-09-17 10:06 - 00465960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2014-02-03 12:05 - 2013-09-17 07:31 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2014-02-03 12:05 - 2013-09-17 05:37 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll 2014-02-03 12:05 - 2013-09-14 15:00 - 00391512 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll 2014-02-03 12:05 - 2013-09-14 13:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll 2014-02-03 12:05 - 2013-09-14 11:05 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe 2014-02-03 12:05 - 2013-09-14 10:11 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll 2014-02-03 12:05 - 2013-09-13 09:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe 2014-02-03 12:05 - 2013-09-13 08:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe 2014-02-03 12:05 - 2013-09-12 09:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll 2014-02-03 12:05 - 2013-09-12 09:08 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll 2014-02-03 12:05 - 2013-09-12 09:08 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll 2014-02-03 12:05 - 2013-09-12 09:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll 2014-02-03 12:05 - 2013-09-12 08:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll 2014-02-03 12:05 - 2013-09-12 08:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll 2014-02-03 12:05 - 2013-09-12 08:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll 2014-02-03 12:05 - 2013-09-12 08:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll 2014-02-03 12:05 - 2013-09-12 08:16 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll 2014-02-03 12:05 - 2013-09-12 08:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll 2014-02-03 12:05 - 2013-09-10 05:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll 2014-02-03 12:05 - 2013-09-10 05:34 - 03934208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-02-03 12:04 - 2013-11-11 03:48 - 00039768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys 2014-02-03 12:04 - 2013-11-09 12:55 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS 2014-02-03 12:04 - 2013-11-09 07:37 - 01756160 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe 2014-02-03 12:04 - 2013-11-09 06:56 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe 2014-02-03 12:04 - 2013-11-08 11:26 - 00358896 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll 2014-02-03 12:04 - 2013-11-08 05:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll 2014-02-03 12:04 - 2013-11-08 05:28 - 13177344 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2014-02-03 12:04 - 2013-11-08 05:26 - 11674624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2014-02-03 12:04 - 2013-11-08 05:16 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll 2014-02-03 12:04 - 2013-11-08 05:15 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll 2014-02-03 12:04 - 2013-11-08 05:07 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll 2014-02-03 12:04 - 2013-11-08 04:41 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll 2014-02-03 12:04 - 2013-11-08 04:14 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll 2014-02-03 12:04 - 2013-11-05 15:19 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll 2014-02-03 12:04 - 2013-11-05 15:03 - 00637952 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe 2014-02-03 12:04 - 2013-11-05 14:57 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe 2014-02-03 12:04 - 2013-11-05 14:33 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll 2014-02-03 12:04 - 2013-11-05 14:32 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll 2014-02-03 12:04 - 2013-11-04 18:13 - 01530200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-02-03 12:04 - 2013-11-04 18:13 - 00382808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-02-03 12:04 - 2013-11-04 14:07 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2014-02-03 12:04 - 2013-11-04 12:50 - 02143744 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2014-02-03 12:04 - 2013-11-04 11:32 - 02570240 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2014-02-03 12:04 - 2013-11-04 03:28 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2014-02-03 12:04 - 2013-11-04 02:30 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2014-02-03 12:04 - 2013-11-01 12:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys 2014-02-03 12:04 - 2013-11-01 07:08 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll 2014-02-03 12:04 - 2013-11-01 06:57 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll 2014-02-03 12:04 - 2013-10-31 01:58 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2014-02-03 12:04 - 2013-10-31 01:42 - 07399256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-02-03 12:04 - 2013-10-31 01:33 - 01642016 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2014-02-03 12:04 - 2013-10-31 01:33 - 01506680 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2014-02-03 12:04 - 2013-10-31 01:33 - 01476184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2014-02-03 12:04 - 2013-10-31 01:33 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2014-02-03 12:04 - 2013-10-26 02:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys 2014-02-03 12:04 - 2013-10-24 10:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll 2014-02-03 12:04 - 2013-10-24 10:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll 2014-02-03 12:04 - 2013-10-17 12:21 - 02896896 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2014-02-03 12:04 - 2013-10-17 11:36 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll 2014-02-03 12:04 - 2013-10-10 12:53 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll 2014-02-03 12:04 - 2013-10-10 12:21 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll 2014-02-03 12:04 - 2013-10-05 15:21 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-02-03 12:04 - 2013-10-05 15:21 - 00516496 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-02-03 12:04 - 2013-10-05 13:05 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-02-03 12:04 - 2013-10-05 13:05 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-02-03 12:02 - 2013-09-25 11:25 - 00783504 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll 2014-02-03 12:02 - 2013-09-25 09:58 - 00648648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll 2014-02-03 12:02 - 2013-09-24 06:54 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll 2014-02-03 12:02 - 2013-09-24 06:10 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll 2014-02-03 12:02 - 2013-09-24 06:05 - 01245696 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2014-02-03 12:02 - 2013-09-24 04:56 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll 2014-02-03 12:02 - 2013-09-21 13:10 - 00236376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2014-02-03 12:02 - 2013-09-21 12:50 - 00528048 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2014-02-03 12:02 - 2013-09-21 12:48 - 00534048 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-02-03 12:02 - 2013-09-21 12:48 - 00123480 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2014-02-03 12:02 - 2013-09-21 12:18 - 01109936 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-02-03 12:02 - 2013-09-21 12:04 - 00419160 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2014-02-03 12:02 - 2013-09-21 11:56 - 01119576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-02-03 12:02 - 2013-09-21 11:56 - 00101208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-02-03 12:02 - 2013-09-21 11:53 - 02131120 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll 2014-02-03 12:02 - 2013-09-21 11:53 - 01928656 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll 2014-02-03 12:02 - 2013-09-21 11:53 - 01534504 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2014-02-03 12:02 - 2013-09-21 11:53 - 00996320 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll 2014-02-03 12:02 - 2013-09-21 11:53 - 00934856 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll 2014-02-03 12:02 - 2013-09-21 11:53 - 00366688 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll 2014-02-03 12:02 - 2013-09-21 11:51 - 01720552 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-02-03 12:02 - 2013-09-21 11:45 - 00171968 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-02-03 12:02 - 2013-09-21 10:23 - 00427096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-02-03 12:02 - 2013-09-21 10:23 - 00098104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2014-02-03 12:02 - 2013-09-21 10:12 - 01370800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll 2014-02-03 12:02 - 2013-09-21 10:12 - 01092896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2014-02-03 12:02 - 2013-09-21 10:09 - 02142424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2014-02-03 12:02 - 2013-09-21 10:09 - 01472048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-02-03 12:02 - 2013-09-21 10:09 - 00796928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll 2014-02-03 12:02 - 2013-09-21 10:09 - 00312936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll 2014-02-03 12:02 - 2013-09-21 08:58 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-02-03 12:02 - 2013-09-21 08:57 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-02-03 12:02 - 2013-09-21 08:56 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-02-03 12:02 - 2013-09-21 08:55 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys 2014-02-03 12:02 - 2013-09-21 08:50 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2014-02-03 12:02 - 2013-09-21 08:17 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe 2014-02-03 12:02 - 2013-09-21 08:05 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-02-03 12:02 - 2013-09-21 07:55 - 00168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll 2014-02-03 12:02 - 2013-09-21 07:33 - 11366912 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll 2014-02-03 12:02 - 2013-09-21 07:27 - 00911872 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2014-02-03 12:02 - 2013-09-21 07:06 - 01415168 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-02-03 12:02 - 2013-09-21 07:00 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2014-02-03 12:02 - 2013-09-21 06:59 - 00940544 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-02-03 12:02 - 2013-09-21 06:57 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\livessp.dll 2014-02-03 12:02 - 2013-09-21 06:56 - 08712704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll 2014-02-03 12:02 - 2013-09-21 06:50 - 00767488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll 2014-02-03 12:02 - 2013-09-21 06:43 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2014-02-03 12:02 - 2013-09-21 06:38 - 00365568 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll 2014-02-03 12:02 - 2013-09-21 06:36 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2014-02-03 12:02 - 2013-09-21 06:34 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll 2014-02-03 12:02 - 2013-09-21 06:31 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-02-03 12:02 - 2013-09-21 06:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll 2014-02-03 12:02 - 2013-09-21 06:16 - 01503232 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2014-02-03 12:02 - 2013-09-21 06:10 - 12028416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll 2014-02-03 12:02 - 2013-09-21 06:08 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2014-02-03 12:02 - 2013-09-21 06:05 - 08875008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll 2014-02-03 12:02 - 2013-09-21 05:58 - 00803328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2014-02-03 12:02 - 2013-09-21 05:49 - 04975104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2014-02-03 12:02 - 2013-09-21 05:48 - 07544320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2014-02-03 12:02 - 2013-09-21 05:45 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2014-02-03 12:02 - 2013-09-21 05:44 - 01662464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll 2014-02-03 12:02 - 2013-09-21 05:42 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2014-02-03 12:02 - 2013-09-21 05:39 - 01455616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll 2014-02-03 12:02 - 2013-09-21 05:36 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2014-02-03 12:02 - 2013-09-19 06:08 - 01150976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll 2014-02-03 12:02 - 2013-09-19 06:01 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll 2014-02-03 12:02 - 2013-09-19 05:37 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll 2014-02-03 12:02 - 2013-09-19 05:32 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll 2014-02-03 12:02 - 2013-09-19 05:27 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll 2014-02-03 12:02 - 2013-09-19 05:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll 2014-02-03 12:02 - 2013-09-19 05:11 - 01344000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll 2014-02-03 12:02 - 2013-09-19 05:10 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2014-02-03 12:02 - 2013-09-19 04:59 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll 2014-02-03 12:02 - 2013-09-19 04:55 - 00552448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll 2014-02-03 12:02 - 2013-09-19 04:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2014-02-03 12:02 - 2013-09-19 04:32 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2014-02-03 12:02 - 2013-09-17 10:18 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2014-02-03 12:02 - 2013-09-17 06:00 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll 2014-02-03 12:02 - 2013-09-12 08:37 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2014-02-03 12:02 - 2013-09-07 17:12 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2014-02-03 12:02 - 2013-09-07 12:07 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\TetheringMgr.dll 2014-02-03 12:02 - 2013-09-07 11:51 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll 2014-02-03 12:02 - 2013-09-07 11:51 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll 2014-02-03 12:02 - 2013-09-04 06:47 - 00492032 _____ (Microsoft Corporation) C:\Windows\system32\tpmvsc.dll 2014-02-03 12:02 - 2013-09-04 06:12 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\DscCoreConfProv.dll 2014-02-03 12:02 - 2013-09-04 05:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll 2014-02-03 12:02 - 2013-08-31 15:18 - 00205024 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll 2014-02-03 12:02 - 2013-08-31 13:15 - 00180232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll 2014-02-03 12:02 - 2013-08-28 08:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe 2014-02-03 12:01 - 2013-09-26 10:20 - 00556032 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe 2014-02-03 12:01 - 2013-09-26 08:32 - 00638464 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll 2014-02-03 12:01 - 2013-09-26 08:14 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll 2014-02-03 12:01 - 2013-09-25 08:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll 2014-02-03 12:01 - 2013-09-25 06:40 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll 2014-02-03 12:01 - 2013-09-24 07:55 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe 2014-02-03 12:01 - 2013-09-24 06:59 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe 2014-02-03 12:01 - 2013-09-21 13:10 - 00579416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-02-03 12:01 - 2013-09-21 13:10 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2014-02-03 12:01 - 2013-09-21 11:53 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-02-03 12:01 - 2013-09-21 07:01 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll 2014-02-03 12:01 - 2013-09-21 06:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-02-03 12:01 - 2013-09-21 06:20 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2014-02-03 12:01 - 2013-09-21 06:09 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll 2014-02-03 12:01 - 2013-09-21 06:02 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll 2014-02-03 12:01 - 2013-09-21 05:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll 2014-02-03 12:01 - 2013-09-21 05:38 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll 2014-02-03 12:01 - 2013-09-21 05:38 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll 2014-02-03 12:01 - 2013-09-21 05:37 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll 2014-02-03 12:01 - 2013-09-19 08:19 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersRes.dll 2014-02-03 12:01 - 2013-09-19 07:39 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll 2014-02-03 12:01 - 2013-09-19 07:27 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\WorkFolders.exe 2014-02-03 12:01 - 2013-09-19 07:23 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WorkFoldersRes.dll 2014-02-03 12:01 - 2013-09-19 07:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2014-02-03 12:01 - 2013-09-19 06:47 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.dll 2014-02-03 12:01 - 2013-09-19 06:29 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx 2014-02-03 12:01 - 2013-09-19 05:25 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll 2014-02-03 12:01 - 2013-09-17 07:58 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2014-02-03 12:01 - 2013-09-17 06:26 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2014-02-03 12:01 - 2013-09-17 06:15 - 01225728 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2014-02-03 12:01 - 2013-09-17 05:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll 2014-02-03 12:01 - 2013-09-17 05:08 - 00738304 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll 2014-02-03 12:01 - 2013-09-17 04:28 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll 2014-02-03 12:01 - 2013-09-14 15:06 - 00175960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VerifierExt.sys 2014-02-03 12:01 - 2013-09-14 15:06 - 00066904 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL 2014-02-03 12:01 - 2013-09-14 12:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2014-02-03 12:01 - 2013-09-14 12:38 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys 2014-02-03 12:01 - 2013-09-13 10:52 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\SensorsClassExtension.dll 2014-02-03 12:01 - 2013-09-13 09:54 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll 2014-02-03 12:01 - 2013-09-13 09:10 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll 2014-02-03 12:01 - 2013-09-13 08:55 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll 2014-02-03 12:01 - 2013-09-13 08:30 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll 2014-02-03 12:01 - 2013-09-12 13:33 - 06353952 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2014-02-03 12:01 - 2013-09-11 10:32 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys 2014-02-03 12:01 - 2013-09-11 10:31 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2014-02-03 12:01 - 2013-09-11 10:31 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-02-03 12:01 - 2013-09-11 08:41 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll 2014-02-03 12:01 - 2013-09-11 08:09 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll 2014-02-03 12:01 - 2013-09-07 17:12 - 00458616 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2014-02-03 12:01 - 2013-09-07 15:45 - 00408480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2014-02-03 12:01 - 2013-09-07 15:45 - 00368736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2014-02-03 12:01 - 2013-09-07 13:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\fdprint.dll 2014-02-03 12:01 - 2013-09-07 13:29 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll 2014-02-03 12:01 - 2013-09-07 13:00 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdprint.dll 2014-02-03 12:01 - 2013-09-07 12:50 - 00482816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceCenter.dll 2014-02-03 12:01 - 2013-09-07 12:45 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll 2014-02-03 12:01 - 2013-09-07 12:30 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll 2014-02-03 12:01 - 2013-09-07 12:22 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll 2014-02-03 12:01 - 2013-09-07 12:13 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll 2014-02-03 12:01 - 2013-09-05 08:39 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2014-02-03 12:01 - 2013-09-05 07:42 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe 2014-02-03 12:01 - 2013-09-05 06:40 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Utilman.exe 2014-02-03 12:01 - 2013-09-04 08:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll 2014-02-03 12:01 - 2013-09-04 07:16 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll 2014-02-03 12:01 - 2013-09-04 05:48 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll 2014-02-03 12:01 - 2013-09-04 05:35 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll 2014-02-03 12:01 - 2013-08-31 11:00 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll 2014-02-03 12:01 - 2013-08-31 10:25 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll 2014-02-03 12:01 - 2013-08-30 08:31 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll 2014-02-03 12:01 - 2013-08-28 09:03 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2014-02-03 12:01 - 2013-08-28 08:55 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe 2014-02-03 12:01 - 2013-08-28 08:09 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll 2014-02-03 12:01 - 2013-08-28 08:04 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll 2014-02-03 12:01 - 2013-08-27 08:44 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys 2014-02-03 12:00 - 2014-02-16 16:36 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-03 12:00 - 2014-02-16 16:34 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-03 11:59 - 2013-10-19 09:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-02-03 11:59 - 2013-10-19 08:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-02-03 11:59 - 2013-10-03 10:16 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll 2014-02-03 11:59 - 2013-10-03 10:02 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll 2014-02-03 11:59 - 2013-10-02 12:00 - 01286552 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2014-02-03 11:59 - 2013-10-02 10:47 - 01018960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2014-02-03 11:59 - 2013-10-01 04:42 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll 2014-02-03 11:59 - 2013-10-01 04:36 - 00977408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll 2014-02-03 11:57 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll 2014-02-03 11:57 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe 2014-02-03 11:57 - 2013-11-27 11:34 - 00138240 _____ () C:\Windows\system32\OEMLicense.dll 2014-02-03 11:57 - 2013-11-27 10:54 - 00103936 _____ () C:\Windows\SysWOW64\OEMLicense.dll 2014-02-03 11:57 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-03 11:57 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll 2014-02-03 11:57 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-03 11:57 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll 2014-02-03 11:57 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2014-02-03 11:57 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2014-02-03 11:57 - 2013-11-23 05:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-02-03 11:57 - 2013-11-23 05:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-02-03 11:57 - 2013-11-23 04:32 - 04105728 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll 2014-02-03 11:57 - 2013-11-23 04:10 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe 2014-02-03 11:57 - 2013-10-23 12:01 - 00872840 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2014-02-03 11:57 - 2013-10-23 09:59 - 00698232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2014-02-03 11:57 - 2013-10-15 09:54 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-02-03 11:57 - 2013-10-15 09:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2014-02-03 11:57 - 2013-10-13 03:48 - 00136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys 2014-02-03 11:57 - 2013-10-12 22:48 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2014-02-03 11:57 - 2013-10-12 22:34 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-02-03 11:57 - 2013-10-05 15:21 - 01341288 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-02-03 11:57 - 2013-10-05 09:39 - 01067008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-02-03 11:53 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-03 11:53 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-03 11:53 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-03 11:53 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-03 11:53 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-03 11:53 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-03 11:53 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-03 11:53 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-03 11:53 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-03 11:53 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-03 11:53 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-03 11:53 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-03 11:53 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-03 11:53 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-03 11:53 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-03 11:53 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-03 11:53 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-03 11:53 - 2013-10-19 06:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-03 11:53 - 2013-09-26 09:24 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-03 11:52 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Heike\AppData\Local\TomTom 2014-02-03 11:52 - 2014-02-03 11:52 - 00000000 ____D () C:\Program Files (x86)\TomTom International B.V 2014-02-03 11:52 - 2014-02-03 11:52 - 00000000 ____D () C:\Program Files (x86)\MyDrive Connect 2014-02-03 11:51 - 2013-11-08 08:21 - 04191744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-02-03 11:51 - 2013-10-16 16:58 - 01943536 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-02-03 11:51 - 2013-10-16 14:54 - 01581968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-02-03 11:50 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2014-02-03 11:50 - 2013-11-09 07:34 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe 2014-02-03 11:50 - 2013-11-09 07:34 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll 2014-02-03 11:50 - 2013-11-09 06:52 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll 2014-02-03 11:50 - 2013-10-11 14:24 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2014-02-03 11:50 - 2013-10-11 14:03 - 00621056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2014-02-03 10:28 - 2014-02-03 10:28 - 00000017 _____ () C:\Users\Heike\AppData\Local\resmon.resmoncfg 2014-02-03 10:27 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys 2014-02-03 09:32 - 2014-02-03 09:32 - 00001524 _____ () C:\Users\Heike\Downloads\URLLink (1).acsm 2014-02-03 09:06 - 2014-02-03 09:06 - 00001472 _____ () C:\Users\Heike\Downloads\URLLink.acsm 2014-02-03 08:55 - 2014-02-03 08:55 - 00000000 ____D () C:\Users\Heike\Documents\Optimizer Pro 2014-02-03 08:47 - 2014-02-03 08:47 - 00000000 ____D () C:\Users\Heike\AppData\Local\Adobe_Systems_Incorporate 2014-02-03 08:46 - 2014-02-10 08:36 - 00000000 ____D () C:\Users\Heike\Documents\My Digital Editions 2014-02-03 08:45 - 2014-02-03 11:40 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\Windows Net Data 2014-02-03 08:45 - 2014-02-03 08:45 - 00000187 _____ () C:\Users\Heike\Desktop\Amazon.de.url 2014-02-03 08:45 - 2014-02-03 08:45 - 00000000 ____D () C:\Users\Heike\ChromeExtensions 2014-02-03 08:45 - 2014-02-03 08:45 - 00000000 ____D () C:\Users\Heike\AppData\Local\Temp77465fc55969e6967b70a0e0e8a86ccd 2014-02-03 08:45 - 2014-02-03 08:45 - 00000000 ____D () C:\Users\Heike\AppData\Local\Temp2a39c99e0036f46aeaaa493232845e60 2014-02-03 08:45 - 2014-02-03 08:45 - 00000000 ____D () C:\Users\Heike\AppData\Local\Google 2014-02-03 08:17 - 2014-02-03 08:17 - 00002125 _____ () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk 2014-02-02 20:09 - 2014-02-02 20:09 - 00000000 ____D () C:\Program Files (x86)\Allin1Convert_8hEI 2014-02-02 19:37 - 2014-02-02 19:37 - 00000000 ____D () C:\Users\Heike\AppData\Local\Kobo 2014-02-02 19:34 - 2014-02-02 19:38 - 00000000 ____D () C:\Windows\tmp 2014-02-02 19:34 - 2014-02-02 19:34 - 00001015 _____ () C:\Users\Public\Desktop\Kobo.lnk 2014-02-02 19:34 - 2014-02-02 19:34 - 00000000 ____D () C:\Program Files (x86)\Kobo 2014-02-02 19:29 - 2014-02-02 19:29 - 00000000 ____D () C:\Users\Heike\AppData\Local\Acer Aspire R7 Tutorial 2014-02-02 19:24 - 2014-02-02 19:24 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\Macromedia 2014-02-02 19:24 - 2014-02-02 19:24 - 00000000 ____D () C:\Users\Heike\AppData\Local\updater4g 2014-02-01 23:40 - 2014-02-16 16:17 - 00000000 ____D () C:\Users\Heike\AppData\Local\Deployment 2014-02-01 23:40 - 2014-02-01 23:40 - 00000000 ____D () C:\Users\Heike\AppData\Local\Apps\2.0 2014-02-01 23:28 - 2014-02-01 23:28 - 00000000 ____D () C:\Windows\PCHEALTH 2014-02-01 23:28 - 2014-02-01 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works 2014-02-01 23:25 - 2014-02-01 23:25 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-02-01 23:23 - 2014-02-01 23:23 - 00000000 ____D () C:\Users\Heike\AppData\Local\Microsoft Help 2014-02-01 23:22 - 2014-02-01 23:38 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-02-01 23:22 - 2014-02-01 23:22 - 00000000 __RHD () C:\MSOCache 2014-02-01 22:48 - 2014-02-01 22:48 - 00000000 ____D () C:\Users\Public\OEM 2014-02-01 22:48 - 2014-02-01 22:48 - 00000000 ____D () C:\Users\Heike\Documents\clear.fi 2014-02-01 22:34 - 2014-02-13 16:08 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\XSManager 2014-02-01 22:34 - 2014-02-01 22:34 - 00133120 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_netamd.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00118272 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_seramd.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00117888 _____ (Mobile Connector) C:\Windows\system32\Drivers\cmnsusbser.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00112640 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_net32.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00103680 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_ser32.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00101056 _____ () C:\Windows\system32\Drivers\dvb_nova_12mhz_b0.inp 2014-02-01 22:34 - 2014-02-01 22:34 - 00092456 _____ () C:\Windows\system32\Drivers\isdbt_nova_12mhz_b0.inp 2014-02-01 22:34 - 2014-02-01 22:34 - 00079036 _____ () C:\Windows\system32\Drivers\tdmb_nova_12mhz_b0.inp 2014-02-01 22:34 - 2014-02-01 22:34 - 00063648 _____ (Siano) C:\Windows\system32\Drivers\smsbda.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00000040 _____ () C:\Windows\system32\Drivers\smsbda.cfg 2014-02-01 22:34 - 2014-02-01 22:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-02-01 22:34 - 2014-02-01 22:34 - 00000000 ____D () C:\Program Files (x86)\XSManager 2014-02-01 22:34 - 2010-07-08 18:05 - 00312544 ____R (4G Systems GmbH & Co. KG) C:\Windows\updater4g.exe 2014-02-01 22:34 - 2010-07-08 18:05 - 00160992 ____R (4G Systems GmbH & Co. KG) C:\Windows\starter4g.exe 2014-02-01 22:34 - 2010-07-08 18:05 - 00145120 ____R (4G Systems GmbH & Co. KG) C:\Windows\service4g.exe 2014-02-01 22:10 - 2014-02-16 16:47 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2625690926-640048793-2273920576-1002 2014-02-01 22:10 - 2014-02-16 16:26 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7082E20D-4460-455D-B61C-910B6E87C0E0} 2014-02-01 22:08 - 2014-02-01 22:08 - 00000000 ____D () C:\Users\Public\Pokki 2014-02-01 22:07 - 2014-02-16 16:16 - 00000000 ____D () C:\Users\Heike\AppData\Local\clear.fi 2014-02-01 22:07 - 2014-02-01 22:07 - 00000000 ____D () C:\Users\Heike\PicStream 2014-02-01 22:06 - 2014-02-01 22:06 - 00002625 _____ () C:\Users\Public\Desktop\eBay.lnk 2014-02-01 22:06 - 2014-02-01 22:06 - 00001276 _____ () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk 2014-02-01 22:06 - 2014-02-01 22:06 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\Atheros 2014-02-01 22:06 - 2014-02-01 22:06 - 00000000 ____D () C:\Program Files (x86)\OEM 2014-02-01 22:05 - 2014-02-16 16:26 - 00000000 ____D () C:\Users\Heike\AppData\Local\Pokki 2014-02-01 22:05 - 2014-02-16 16:08 - 00000000 ____D () C:\Users\Heike 2014-02-01 22:05 - 2014-02-03 13:03 - 00000000 ___RD () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-01 22:05 - 2014-02-03 13:03 - 00000000 ___RD () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-01 22:05 - 2014-02-03 13:03 - 00000000 ____D () C:\Users\Heike\AppData\Local\Packages 2014-02-01 22:05 - 2014-02-01 22:05 - 00001786 _____ () C:\Users\Public\Desktop\Online kaufen.lnk 2014-02-01 22:05 - 2014-02-01 22:05 - 00001454 _____ () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-01 22:05 - 2014-02-01 22:05 - 00000020 ___SH () C:\Users\Heike\ntuser.ini 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Vorlagen 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Startmenü 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Netzwerkumgebung 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Lokale Einstellungen 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Eigene Dateien 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Druckumgebung 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Documents\Eigene Musik 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Documents\Eigene Bilder 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\AppData\Local\Verlauf 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\AppData\Local\Anwendungsdaten 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Anwendungsdaten 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\Adobe 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 ____D () C:\Users\Heike\AppData\Local\VirtualStore 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 ____D () C:\Program Files\Accessory Store 2014-02-01 22:05 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-02-01 22:05 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-02-01 22:05 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-02-01 22:05 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Programme 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Dokumente und Einstellungen ==================== One Month Modified Files and Folders ======= 2021-10-21 14:36 - 2013-11-10 03:29 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat 2021-10-04 08:34 - 2013-11-10 03:29 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat 2014-02-16 16:53 - 2014-02-16 16:38 - 00000000 ____D () C:\FRST 2014-02-16 16:53 - 2013-11-10 03:09 - 01372326 _____ () C:\Windows\WindowsUpdate.log 2014-02-16 16:47 - 2014-02-01 22:10 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2625690926-640048793-2273920576-1002 2014-02-16 16:36 - 2014-02-16 16:34 - 00000000 ____D () C:\e23cb8047bf5a592069801 2014-02-16 16:36 - 2014-02-03 12:00 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-16 16:34 - 2014-02-03 12:00 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-16 16:34 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager 2014-02-16 16:34 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera 2014-02-16 16:34 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness 2014-02-16 16:29 - 2013-11-10 11:52 - 00765582 _____ () C:\Windows\system32\perfh007.dat 2014-02-16 16:29 - 2013-11-10 11:52 - 00159366 _____ () C:\Windows\system32\perfc007.dat 2014-02-16 16:29 - 2013-10-15 15:30 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-16 16:28 - 2013-11-10 03:49 - 00000000 ____D () C:\ProgramData\boost_interprocess 2014-02-16 16:28 - 2013-11-10 03:48 - 00000000 ____D () C:\Program Files (x86)\Norton Online Backup ARA 2014-02-16 16:27 - 2013-10-15 15:45 - 00001864 _____ () C:\Users\Public\Desktop\McAfee LiveSafe – Internet Security.lnk 2014-02-16 16:26 - 2014-02-01 22:10 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7082E20D-4460-455D-B61C-910B6E87C0E0} 2014-02-16 16:26 - 2014-02-01 22:05 - 00000000 ____D () C:\Users\Heike\AppData\Local\Pokki 2014-02-16 16:22 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-16 16:21 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-02-16 16:17 - 2014-02-01 23:40 - 00000000 ____D () C:\Users\Heike\AppData\Local\Deployment 2014-02-16 16:16 - 2014-02-01 22:07 - 00000000 ____D () C:\Users\Heike\AppData\Local\clear.fi 2014-02-16 16:15 - 2014-02-16 16:15 - 00002739 _____ () C:\Users\Heike\Desktop\Microsoft Office PowerPoint 2007.lnk 2014-02-16 16:15 - 2014-02-16 16:15 - 00002739 _____ () C:\Users\Heike\Desktop\Microsoft Office PowerPoint 2007 (2).lnk 2014-02-16 16:15 - 2014-02-16 16:15 - 00002713 _____ () C:\Users\Heike\Desktop\Microsoft Office Word 2007.lnk 2014-02-16 16:12 - 2014-02-16 16:12 - 00002719 _____ () C:\Users\Heike\Desktop\Microsoft Office Excel 2007.lnk 2014-02-16 16:08 - 2014-02-01 22:05 - 00000000 ____D () C:\Users\Heike 2014-02-16 16:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru 2014-02-16 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache 2014-02-16 11:34 - 2014-02-16 11:08 - 00000000 ____D () C:\Users\Heike\AppData\Local\Avg2014 2014-02-16 11:34 - 2014-02-16 11:08 - 00000000 ____D () C:\ProgramData\MFAData 2014-02-16 11:34 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-02-16 11:21 - 2014-02-16 10:56 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-02-16 11:20 - 2014-02-16 11:20 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\AVG2014 2014-02-16 11:19 - 2014-02-16 11:19 - 00001001 _____ () C:\Users\Public\Desktop\AVG 2014.lnk 2014-02-16 11:19 - 2014-02-16 11:19 - 00000000 ___HD () C:\$AVG 2014-02-16 11:19 - 2014-02-16 11:19 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\TuneUp Software 2014-02-16 11:19 - 2014-02-16 11:19 - 00000000 ____D () C:\ProgramData\AVG2014 2014-02-16 11:19 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2014-02-16 11:18 - 2014-02-16 11:18 - 00000000 ____D () C:\Program Files (x86)\AVG 2014-02-16 11:08 - 2014-02-16 11:08 - 00000000 ____D () C:\Users\Heike\AppData\Local\MFAData 2014-02-16 10:57 - 2014-02-16 10:57 - 00001395 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2014-02-16 10:57 - 2014-02-16 10:57 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking 2014-02-16 10:57 - 2014-02-16 10:56 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-02-16 10:44 - 2013-11-10 03:48 - 00000000 ____D () C:\ProgramData\Norton 2014-02-16 05:45 - 2013-10-15 15:21 - 00004826 _____ () C:\Windows\PFRO.log 2014-02-13 16:12 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF 2014-02-13 16:08 - 2014-02-01 22:34 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\XSManager 2014-02-10 08:36 - 2014-02-03 08:46 - 00000000 ____D () C:\Users\Heike\Documents\My Digital Editions 2014-02-10 08:25 - 2013-08-22 15:46 - 00019547 _____ () C:\Windows\setupact.log 2014-02-10 08:21 - 2014-02-10 08:21 - 00001472 _____ () C:\Users\Heike\Downloads\URLLink (2).acsm 2014-02-03 13:03 - 2014-02-03 13:03 - 00003556 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask 2014-02-03 13:03 - 2014-02-03 12:50 - 00000000 ___RD () C:\Windows\BrowserChoice 2014-02-03 13:03 - 2014-02-01 22:05 - 00000000 ___RD () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-03 13:03 - 2014-02-01 22:05 - 00000000 ___RD () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-03 13:03 - 2014-02-01 22:05 - 00000000 ____D () C:\Users\Heike\AppData\Local\Packages 2014-02-03 12:54 - 2013-08-22 15:44 - 00370400 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-02-03 12:52 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData 2014-02-03 12:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\migwiz 2014-02-03 12:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-02-03 12:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer 2014-02-03 12:51 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2014-02-03 12:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-02-03 12:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-02-03 12:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-02-03 12:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe 2014-02-03 12:51 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\Dism 2014-02-03 12:50 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore 2014-02-03 12:50 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-02-03 12:32 - 2014-02-03 12:32 - 00000605 _____ () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CD-Laufwerk - Verknüpfung (2).lnk 2014-02-03 11:52 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Heike\AppData\Local\TomTom 2014-02-03 11:52 - 2014-02-03 11:52 - 00000000 ____D () C:\Program Files (x86)\TomTom International B.V 2014-02-03 11:52 - 2014-02-03 11:52 - 00000000 ____D () C:\Program Files (x86)\MyDrive Connect 2014-02-03 11:40 - 2014-02-03 08:45 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\Windows Net Data 2014-02-03 10:28 - 2014-02-03 10:28 - 00000017 _____ () C:\Users\Heike\AppData\Local\resmon.resmoncfg 2014-02-03 10:26 - 2013-10-15 15:43 - 00000000 ____D () C:\ProgramData\McAfee 2014-02-03 09:32 - 2014-02-03 09:32 - 00001524 _____ () C:\Users\Heike\Downloads\URLLink (1).acsm 2014-02-03 09:06 - 2014-02-03 09:06 - 00001472 _____ () C:\Users\Heike\Downloads\URLLink.acsm 2014-02-03 08:55 - 2014-02-03 08:55 - 00000000 ____D () C:\Users\Heike\Documents\Optimizer Pro 2014-02-03 08:47 - 2014-02-03 08:47 - 00000000 ____D () C:\Users\Heike\AppData\Local\Adobe_Systems_Incorporate 2014-02-03 08:45 - 2014-02-03 08:45 - 00000187 _____ () C:\Users\Heike\Desktop\Amazon.de.url 2014-02-03 08:45 - 2014-02-03 08:45 - 00000000 ____D () C:\Users\Heike\ChromeExtensions 2014-02-03 08:45 - 2014-02-03 08:45 - 00000000 ____D () C:\Users\Heike\AppData\Local\Temp77465fc55969e6967b70a0e0e8a86ccd 2014-02-03 08:45 - 2014-02-03 08:45 - 00000000 ____D () C:\Users\Heike\AppData\Local\Temp2a39c99e0036f46aeaaa493232845e60 2014-02-03 08:45 - 2014-02-03 08:45 - 00000000 ____D () C:\Users\Heike\AppData\Local\Google 2014-02-03 08:17 - 2014-02-03 08:17 - 00002125 _____ () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk 2014-02-02 20:09 - 2014-02-02 20:09 - 00000000 ____D () C:\Program Files (x86)\Allin1Convert_8hEI 2014-02-02 19:38 - 2014-02-02 19:34 - 00000000 ____D () C:\Windows\tmp 2014-02-02 19:37 - 2014-02-02 19:37 - 00000000 ____D () C:\Users\Heike\AppData\Local\Kobo 2014-02-02 19:34 - 2014-02-02 19:34 - 00001015 _____ () C:\Users\Public\Desktop\Kobo.lnk 2014-02-02 19:34 - 2014-02-02 19:34 - 00000000 ____D () C:\Program Files (x86)\Kobo 2014-02-02 19:29 - 2014-02-02 19:29 - 00000000 ____D () C:\Users\Heike\AppData\Local\Acer Aspire R7 Tutorial 2014-02-02 19:24 - 2014-02-02 19:24 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\Macromedia 2014-02-02 19:24 - 2014-02-02 19:24 - 00000000 ____D () C:\Users\Heike\AppData\Local\updater4g 2014-02-01 23:40 - 2014-02-01 23:40 - 00000000 ____D () C:\Users\Heike\AppData\Local\Apps\2.0 2014-02-01 23:38 - 2014-02-01 23:22 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-02-01 23:28 - 2014-02-01 23:28 - 00000000 ____D () C:\Windows\PCHEALTH 2014-02-01 23:28 - 2014-02-01 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works 2014-02-01 23:28 - 2013-11-10 03:48 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-02-01 23:25 - 2014-02-01 23:25 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-02-01 23:23 - 2014-02-01 23:23 - 00000000 ____D () C:\Users\Heike\AppData\Local\Microsoft Help 2014-02-01 23:23 - 2013-08-22 20:11 - 00000000 ____D () C:\Windows\ShellNew 2014-02-01 23:22 - 2014-02-01 23:22 - 00000000 __RHD () C:\MSOCache 2014-02-01 23:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore 2014-02-01 22:48 - 2014-02-01 22:48 - 00000000 ____D () C:\Users\Public\OEM 2014-02-01 22:48 - 2014-02-01 22:48 - 00000000 ____D () C:\Users\Heike\Documents\clear.fi 2014-02-01 22:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\tracing 2014-02-01 22:34 - 2014-02-01 22:34 - 00133120 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_netamd.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00118272 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_seramd.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00117888 _____ (Mobile Connector) C:\Windows\system32\Drivers\cmnsusbser.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00112640 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_net32.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00103680 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_ser32.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00101056 _____ () C:\Windows\system32\Drivers\dvb_nova_12mhz_b0.inp 2014-02-01 22:34 - 2014-02-01 22:34 - 00092456 _____ () C:\Windows\system32\Drivers\isdbt_nova_12mhz_b0.inp 2014-02-01 22:34 - 2014-02-01 22:34 - 00079036 _____ () C:\Windows\system32\Drivers\tdmb_nova_12mhz_b0.inp 2014-02-01 22:34 - 2014-02-01 22:34 - 00063648 _____ (Siano) C:\Windows\system32\Drivers\smsbda.sys 2014-02-01 22:34 - 2014-02-01 22:34 - 00000040 _____ () C:\Windows\system32\Drivers\smsbda.cfg 2014-02-01 22:34 - 2014-02-01 22:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-02-01 22:34 - 2014-02-01 22:34 - 00000000 ____D () C:\Program Files (x86)\XSManager 2014-02-01 22:08 - 2014-02-01 22:08 - 00000000 ____D () C:\Users\Public\Pokki 2014-02-01 22:07 - 2014-02-01 22:07 - 00000000 ____D () C:\Users\Heike\PicStream 2014-02-01 22:06 - 2014-02-01 22:06 - 00002625 _____ () C:\Users\Public\Desktop\eBay.lnk 2014-02-01 22:06 - 2014-02-01 22:06 - 00001276 _____ () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk 2014-02-01 22:06 - 2014-02-01 22:06 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\Atheros 2014-02-01 22:06 - 2014-02-01 22:06 - 00000000 ____D () C:\Program Files (x86)\OEM 2014-02-01 22:06 - 2013-10-15 16:14 - 00000000 ___HD () C:\OEM 2014-02-01 22:05 - 2014-02-01 22:05 - 00001786 _____ () C:\Users\Public\Desktop\Online kaufen.lnk 2014-02-01 22:05 - 2014-02-01 22:05 - 00001454 _____ () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-01 22:05 - 2014-02-01 22:05 - 00000020 ___SH () C:\Users\Heike\ntuser.ini 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Vorlagen 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Startmenü 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Netzwerkumgebung 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Lokale Einstellungen 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Eigene Dateien 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Druckumgebung 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Documents\Eigene Musik 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Documents\Eigene Bilder 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\AppData\Local\Verlauf 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\AppData\Local\Anwendungsdaten 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 _SHDL () C:\Users\Heike\Anwendungsdaten 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 ____D () C:\Users\Heike\AppData\Roaming\Adobe 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 ____D () C:\Users\Heike\AppData\Local\VirtualStore 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2014-02-01 22:05 - 2014-02-01 22:05 - 00000000 ____D () C:\Program Files\Accessory Store 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Programme 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-01 21:52 - 2014-02-01 21:52 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-02-01 21:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-02-01 21:52 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default 2014-01-30 21:47 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-30 21:47 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl Some content of TEMP: ==================== C:\Users\Heike\AppData\Local\Temp\ose00000.exe C:\Users\Heike\AppData\Local\Temp\{311739EB-5C94-4EE1-B911-2D1F005060F4}_NARA_19488.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-16 12:04 ==================== End Of Log ============================ --- --- --- Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-02-2014 01 Ran by Heike at 2014-02-16 16:54:19 Running from C:\Users\Heike\AppData\Local\Microsoft\Windows\INetCache\IE\D3FPEGLV Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892} AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9} ==================== Installed Programs ====================== Acer Docs (x32 Version: 1.01.3006 - Acer Incorporated) Acer Launch Manager (Version: 8.00.8101 - Acer Incorporated) Acer Media (x32 Version: 2.02.3104.3 - Acer Incorporated) Acer Photo (x32 Version: 2.02.3104.6 - Acer Incorporated) Acer Portal (x32 Version: 2.02.3104 - Acer Incorporated) Acer Power Management (Version: 7.00.8100 - Acer Incorporated) Acer Quick Access (Version: 1.00.3000 - Acer Incorporated) Acer Recovery Management (Version: 6.00.8100 - Acer Incorporated) Acer Remote Files (Version: 1.00.3007 - Acer Incorporated) Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden AVG 2014 (Version: 14.0.3705 - AVG Technologies) Hidden AVG 2014 (Version: 14.0.4335 - AVG Technologies) Hidden AVG 2014 (Version: 2014.0.4335 - AVG Technologies) Broadcom Card Reader Driver Installer (Version: 16.0.2.8 - Broadcom Corporation) Broadcom NetLink Controller (Version: 16.2.1.2 - Broadcom Corporation) Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden CyberLink PowerDVD 12 (x32 Version: 12.0.3126.57 - CyberLink Corp.) CyberLink PowerDVD 12 (x32 Version: 12.0.3126.57 - CyberLink Corp.) Hidden eBay Worldwide (x32 Version: 2.4.0105 - OEM) ETDWare PS/2-X64 11.6.27.201_WHQL (Version: 11.6.27.201 - ELAN Microelectronic Corp.) Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden Identity Card (x32 Version: 2.00.8100 - Acer Incorporated) Intel(R) Management Engine Components (x32 Version: 9.5.14.1724 - Intel Corporation) Intel(R) Processor Graphics (x32 Version: 10.18.10.3304 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden Kobo (x32 Version: 3.5.0 - Kobo Inc.) Live Updater (x32 Version: 2.00.8100 - Acer Incorporated) Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden McAfee LiveSafe – Internet Security (x32 Version: 12.8.397 - McAfee, Inc.) Microsoft Office (x32 Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Home and Student 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Home and Student 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden MyDriveConnect 3.3.0.1342 (x32 Version: 3.3.0.1342 - TomTom) Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden Nero BackItUp 12 Essentials OEM.a01 (x32 Version: 12.5.01200 - Nero AG) Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden NVIDIA Grafiktreiber 326.49 (Version: 326.49 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.132.865 - NVIDIA Corporation) Hidden NVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.0604 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.0604 (Version: 9.13.0604 - NVIDIA Corporation) NVIDIA Systemsteuerung 326.49 (Version: 326.49 - NVIDIA Corporation) Hidden NVIDIA Update 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden Office Addin (x32 Version: 2.02.2009 - Acer) Office Addin 2003 (x32 Version: 2.02.2009 - Acer) Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden Pokki (HKCU Version: 0.266.1.172 - Pokki) Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.1.305 - Qualcomm Atheros Communications) Qualcomm Atheros WLAN and Bluetooth Client Installation Program (x32 Version: 12.07 - Qualcomm Atheros) Realtek High Definition Audio Driver (x32 Version: 6.0.1.7027 - Realtek Semiconductor Corp.) Spotify (x32 Version: 0.9.1.57.ge7405149 - Spotify AB) Spybot - Search & Destroy (x32 Version: 2.2.25 - Safer-Networking Ltd.) The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.32 - WildTangent) Hidden Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Visual Studio 2005 Tools for Office Second Edition Runtime (x32 Version: - Microsoft Corporation) Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Visual Studio C++ 10.0 Runtime (x32 Version: 10.0.0 - TomTom International B.V.) Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: - Microsoft Corporation) Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (x32 Version: 1 - Microsoft Corporation) WildTangent Games (x32 Version: 1.0.4.0 - WildTangent) WildTangent Games App (x32 Version: 4.0.10.20 - WildTangent) Hidden Windows Utils (x32 Version: - ) XSManager (x32 Version: 3.0 - XSManager) ==================== Restore Points ========================= 01-02-2014 22:21:54 Installed Microsoft Office Home and Student 2007 10-02-2014 08:09:52 Windows Update 16-02-2014 10:17:44 Installed AVG 2014 16-02-2014 10:18:26 Installed AVG 2014 ==================== Hosts content: ========================== 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0872CBDB-7F1F-43A8-9B60-FEA40FA5EF58} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [2013-07-26] (Acer Incorporated) Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {273E690B-ED52-4013-8A5E-C3D6CE0A26D1} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate) Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {54D60A60-F039-46C8-9F1B-D177D2BC913A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {54EB7844-5F83-44FE-BFD6-D494B4920463} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated) Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {6F585915-DDE8-4F22-81AE-6AD0D696E850} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2013-08-02] (Acer Incorporate) Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {81C5280C-EDD3-4A73-92F2-490CFCA30CD9} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] () Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {A06E92C3-F5E5-4744-A223-F40CD3514226} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {AD08E39C-0C7B-4967-BB35-46A3CFA32521} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] () Task: {B1889206-D44B-45FD-AC9F-E9EB54C384B0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D0A1C78D-0B39-4E8E-836F-47F2285DCFA5} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-02-16] (Microsoft Corporation) Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {E683B863-D8C2-4FA6-92C3-B35678128019} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated) Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE ==================== Loaded Modules (whitelisted) ============= 2013-11-10 03:51 - 2013-07-30 18:11 - 00110152 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll 2013-09-07 01:48 - 2013-09-07 01:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2013-09-07 01:45 - 2013-09-07 01:45 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll 2013-09-07 01:52 - 2013-09-07 01:52 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe 2013-10-15 16:14 - 2013-09-03 20:45 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-11-29 10:29 - 2013-11-29 10:29 - 00026520 _____ () C:\Program Files (x86)\MyDrive Connect\DeviceDetection.dll 2013-11-29 10:28 - 2013-11-29 10:28 - 00082840 _____ () C:\Program Files (x86)\MyDrive Connect\TomTomSupporterBase.dll 2013-11-29 10:28 - 2013-11-29 10:28 - 00344984 _____ () C:\Program Files (x86)\MyDrive Connect\TomTomSupporterProxy.dll 2014-02-16 10:56 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2014-02-16 10:56 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2014-02-01 22:34 - 2010-04-12 17:59 - 00376832 ____N () C:\Program Files (x86)\XSManager\WtgCore.dll 2014-02-01 22:34 - 2010-04-12 17:59 - 00045056 ____N () C:\Program Files (x86)\XSManager\WtgDriverInstall.dll 2014-02-01 22:34 - 2010-04-12 17:59 - 00024576 ____N () C:\Program Files (x86)\XSManager\WTGDebugs.dll 2014-02-01 22:34 - 2010-04-12 17:59 - 00110592 ____N () C:\Program Files (x86)\XSManager\WtgDatabase.dll 2014-02-01 22:34 - 2010-06-22 18:48 - 00143360 ____N () C:\Program Files (x86)\XSManager\WtgDetection.dll 2014-02-01 22:34 - 2010-04-12 17:59 - 00065536 ____N () C:\Program Files (x86)\XSManager\WtgDialup.dll 2014-02-01 22:34 - 2010-04-12 17:59 - 00086016 ____N () C:\Program Files (x86)\XSManager\WtgPorts.dll 2014-02-01 22:34 - 2010-04-12 17:59 - 00204800 ____N () C:\Program Files (x86)\XSManager\WtgUtil.dll 2014-02-01 22:34 - 2010-04-12 17:59 - 00139264 ____N () C:\Program Files (x86)\XSManager\WtgBluetooth.dll 2014-02-01 22:34 - 2010-04-28 17:00 - 00835240 ____N () C:\Program Files (x86)\XSManager\4GSystems_OneClickAssistantGer.dll 2014-02-01 22:34 - 2009-12-08 11:22 - 00593920 ____N () C:\Program Files (x86)\XSManager\WTGXMLUtil.dll 2014-02-01 22:34 - 2010-04-28 17:00 - 00183976 ____N () C:\Program Files (x86)\XSManager\WTGSMSPCClient.Dll 2014-02-01 22:34 - 2010-04-28 17:00 - 00020136 ____N () C:\Program Files (x86)\XSManager\4GSystems_WTGSMSPCClientGer.dll 2014-02-01 22:34 - 2010-04-12 18:00 - 00024576 ____N () C:\Program Files (x86)\XSManager\WTGDriverInstallX.Dll 2013-11-10 03:51 - 2013-07-30 18:11 - 00088648 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Temp:373E1720 ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver" ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (02/16/2014 03:53:17 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: SDFSSvc.exe, Version: 2.2.25.211, Zeitstempel: 0x525d1899 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.16408, Zeitstempel: 0x523d45fa Ausnahmecode: 0xc0000005 Fehleroffset: 0x0004128a ID des fehlerhaften Prozesses: 0x1d1c Startzeit der fehlerhaften Anwendung: 0xSDFSSvc.exe0 Pfad der fehlerhaften Anwendung: SDFSSvc.exe1 Pfad des fehlerhaften Moduls: SDFSSvc.exe2 Berichtskennung: SDFSSvc.exe3 Vollständiger Name des fehlerhaften Pakets: SDFSSvc.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SDFSSvc.exe5 Error: (02/16/2014 00:11:01 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3. Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird. Error: (02/16/2014 00:11:01 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3. Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird. Error: (02/16/2014 00:11:01 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3. Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird. Error: (02/16/2014 00:08:49 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3. Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird. Error: (02/16/2014 00:08:49 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3. Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird. Error: (02/16/2014 00:08:49 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3. Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird. Error: (02/16/2014 11:45:36 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: SDFSSvc.exe, Version: 2.2.25.211, Zeitstempel: 0x525d1899 Name des fehlerhaften Moduls: SDFileScanLibrary.dll, Version: 2.2.25.14, Zeitstempel: 0x525bd00e Ausnahmecode: 0xc0000005 Fehleroffset: 0x000043c0 ID des fehlerhaften Prozesses: 0xbc0 Startzeit der fehlerhaften Anwendung: 0xSDFSSvc.exe0 Pfad der fehlerhaften Anwendung: SDFSSvc.exe1 Pfad des fehlerhaften Moduls: SDFSSvc.exe2 Berichtskennung: SDFSSvc.exe3 Vollständiger Name des fehlerhaften Pakets: SDFSSvc.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SDFSSvc.exe5 Error: (02/10/2014 08:44:06 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80070005 Error: (02/03/2014 08:30:53 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80070005 System errors: ============= Error: (02/16/2014 03:53:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts. Error: (02/16/2014 11:45:52 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts. Error: (02/16/2014 06:00:57 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80004004 fehlgeschlagen: Microsoft.BingNews Error: (02/16/2014 06:00:57 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80004004 fehlgeschlagen: Microsoft.BingHealthAndFitness Error: (02/16/2014 06:00:57 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80004004 fehlgeschlagen: Microsoft.HelpAndTips Error: (02/16/2014 06:00:57 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80004004 fehlgeschlagen: Microsoft.XboxLIVEGames Error: (02/16/2014 06:00:55 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80004004 fehlgeschlagen: Microsoft.BingMaps Error: (02/16/2014 06:00:55 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80004004 fehlgeschlagen: Microsoft.BingFoodAndDrink Error: (02/16/2014 06:00:55 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80004004 fehlgeschlagen: Microsoft.WindowsAlarms Error: (02/16/2014 06:00:55 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80004004 fehlgeschlagen: Microsoft.BingFinance Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 31% Total physical RAM: 8081.27 MB Available physical RAM: 5531.73 MB Total Pagefile: 9361.27 MB Available Pagefile: 6829.25 MB Total Virtual: 131072 MB Available Virtual: 131071.79 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:914.69 GB) (Free:879.14 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 932 GB) (Disk ID: 14615F40) Partition: GPT Partition Type ==================== End Of Log ============================ Vielen Dank schon mal! Selbsterhalt |
19.02.2014, 23:08 | #3 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Otimizer Pro richtig entfernen Hallo und
__________________Zitat:
Deinstallieren kannst du im Prinzip alles und wenn wir fertig sind kannst du zB auf Avast Free umsteigen. Eigentlich ist es aber auch prinzipiell fast egal welchen Virenscanner du verwendest, nur empfehlen wir kein Avira Free und auch keine 3rd-Party-Firewall-Software. Also auch definitiv runter sollte die McAfee-Firewall. Verwende die Windows-Firewall. Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
Themen zu Otimizer Pro richtig entfernen |
administrator, adobe, avg, defender, download, entfernen, excel, explorer, google, home, nvidia, programm, realtek, registry, rundll, scan, services.exe, siteadvisor, software, stick, svchost.exe, system, temp, windows, winlogon.exe |