Advanced System Protector (u. RegCleanPro) entfernen (Windows 8.1)

pktcarsten · 07.03.2014, 11:20

Guten Tag,
ich habe gestern seit einem Download den "Advanced System Protector" sowie "RegCleanPro" auf meinem Laptop. Seither bekomme ich Warnungen bezüglich 408 Registrierungsfehlern. Der Laptop hatte daraufhin zunächst starke Probleme hochzufahren. Die letzten 2 Male fuhr er normal hoch. McAfee zeigt mir übrigens keine Probleme an.
Ich hatte auf anderen Seiten gelesen, dass der einzige Weg diese Malware/Scareware (

) zu entfernen ein "Neu Aufsetzen" des PCs sei (also formatieren und Neuinstallation des Betriebssystems nehme ich an?!).
Der Laptop ist noch sehr neu, auf der Festplatte befinden sich keine Daten, die nicht verloren gehen dürften. Außer dem Betriebssystem (WIN 8.1). Dafür habe ich nämlich keine CD, es war bereits von vornherein aufgespielt. Ich habe keine professionellen Kenntnisse im Computerbereich, ich hoffe Ihr könnt mir trotzdem weiterhelfen!

Vielen Dank schon einmal im Voraus!

cosinus · 07.03.2014, 11:39

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

deeprybka · 07.03.2014, 11:39

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das!

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
Bitte kein Crossposting (posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
Speichere alle unsere Toosl auf dem Desktop ab.
Poste die Logfiles direkt in deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweise: Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst. Siehe hier...

Ich bedanke mich für Deine Geduld!

Schritt 1 (Scan mit FRST)
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Bitte poste mir in Deiner nächsten Antwort den Inhalt der Logdateien von:
- FRST (FRST.txt und Addition.txt)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

deeprybka · 07.03.2014, 11:43

Du oder Ich Arne?

cosinus · 07.03.2014, 11:55

Ich natürlich, du bist zu langsam

pktcarsten · 07.03.2014, 12:08

Hallo Jürgen! Vielen Dank für deine schnelle Antwort!
Ich habe keine weiteren Logs oder sonstiges.

Hier die frst files:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-03-2014
Ran by denis (administrator) on DENISTOSHIBA on 07-03-2014 11:51:47
Running from C:\Users\denis\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
() C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe
() C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe
() C:\Program Files (x86)\FindRight\updateFindRight.exe
(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Systweak Inc) C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
() C:\Program Files (x86)\FindRight\bin\utilFindRight.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [X]
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [688472 2013-07-22] (Alps Electric Co., Ltd.)
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-08-17] (TOSHIBA Corporation)
HKLM\...\Run: [TecoResident] - C:\Program Files\TOSHIBA\Teco\TecoResident.exe [178016 2013-08-21] (TOSHIBA Corporation)
HKLM\...\Run: [TSSSrv] - C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296520 2013-09-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-13] (TOSHIBA Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [383768 2002-04-12] (Alcor Micro Corp.)
HKLM-x32\...\Run: [1.TPUReg] - C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe [2216800 2013-03-27] (TOSHIBA)
HKLM-x32\...\Run: [TSVU] - c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM\...\Policies\Explorer: [NoControlPanel] 0

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com/?pc=TEJB
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://toshiba.eu/symbaloo_c
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://toshiba.eu/symbaloo_c
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
SearchScopes: HKLM - DefaultScope {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB
SearchScopes: HKLM - {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
SearchScopes: HKLM-x32 - DefaultScope {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB
SearchScopes: HKCU - DefaultScope {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKCU - {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
BHO-x32: FindRight - {2c774641-5504-46a8-b63f-6715ae3fe376} - C:\Program Files (x86)\FindRight\FindRightbho.dll (FindRight)
BHO-x32: mysearchdial Helper Object - {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} - C:\Program Files (x86)\Mysearchdial\1.8.29.0\bh\mysearchdial.dll (MySearchDial)
Toolbar: HKLM-x32 - mysearchdial Toolbar - {3004627E-F8E9-4E8B-909D-316753CBA923} - C:\Program Files (x86)\Mysearchdial\1.8.29.0\mysearchdialTlbr.dll (MySearchDial)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: hxxp://start.mysearchdial.com/?f=1&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
CHR Extension: (Google Docs) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-28]
CHR Extension: (Google Drive) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-28]
CHR Extension: (YouTube) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-28]
CHR Extension: (Google-Suche) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-28]
CHR Extension: (Google Wallet) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-28]
CHR Extension: (Google Mail) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-28]

==================== Services (Whitelisted) =================

S2 0011501394154355mcinstcleanup; C:\Windows\TEMP\001150~1.EXE [834664 2013-07-30] (McAfee, Inc.)
R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [99328 2013-08-30] ()
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-10-01] (Windows (R) Win 7 DDK provider)
R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19792 2013-09-10] ()
R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe [163168 2013-03-27] ()
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-12-11] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-18] (Toshiba Europe GmbH)
R2 Update FindRight; C:\Program Files (x86)\FindRight\updateFindRight.exe [111904 2014-02-25] ()
R2 Util FindRight; C:\Program Files (x86)\FindRight\bin\utilFindRight.exe [111904 2014-03-07] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17504 2013-02-06] (Advanced Micro Devices, INC.)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-21] (Advanced Micro Devices)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-12] (Windows (R) Win 7 DDK provider)
R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [131584 2013-08-22] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-09] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-10] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)
R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-01-27] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)
U3 mfehidk01; No ImagePath
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.)
U3 mfencbdc01; No ImagePath
U3 mfencbdc02; No ImagePath
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-25] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-07 11:51 - 2014-03-07 11:52 - 00017603 _____ () C:\Users\denis\Downloads\FRST.txt
2014-03-07 11:50 - 2014-03-07 11:51 - 00000000 ____D () C:\FRST
2014-03-07 11:46 - 2014-03-07 11:46 - 01145344 _____ (Farbar) C:\Users\denis\Downloads\FRST.exe
2014-03-07 11:43 - 2014-03-07 11:43 - 02156544 _____ (Farbar) C:\Users\denis\Downloads\FRST64.exe
2014-03-07 10:47 - 2014-03-07 10:47 - 00050477 _____ () C:\Users\denis\Downloads\Defogger.exe
2014-03-06 16:58 - 2014-03-07 09:14 - 00003108 _____ () C:\Windows\System32\Tasks\RegClean Pro
2014-03-06 10:45 - 2014-03-06 11:32 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-03-06 08:13 - 2014-03-06 08:13 - 00000000 ____D () C:\Users\denis\AppData\Roaming\mysearchdial
2014-03-06 08:13 - 2014-03-06 08:13 - 00000000 ____D () C:\Program Files (x86)\Mysearchdial
2014-03-06 08:08 - 2014-03-07 11:36 - 00000000 ____D () C:\Program Files (x86)\FindRight
2014-03-06 08:08 - 2014-03-06 08:08 - 00003120 _____ () C:\Windows\System32\Tasks\Advanced System Protector_startup
2014-03-06 08:07 - 2014-03-06 08:07 - 00001228 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-03-06 08:07 - 2014-03-06 08:07 - 00000000 ____D () C:\ProgramData\Systweak
2014-03-06 08:07 - 2014-03-06 08:07 - 00000000 ____D () C:\Program Files (x86)\Advanced System Protector
2014-03-06 08:07 - 2012-07-25 12:03 - 00016896 _____ () C:\Windows\system32\sasnative64.exe
2014-03-06 08:06 - 2014-03-06 10:47 - 00000310 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-03-06 08:06 - 2014-03-06 10:47 - 00000302 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-03-06 08:06 - 2014-03-06 08:07 - 00000000 ____D () C:\Users\denis\AppData\Roaming\systweak
2014-03-06 08:06 - 2014-03-06 08:06 - 00003040 _____ () C:\Windows\System32\Tasks\RegClean Pro_UPDATES
2014-03-06 08:06 - 2014-03-06 08:06 - 00002884 _____ () C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
2014-03-06 08:06 - 2014-03-06 08:06 - 00001077 _____ () C:\Users\Public\Desktop\RegClean Pro.lnk
2014-03-06 08:06 - 2014-01-21 17:28 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-03-06 08:05 - 2014-03-06 08:06 - 00000000 ____D () C:\Program Files (x86)\RegClean Pro
2014-03-04 22:17 - 2014-03-04 22:18 - 02259395 _____ () C:\Users\denis\Downloads\RWM-backup-20140219.zip
2014-03-04 22:06 - 2014-03-04 22:06 - 00001591 _____ () C:\Users\Public\Desktop\SPG-Verein.lnk
2014-03-04 22:05 - 2014-03-04 22:05 - 00000000 ____D () C:\spg
2014-03-04 17:05 - 2013-10-23 03:13 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll
2014-03-04 17:05 - 2013-10-22 00:18 - 01287064 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-03-04 17:05 - 2013-10-21 23:55 - 02328872 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-03-04 17:05 - 2013-10-21 22:03 - 02065448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-03-04 17:05 - 2013-10-21 20:02 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-03-04 17:05 - 2013-10-21 19:44 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-03-04 17:05 - 2013-10-21 18:38 - 01362944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-03-04 17:05 - 2013-10-21 18:07 - 02617344 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-03-04 17:05 - 2013-10-21 17:53 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-03-04 17:05 - 2013-10-21 17:47 - 02295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-03-04 17:05 - 2013-10-19 00:51 - 00481392 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-03-04 17:05 - 2013-10-18 23:12 - 00380656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-03-04 17:05 - 2013-10-18 20:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-03-04 17:05 - 2013-10-18 20:03 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-03-04 17:05 - 2013-10-18 19:26 - 01231360 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-03-04 17:05 - 2013-10-18 19:14 - 00888832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-03-04 17:05 - 2013-10-17 07:42 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-03-04 17:05 - 2013-10-17 07:42 - 01373872 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-03-04 17:05 - 2013-10-17 06:04 - 01204968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-03-04 17:05 - 2013-10-16 01:34 - 00518656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2014-03-04 17:05 - 2013-10-16 01:33 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2014-03-04 17:05 - 2013-10-12 18:43 - 00708616 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2014-03-04 17:05 - 2013-10-10 08:44 - 00031064 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-03-04 17:05 - 2013-10-08 02:28 - 00523096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2014-03-04 17:05 - 2013-10-08 02:13 - 02551640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-03-04 17:05 - 2013-10-07 21:50 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-03-04 17:05 - 2013-10-07 21:15 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-03-04 17:05 - 2013-10-07 21:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2014-03-04 17:05 - 2013-10-06 18:13 - 03532288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-03-04 17:05 - 2013-10-05 06:21 - 00699840 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-03-04 17:05 - 2013-10-05 04:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-03-04 17:05 - 2013-10-05 01:18 - 01011712 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-04 17:05 - 2013-10-05 00:56 - 01147904 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2014-03-04 17:05 - 2013-10-05 00:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2014-03-04 17:05 - 2013-10-04 23:43 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2014-03-04 17:05 - 2013-10-04 23:39 - 06639616 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-04 17:05 - 2013-10-04 23:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2014-03-04 17:05 - 2013-10-04 23:32 - 05769728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-04 17:05 - 2013-09-17 01:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2014-03-04 17:05 - 2013-09-17 01:06 - 00465960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-03-04 17:05 - 2013-09-16 22:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2014-03-04 17:05 - 2013-09-14 06:07 - 02134120 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-03-04 17:05 - 2013-09-14 06:00 - 00391512 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2014-03-04 17:05 - 2013-09-14 04:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-03-04 17:05 - 2013-09-12 00:08 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2014-03-04 17:05 - 2013-09-11 23:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2014-03-04 17:04 - 2013-10-23 03:29 - 00044936 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2014-03-04 17:04 - 2013-10-23 03:21 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-03-04 17:04 - 2013-10-21 21:15 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2014-03-04 17:04 - 2013-10-21 20:04 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2014-03-04 17:04 - 2013-10-21 19:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-03-04 17:04 - 2013-10-21 18:22 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-03-04 17:04 - 2013-10-21 18:13 - 01704448 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-03-04 17:04 - 2013-10-12 19:06 - 00258904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2014-03-04 17:04 - 2013-10-10 08:26 - 00317616 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-03-04 17:04 - 2013-10-10 08:26 - 00104320 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-03-04 17:04 - 2013-10-10 06:53 - 00235960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-03-04 17:04 - 2013-10-10 06:53 - 00088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-03-04 17:04 - 2013-10-10 03:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-03-04 17:04 - 2013-10-08 21:40 - 00385528 _____ () C:\Windows\system32\ApnDatabase.xml
2014-03-04 17:04 - 2013-10-07 22:46 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2014-03-04 17:04 - 2013-10-07 21:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll
2014-03-04 17:04 - 2013-10-07 21:48 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-03-04 17:04 - 2013-10-07 20:50 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-03-04 17:04 - 2013-10-07 20:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2014-03-04 17:04 - 2013-10-06 23:21 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-03-04 17:04 - 2013-10-05 07:25 - 00057176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2014-03-04 17:04 - 2013-10-05 03:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-03-04 17:04 - 2013-10-05 03:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-03-04 17:04 - 2013-10-05 03:00 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-03-04 17:04 - 2013-10-05 01:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-04 17:04 - 2013-10-05 01:07 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2014-03-04 17:04 - 2013-10-05 00:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll
2014-03-04 17:04 - 2013-10-05 00:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-03-04 17:04 - 2013-10-05 00:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\miutils.dll
2014-03-04 17:04 - 2013-10-05 00:15 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2014-03-04 17:04 - 2013-09-18 21:04 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2014-03-04 17:04 - 2013-09-16 22:31 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-03-04 17:04 - 2013-09-16 20:37 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2014-03-04 17:04 - 2013-09-14 04:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2014-03-04 17:04 - 2013-09-14 02:05 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2014-03-04 17:04 - 2013-09-14 01:11 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2014-03-04 17:04 - 2013-09-13 00:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2014-03-04 17:04 - 2013-09-12 23:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe
2014-03-04 17:04 - 2013-09-12 00:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2014-03-04 17:04 - 2013-09-12 00:08 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-03-04 17:04 - 2013-09-12 00:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2014-03-04 17:04 - 2013-09-11 23:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2014-03-04 17:04 - 2013-09-11 23:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2014-03-04 17:04 - 2013-09-11 23:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2014-03-04 17:04 - 2013-09-11 23:16 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2014-03-04 17:04 - 2013-09-11 23:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2014-03-04 17:04 - 2013-09-09 20:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll
2014-03-04 17:03 - 2013-10-10 03:53 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2014-03-04 17:03 - 2013-10-10 03:21 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2014-03-04 17:01 - 2013-10-10 02:34 - 01085952 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-03-04 17:01 - 2013-10-10 02:27 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-03-04 17:00 - 2013-11-05 12:21 - 21196664 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-03-04 17:00 - 2013-11-05 10:51 - 18642504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-03-04 17:00 - 2013-11-05 08:20 - 13925888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-03-04 17:00 - 2013-11-05 08:11 - 18577408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-03-04 16:58 - 2013-11-10 18:48 - 00039768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-03-04 16:58 - 2013-11-09 03:55 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2014-03-04 16:58 - 2013-11-08 22:37 - 01756160 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2014-03-04 16:58 - 2013-11-08 21:56 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2014-03-04 16:58 - 2013-11-08 02:26 - 00358896 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2014-03-04 16:58 - 2013-11-07 20:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2014-03-04 16:58 - 2013-11-07 20:16 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2014-03-04 16:58 - 2013-11-07 20:15 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2014-03-04 16:58 - 2013-11-07 19:41 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2014-03-04 16:58 - 2013-11-07 19:14 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2014-03-04 16:58 - 2013-11-05 06:19 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2014-03-04 16:58 - 2013-11-05 06:03 - 00637952 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2014-03-04 16:58 - 2013-11-05 05:57 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2014-03-04 16:58 - 2013-11-05 05:33 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2014-03-04 16:58 - 2013-11-05 05:32 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2014-03-04 16:58 - 2013-11-04 09:13 - 01530200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-03-04 16:58 - 2013-11-04 03:50 - 02143744 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-03-04 16:58 - 2013-11-04 02:32 - 02570240 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-03-04 16:58 - 2013-11-03 17:30 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2014-03-04 16:58 - 2013-11-01 03:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-03-04 16:58 - 2013-10-31 22:08 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2014-03-04 16:58 - 2013-10-30 16:58 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-03-04 16:58 - 2013-10-30 16:42 - 07399256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-03-04 16:58 - 2013-10-30 16:33 - 01642016 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-03-04 16:58 - 2013-10-30 16:33 - 01506680 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-03-04 16:58 - 2013-10-30 16:33 - 01476184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-03-04 16:58 - 2013-10-30 16:33 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-03-04 16:58 - 2013-10-25 17:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys
2014-03-04 16:58 - 2013-10-17 03:21 - 02896896 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-03-04 16:58 - 2013-10-17 02:36 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2014-03-04 16:58 - 2013-10-05 06:21 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-03-04 16:58 - 2013-10-05 04:05 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-03-04 15:58 - 2013-10-05 06:21 - 00516496 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-03-04 15:58 - 2013-10-05 04:05 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-03-04 15:57 - 2013-11-04 09:13 - 00382808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-03-04 15:57 - 2013-11-04 05:07 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-03-04 15:57 - 2013-11-03 18:28 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-03-04 15:57 - 2013-10-31 21:57 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2014-03-04 15:57 - 2013-10-24 01:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2014-03-04 15:57 - 2013-10-24 01:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2014-03-04 15:50 - 2013-12-08 16:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-03-04 15:50 - 2013-12-08 15:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-03-04 15:48 - 2014-01-06 21:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-03-04 15:48 - 2014-01-06 20:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-03-04 15:48 - 2013-11-27 07:36 - 03395920 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2014-03-04 15:48 - 2013-11-27 03:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2014-03-04 15:48 - 2013-11-27 02:34 - 00138240 _____ () C:\Windows\system32\OEMLicense.dll
2014-03-04 15:48 - 2013-11-27 01:54 - 00103936 _____ () C:\Windows\SysWOW64\OEMLicense.dll
2014-03-04 15:48 - 2013-11-27 00:48 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-04 15:48 - 2013-11-27 00:45 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2014-03-04 15:48 - 2013-11-27 00:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-04 15:48 - 2013-11-27 00:38 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2014-03-04 15:48 - 2013-11-27 00:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-03-04 15:48 - 2013-11-27 00:12 - 00848384 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-03-04 15:48 - 2013-11-22 20:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-03-04 15:48 - 2013-11-22 20:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-03-04 15:48 - 2013-11-20 22:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-03-04 15:48 - 2013-11-20 21:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-03-04 15:48 - 2013-10-12 18:48 - 00136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2014-03-04 15:48 - 2013-10-12 13:48 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-03-04 15:48 - 2013-10-12 13:34 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-03-04 15:47 - 2014-02-06 04:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-04 15:47 - 2014-02-06 03:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-04 15:47 - 2014-02-06 03:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-04 15:47 - 2014-02-06 03:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-04 15:47 - 2014-02-06 03:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-04 15:47 - 2014-02-06 03:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-04 15:47 - 2014-02-06 02:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-04 15:47 - 2014-02-06 02:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-04 15:47 - 2014-02-06 02:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-04 15:47 - 2014-02-06 02:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-04 15:47 - 2014-02-06 02:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-04 15:47 - 2014-02-06 02:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-04 15:47 - 2014-02-06 02:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-04 15:47 - 2014-02-06 02:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-04 15:47 - 2014-02-06 02:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-04 15:47 - 2014-02-06 02:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-04 15:47 - 2014-02-06 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-04 15:47 - 2014-02-06 02:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-04 15:47 - 2014-02-06 01:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-04 15:47 - 2014-02-06 01:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-04 15:47 - 2014-02-06 01:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-04 15:47 - 2014-02-06 01:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-04 15:47 - 2014-02-06 01:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-04 15:47 - 2014-02-06 01:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-04 15:47 - 2014-02-06 01:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-04 15:47 - 2014-02-06 01:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-04 15:47 - 2014-02-06 01:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-04 15:47 - 2014-02-06 01:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-04 15:47 - 2014-02-06 01:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-04 15:47 - 2014-02-06 01:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-04 15:47 - 2014-02-06 01:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-04 15:47 - 2014-02-06 01:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-04 15:47 - 2014-02-06 00:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-04 15:47 - 2014-02-06 00:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-04 15:47 - 2014-02-06 00:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-04 15:47 - 2014-02-06 00:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-04 15:47 - 2014-02-06 00:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-04 15:47 - 2014-01-04 12:50 - 01462216 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-03-04 15:47 - 2014-01-04 11:22 - 01202888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-03-04 15:47 - 2014-01-04 06:30 - 13209088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-03-04 15:47 - 2014-01-04 06:23 - 11702272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-03-04 15:47 - 2014-01-04 05:42 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-03-04 15:47 - 2014-01-04 05:40 - 07416832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-03-04 15:47 - 2014-01-04 05:36 - 00830976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-03-04 15:47 - 2014-01-04 05:28 - 04961792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-03-04 15:47 - 2013-12-20 18:10 - 00009701 _____ () C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms
2014-03-04 15:47 - 2013-12-20 18:10 - 00009701 _____ () C:\Windows\system32\connectedsearch-results.searchconnector-ms
2014-03-04 15:44 - 2014-01-06 23:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2014-03-04 15:44 - 2014-01-06 21:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe
2014-03-04 15:44 - 2013-12-20 02:10 - 01113040 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-03-04 15:44 - 2013-12-19 22:13 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-03-04 15:44 - 2013-12-08 16:15 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-03-04 15:44 - 2013-11-08 22:34 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-03-04 15:44 - 2013-11-08 22:34 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2014-03-04 15:44 - 2013-11-08 21:52 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2014-03-04 15:44 - 2013-10-16 07:58 - 01943536 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-03-04 15:44 - 2013-10-16 05:54 - 01581968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-03-04 15:39 - 2013-12-08 18:57 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-04 15:39 - 2013-12-08 17:51 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-04 15:39 - 2013-11-07 23:21 - 04191744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-04 15:39 - 2013-10-23 03:01 - 00872840 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-03-04 15:39 - 2013-10-15 00:54 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-03-04 15:39 - 2013-10-15 00:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-03-04 15:39 - 2013-10-05 06:21 - 01341288 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-03-04 15:39 - 2013-10-05 00:39 - 01067008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-03-04 15:38 - 2013-10-23 00:59 - 00698232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-03-04 15:29 - 2014-03-04 15:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-04 15:29 - 2014-02-04 19:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-04 15:26 - 2014-01-09 00:25 - 02804224 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-03-04 15:26 - 2014-01-08 23:59 - 01020928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-03-04 15:26 - 2014-01-08 23:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-03-04 15:26 - 2014-01-08 23:49 - 00919040 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-03-04 15:26 - 2014-01-08 23:44 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-03-04 15:26 - 2014-01-08 23:43 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-03-04 15:26 - 2014-01-08 23:29 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-03-04 15:26 - 2014-01-08 23:28 - 04217344 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-03-04 15:26 - 2014-01-08 23:28 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-03-04 15:26 - 2014-01-08 23:18 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-03-04 14:30 - 2014-03-06 11:56 - 00012800 ___SH () C:\Users\denis\Downloads\Thumbs.db
2014-03-03 18:18 - 2014-03-03 18:18 - 00014336 ___SH () C:\Users\denis\Desktop\Thumbs.db
2014-03-03 17:49 - 2014-03-03 17:49 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple Computer
2014-03-03 17:48 - 2014-03-03 17:52 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Apple Computer
2014-03-03 17:48 - 2014-03-03 17:48 - 00001806 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-03 17:48 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-03-03 17:46 - 2014-03-03 17:48 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-03 17:46 - 2014-03-03 17:48 - 00000000 ____D () C:\Program Files\iTunes
2014-03-03 17:46 - 2014-03-03 17:48 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files\iPod
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-03-03 17:34 - 2014-03-03 17:35 - 00000000 ____D () C:\ProgramData\Apple
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files\Bonjour
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-03-03 17:27 - 2014-03-03 17:30 - 148885840 _____ (Apple Inc.) C:\Users\denis\Downloads\iTunes64Setup.exe
2014-03-03 15:08 - 2014-03-03 15:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-03-03 13:05 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2014-02-28 15:08 - 2014-02-28 15:08 - 00000000 ____D () C:\Users\denis\AppData\Roaming\sMedio
2014-02-28 14:49 - 2014-03-07 09:12 - 00002206 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-28 14:48 - 2014-03-07 11:53 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-28 14:48 - 2014-03-07 09:12 - 00001130 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-28 14:48 - 2014-02-28 14:49 - 00000000 ____D () C:\Users\denis\AppData\Local\Google
2014-02-28 14:48 - 2014-02-28 14:49 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-28 14:48 - 2014-02-28 14:48 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-28 14:48 - 2014-02-28 14:48 - 00003870 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-28 14:47 - 2014-02-28 14:48 - 00000000 ____D () C:\Users\denis\AppData\Local\Deployment
2014-02-28 14:47 - 2014-02-28 14:47 - 00000000 ____D () C:\Users\denis\AppData\Local\Apps\2.0
2014-02-28 05:44 - 2014-02-28 05:44 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Macromedia
2014-02-28 05:39 - 2014-03-07 09:12 - 00000000 __RDO () C:\Users\denis\SkyDrive
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Roaming\ATI
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Local\ATI
2014-02-28 05:36 - 2014-03-07 11:36 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1049019668-2146566754-1573291962-1001
2014-02-28 05:35 - 2014-02-28 05:35 - 00000000 ____D () C:\ProgramData\ToshibaEurope
2014-02-28 05:33 - 2014-03-03 13:58 - 00000000 ____D () C:\Users\denis\AppData\Local\TOSHIBA
2014-02-28 05:29 - 2014-03-06 11:32 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-28 05:29 - 2014-03-06 11:32 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-28 05:29 - 2014-03-06 11:32 - 00000000 ____D () C:\Users\denis\AppData\Local\Packages
2014-02-28 05:29 - 2014-02-28 05:29 - 00001465 _____ () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Adobe
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Local\VirtualStore
2014-02-28 05:27 - 2014-03-06 13:06 - 00000000 ____D () C:\Users\denis
2014-02-28 05:27 - 2014-02-28 05:27 - 00000020 ___SH () C:\Users\denis\ntuser.ini
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Vorlagen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Startmenü
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Netzwerkumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Lokale Einstellungen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Eigene Dateien
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Druckumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Musik
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Bilder
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Verlauf
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Anwendungsdaten
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Anwendungsdaten
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

2014-03-07 11:53 - 2014-02-28 14:48 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-07 11:52 - 2014-03-07 11:51 - 00017603 _____ () C:\Users\denis\Downloads\FRST.txt
2014-03-07 11:51 - 2014-03-07 11:50 - 00000000 ____D () C:\FRST
2014-03-07 11:46 - 2014-03-07 11:46 - 01145344 _____ (Farbar) C:\Users\denis\Downloads\FRST.exe
2014-03-07 11:43 - 2014-03-07 11:43 - 02156544 _____ (Farbar) C:\Users\denis\Downloads\FRST64.exe
2014-03-07 11:36 - 2014-03-06 08:08 - 00000000 ____D () C:\Program Files (x86)\FindRight
2014-03-07 11:36 - 2014-02-28 05:36 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1049019668-2146566754-1573291962-1001
2014-03-07 11:31 - 2014-01-23 14:33 - 00001871 _____ () C:\Users\Public\Desktop\McAfee LiveSafe – Internet Security.lnk
2014-03-07 11:28 - 2013-08-22 05:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-03-07 11:00 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\sru
2014-03-07 10:47 - 2014-03-07 10:47 - 00050477 _____ () C:\Users\denis\Downloads\Defogger.exe
2014-03-07 09:37 - 2014-01-23 14:03 - 01605841 _____ () C:\Windows\WindowsUpdate.log
2014-03-07 09:14 - 2014-03-06 16:58 - 00003108 _____ () C:\Windows\System32\Tasks\RegClean Pro
2014-03-07 09:12 - 2014-02-28 14:49 - 00002206 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-07 09:12 - 2014-02-28 14:48 - 00001130 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-07 09:12 - 2014-02-28 05:39 - 00000000 __RDO () C:\Users\denis\SkyDrive
2014-03-06 17:08 - 2014-01-23 14:04 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-03-06 17:06 - 2014-01-23 14:31 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-03-06 17:05 - 2013-08-22 07:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-03-06 17:04 - 2014-01-23 14:31 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-03-06 13:06 - 2014-02-28 05:27 - 00000000 ____D () C:\Users\denis
2014-03-06 11:56 - 2014-03-04 14:30 - 00012800 ___SH () C:\Users\denis\Downloads\Thumbs.db
2014-03-06 11:37 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-03-06 11:36 - 2013-11-27 09:01 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-06 11:36 - 2013-08-28 01:59 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-03-06 11:36 - 2013-08-28 01:59 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-03-06 11:32 - 2014-03-06 10:45 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-03-06 11:32 - 2014-02-28 05:29 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-06 11:32 - 2014-02-28 05:29 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-06 11:32 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Local\Packages
2014-03-06 11:30 - 2013-08-22 06:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-06 11:23 - 2013-08-22 06:44 - 00336024 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-06 10:51 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-03-06 10:51 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\FileManager
2014-03-06 10:51 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\Camera
2014-03-06 10:48 - 2013-08-22 05:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-03-06 10:47 - 2014-03-06 08:06 - 00000310 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-03-06 10:47 - 2014-03-06 08:06 - 00000302 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-03-06 10:45 - 2013-08-22 07:36 - 00000000 ___RD () C:\Windows\ToastData
2014-03-06 10:45 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\WinStore
2014-03-06 10:45 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\migwiz
2014-03-06 10:45 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-06 10:44 - 2013-11-27 17:48 - 00002794 _____ () C:\Windows\PFRO.log
2014-03-06 08:13 - 2014-03-06 08:13 - 00000000 ____D () C:\Users\denis\AppData\Roaming\mysearchdial
2014-03-06 08:13 - 2014-03-06 08:13 - 00000000 ____D () C:\Program Files (x86)\Mysearchdial
2014-03-06 08:08 - 2014-03-06 08:08 - 00003120 _____ () C:\Windows\System32\Tasks\Advanced System Protector_startup
2014-03-06 08:07 - 2014-03-06 08:07 - 00001228 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-03-06 08:07 - 2014-03-06 08:07 - 00000000 ____D () C:\ProgramData\Systweak
2014-03-06 08:07 - 2014-03-06 08:07 - 00000000 ____D () C:\Program Files (x86)\Advanced System Protector
2014-03-06 08:07 - 2014-03-06 08:06 - 00000000 ____D () C:\Users\denis\AppData\Roaming\systweak
2014-03-06 08:06 - 2014-03-06 08:06 - 00003040 _____ () C:\Windows\System32\Tasks\RegClean Pro_UPDATES
2014-03-06 08:06 - 2014-03-06 08:06 - 00002884 _____ () C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
2014-03-06 08:06 - 2014-03-06 08:06 - 00001077 _____ () C:\Users\Public\Desktop\RegClean Pro.lnk
2014-03-06 08:06 - 2014-03-06 08:05 - 00000000 ____D () C:\Program Files (x86)\RegClean Pro
2014-03-05 18:19 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-03-04 22:33 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-03-04 22:18 - 2014-03-04 22:17 - 02259395 _____ () C:\Users\denis\Downloads\RWM-backup-20140219.zip
2014-03-04 22:06 - 2014-03-04 22:06 - 00001591 _____ () C:\Users\Public\Desktop\SPG-Verein.lnk
2014-03-04 22:05 - 2014-03-04 22:05 - 00000000 ____D () C:\spg
2014-03-04 18:35 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\rescache
2014-03-04 15:55 - 2013-08-28 01:58 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-03-04 15:55 - 2013-08-22 11:11 - 00000000 ____D () C:\Program Files\Windows Journal
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\winrm
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\WCN
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\slmgr
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\SysWOW64\Com
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\MUI
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\Com
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\IME
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\Help
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\system32\Dism
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\servicing
2014-03-04 15:49 - 2013-08-22 07:36 - 00000000 ___SD () C:\Windows\system32\dsc
2014-03-04 15:31 - 2014-03-04 15:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-03 18:44 - 2013-08-22 06:46 - 00019173 _____ () C:\Windows\setupact.log
2014-03-03 18:18 - 2014-03-03 18:18 - 00014336 ___SH () C:\Users\denis\Desktop\Thumbs.db
2014-03-03 17:52 - 2014-03-03 17:48 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Apple Computer
2014-03-03 17:49 - 2014-03-03 17:49 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple Computer
2014-03-03 17:48 - 2014-03-03 17:48 - 00001806 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-03 17:48 - 2014-03-03 17:46 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-03 17:48 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files\iTunes
2014-03-03 17:48 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files\iPod
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-03-03 17:35 - 2014-03-03 17:34 - 00000000 ____D () C:\ProgramData\Apple
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files\Bonjour
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-03-03 17:30 - 2014-03-03 17:27 - 148885840 _____ (Apple Inc.) C:\Users\denis\Downloads\iTunes64Setup.exe
2014-03-03 15:08 - 2014-03-03 15:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-03-03 13:58 - 2014-02-28 05:33 - 00000000 ____D () C:\Users\denis\AppData\Local\TOSHIBA
2014-03-03 13:04 - 2014-01-23 14:31 - 00000000 ____D () C:\ProgramData\McAfee
2014-03-03 12:56 - 2014-01-23 14:04 - 00000000 ____D () C:\ProgramData\AMD
2014-02-28 15:08 - 2014-02-28 15:08 - 00000000 ____D () C:\Users\denis\AppData\Roaming\sMedio
2014-02-28 14:49 - 2014-02-28 14:48 - 00000000 ____D () C:\Users\denis\AppData\Local\Google
2014-02-28 14:49 - 2014-02-28 14:48 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-28 14:48 - 2014-02-28 14:48 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-28 14:48 - 2014-02-28 14:48 - 00003870 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-28 14:48 - 2014-02-28 14:47 - 00000000 ____D () C:\Users\denis\AppData\Local\Deployment
2014-02-28 14:47 - 2014-02-28 14:47 - 00000000 ____D () C:\Users\denis\AppData\Local\Apps\2.0
2014-02-28 05:44 - 2014-02-28 05:44 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Macromedia
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Roaming\ATI
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Local\ATI
2014-02-28 05:35 - 2014-02-28 05:35 - 00000000 ____D () C:\ProgramData\ToshibaEurope
2014-02-28 05:34 - 2014-01-23 14:22 - 00000000 ____D () C:\Windows\System32\Tasks\TOSHIBA
2014-02-28 05:34 - 2013-11-27 09:02 - 00000000 ____D () C:\ProgramData\Toshiba
2014-02-28 05:29 - 2014-02-28 05:29 - 00001465 _____ () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Adobe
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Local\VirtualStore
2014-02-28 05:29 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-02-28 05:27 - 2014-02-28 05:27 - 00000020 ___SH () C:\Users\denis\ntuser.ini
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Vorlagen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Startmenü
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Netzwerkumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Lokale Einstellungen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Eigene Dateien
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Druckumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Musik
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Bilder
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Verlauf
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Anwendungsdaten
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Anwendungsdaten
2014-02-28 05:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\restore
2014-02-17 13:00 - 2013-08-22 07:38 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-17 13:00 - 2013-08-22 07:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-06 04:16 - 2014-03-04 15:47 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 03:30 - 2014-03-04 15:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 03:30 - 2014-03-04 15:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 03:12 - 2014-03-04 15:47 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 03:07 - 2014-03-04 15:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 03:06 - 2014-03-04 15:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 02:57 - 2014-03-04 15:47 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 02:56 - 2014-03-04 15:47 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 02:49 - 2014-03-04 15:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 02:48 - 2014-03-04 15:47 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 02:48 - 2014-03-04 15:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 02:38 - 2014-03-04 15:47 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 02:32 - 2014-03-04 15:47 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 02:20 - 2014-03-04 15:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 02:17 - 2014-03-04 15:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 02:11 - 2014-03-04 15:47 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 02:01 - 2014-03-04 15:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 02:00 - 2014-03-04 15:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 01:57 - 2014-03-04 15:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 01:57 - 2014-03-04 15:47 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 01:52 - 2014-03-04 15:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 01:52 - 2014-03-04 15:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 01:50 - 2014-03-04 15:47 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 01:47 - 2014-03-04 15:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 01:46 - 2014-03-04 15:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 01:25 - 2014-03-04 15:47 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 01:25 - 2014-03-04 15:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 01:24 - 2014-03-04 15:47 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 01:22 - 2014-03-04 15:47 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 01:13 - 2014-03-04 15:47 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 01:09 - 2014-03-04 15:47 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 01:03 - 2014-03-04 15:47 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 00:55 - 2014-03-04 15:47 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 00:41 - 2014-03-04 15:47 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 00:40 - 2014-03-04 15:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 00:36 - 2014-03-04 15:47 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 00:34 - 2014-03-04 15:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

Some content of TEMP:
====================
C:\Users\denis\AppData\Local\Temp\ICReinstall_Open OfficeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-27 17:49

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-03-2014
Ran by denis at 2014-03-07 11:54:19
Running from C:\Users\denis\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installed Programs ======================

Advanced System Protector (HKLM-x32\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1) (Version: 2.1.1000.12594 - Systweak Software) <==== ATTENTION
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 4.8.1245.73583 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 4.8.1245.73583 - Alcor Micro Corp.) Hidden
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.100.303.509 - Alps Electric)
Amazon 1Button App (HKLM-x32\...\{0A7D6F3C-F2AB-48ED-BE23-99791BFF87D6}) (Version: 1.0.0.4 - Amazon)
AMD Accelerated Video Transcoding (Version: 13.15.100.30830 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{5D42947B-E961-C0B5-5A70-EA0F753331EB}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.4.4.2 - AppEx Networks)
AMD Start Now (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Atheros)
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
DTS Sound (HKLM-x32\...\{2DFA9084-CEB3-4A48-B9F7-9038FEF1B8F4}) (Version: 1.01.2700 - DTS, Inc.)
Empress of the Deep - The Darkest Secret (x32 Version: 2.2.0.98 - WildTangent) Hidden
Evernote (HKLM-x32\...\Evernote) (Version: 1.0.0 - Evernote Launcher by Toshiba Europe GmbH)
FindRight (HKLM\...\FindRight) (Version: 2014.02.26.051729 - FindRight) <==== ATTENTION
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
IDT Audio Driver (HKLM\...\{588A747E-CFF6-46B3-9207-CD754F9473AF}) (Version: 6.10.6491.0 - IDT)
Island Tribe (x32 Version: 2.2.0.98 - WildTangent) Hidden
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
McAfee LiveSafe – Internet Security (HKLM-x32\...\MSC) (Version: 12.8.934 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d07b0db5-8dad-40e1-be90-88026298a46b}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{2749c485-3a8b-4533-92ff-7cf6e8221cff}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Mysearchdial (HKLM-x32\...\mysearchdial) (Version:  - Mysearchdial) <==== ATTENTION
OEM Application Profile (HKLM-x32\...\{70D5F822-F4C4-33D9-7EEC-2A4AF4EA7BDC}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.306 - Qualcomm Atheros)
Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Qualcomm Atheros Inc.)
RegClean Pro (HKLM-x32\...\RegClean Pro_is1) (Version: 6.21 - Systweak Inc) <==== ATTENTION
SPG-Verein 3.1 (HKLM-x32\...\{6738D11F-DF64-445B-80A4-B6B32F297059}) (Version: 3.1.13 - Software Peter Große)
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.5.1333.g822e0de8 - Spotify AB)
TOSHIBA Addendum (HKLM-x32\...\{C1569944-FAD6-4B3B-85E5-C213C2FF8EFC}) (Version: 1.00 - TOSHIBA)
TOSHIBA Desktop Assist (HKLM\...\{95CCACF0-010D-45F0-82BF-858643D8BC02}) (Version: 1.02.01.6407 - Toshiba Corporation)
TOSHIBA Display Utility (HKLM\...\{5F6AC07E-50EF-422E-B56E-6521E5B35139}) (Version: 1.1.12.0 - Toshiba Corporation)
TOSHIBA eco Utility (HKLM\...\{5944B9D4-3C2A-48DE-931E-26B31714A2F7}) (Version: 2.2.0.6404 - Toshiba Corporation)
TOSHIBA Function Key (HKLM\...\{16562A90-71BC-41A0-B890-D91B0C267120}) (Version: 1.1.0001.6403 - Toshiba Corporation)
TOSHIBA Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.10 - TOSHIBA)
TOSHIBA Password Utility (HKLM-x32\...\InstallShield_{78931270-BC9E-441A-A52B-73ECD4ACFAB5}) (Version: 3.00.346 - Toshiba Corporation)
TOSHIBA Password Utility (x32 Version: 3.00.346 - Toshiba Corporation) Hidden
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.9.09.6400 - Toshiba Corporation)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 3.1.02.55065006 - Toshiba Corporation)
TOSHIBA Service Station (HKLM\...\{FBFCEEA5-96EA-4C8E-9262-43CBBEBAE413}) (Version: 2.6.8 - Toshiba Corporation)
TOSHIBA Start Screen Option (HKLM\...\{06B71035-F19F-4F76-9875-FFCCD4FC3F83}) (Version: 1.00.00.6403 - Toshiba Corporation)
TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0030 - Toshiba Corporation)
TOSHIBA System Settings (HKLM-x32\...\{05A55927-DB9B-4E26-BA44-828EBFF829F0}) (Version: 1.1.2.32001 - Toshiba Corporation)
Toshiba TEMPRO (HKLM-x32\...\{F76F5214-83A8-4030-80C9-1EF57391D72A}) (Version: 4.5.0 - Toshiba Europe GmbH)
TOSHIBA VIDEO PLAYER (HKLM\...\{FF07604E-C860-40E9-A230-E37FA41F103A}) (Version: 5.3.27.102 - Toshiba Corporation)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98 - WildTangent) Hidden
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.3.0 - WildTangent)
WildTangent Games App (Toshiba Games) (x32 Version: 4.0.9.7 - WildTangent) Hidden

==================== Restore Points  =========================

28-02-2014 13:22:44 Windows Modules Installer
04-03-2014 01:35:39 Installed iTunes
06-03-2014 16:07:35 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

==================== Hosts content: ==========================

2013-08-22 05:25 - 2013-08-22 05:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {15DCC0CD-645B-42BC-A78F-1AFBC6BDBB53} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {17D566F5-3029-4A93-82B3-BE33EB931056} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [2014-02-28] (Systweak) <==== ATTENTION
Task: {1814402E-7D67-4AF2-8C85-D1D097A86A3E} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {22028BAC-529D-4765-8EE5-203FAE99D018} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-02-04] (Microsoft Corporation)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-21] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {97B35ABF-A1E4-4C5A-87E8-FA43CA7B4EAA} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A563E85C-2804-4B02-B3C0-CCA50C848803} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-28] (Google Inc.)
Task: {B6D800D6-9827-4783-B906-4B898A7A1F24} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2013-07-31] (TOSHIBA Corporation)
Task: {C69AECED-9CAE-45BA-9A0D-33CC86A4FBF9} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2013-07-18] (Toshiba Europe GmbH)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E38317E4-2039-4526-804F-F3AA7303E310} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-28] (Google Inc.)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-03-27 12:53 - 2013-03-27 12:53 - 00163168 _____ () C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe
2013-08-30 19:47 - 2013-08-30 19:47 - 00099328 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
2013-09-10 12:54 - 2013-09-10 12:54 - 00019792 _____ () C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
2014-02-25 21:19 - 2014-02-25 21:19 - 00111904 _____ () C:\Program Files (x86)\FindRight\updateFindRight.exe
2012-07-18 18:38 - 2012-07-18 18:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll
2013-08-21 23:19 - 2013-08-21 22:54 - 00174592 _____ () C:\Windows\system32\WinMetadata\Windows.UI.winmd
2013-08-21 23:19 - 2013-08-21 22:54 - 00050176 _____ () C:\Windows\system32\WinMetadata\Windows.Data.winmd
2013-08-21 23:19 - 2013-08-21 22:54 - 00030208 _____ () C:\Windows\system32\WinMetadata\Windows.Foundation.winmd
2013-08-30 19:47 - 2013-08-30 19:47 - 00016896 _____ () C:\Program Files\ATI Technologies\ATI.ACE\a4\AS4.NativeProxy.dll
2014-03-07 11:36 - 2014-03-07 11:36 - 00111904 _____ () C:\Program Files (x86)\FindRight\bin\utilFindRight.exe
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-04 15:02 - 2014-03-01 18:35 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll
2014-03-04 15:02 - 2014-03-01 18:35 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libglesv2.dll
2014-03-04 15:02 - 2014-03-01 18:35 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libegl.dll
2014-03-04 15:02 - 2014-03-01 18:35 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll
2014-03-04 15:02 - 2014-03-01 18:35 - 13632840 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll
2014-03-04 15:02 - 2014-03-01 18:35 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\pdf.dll
2014-03-04 15:02 - 2014-03-01 18:35 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\denis\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/06/2014 04:53:35 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13600641

Error: (03/06/2014 04:53:35 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 13600641

Error: (03/06/2014 04:53:35 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/06/2014 11:39:02 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Tempro.exe, Version: 4.5.0.0, Zeitstempel: 0x51e82440
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.16496, Zeitstempel: 0x52b3f283
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000000000005a88
ID des fehlerhaften Prozesses: 0x1578
Startzeit der fehlerhaften Anwendung: 0xTempro.exe0
Pfad der fehlerhaften Anwendung: Tempro.exe1
Pfad des fehlerhaften Moduls: Tempro.exe2
Berichtskennung: Tempro.exe3
Vollständiger Name des fehlerhaften Pakets: Tempro.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Tempro.exe5

Error: (03/06/2014 11:39:01 AM) (Source: .NET Runtime) (User: )
Description: Anwendung: Tempro.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.InvalidOperationException
Stapel:
   bei System.Windows.Window.ShowDialog()
   bei Toshiba.Tempro.UI.ControlPanelApplication.MainWindow.ShowTermsPanel()
   bei Toshiba.Tempro.UI.ControlPanelApplication.MainWindow.Window_Loaded(System.Object, System.Windows.RoutedEventArgs)
   bei System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
   bei System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
   bei MS.Internal.FrameworkObject.OnLoaded(System.Windows.RoutedEventArgs)
   bei System.Windows.BroadcastEventHelper.BroadcastEvent(System.Windows.DependencyObject, System.Windows.RoutedEvent)
   bei System.Windows.BroadcastEventHelper.BroadcastLoadedEvent(System.Object)
   bei System.Windows.Media.MediaContext.FireLoadedPendingCallbacks()
   bei System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks()
   bei System.Windows.Media.MediaContext.RenderMessageHandlerCore(System.Object)
   bei System.Windows.Media.MediaContext.RenderMessageHandler(System.Object)
   bei System.Windows.Interop.HwndTarget.OnResize()
   bei System.Windows.Interop.HwndTarget.HandleMessage(MS.Internal.Interop.WindowMessage, IntPtr, IntPtr)
   bei System.Windows.Interop.HwndSource.HwndTargetFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Internal.Automation.UiaCoreTypesApi.RawUiaLookupId(AutomationIdType, System.Guid ByRef)
   bei MS.Internal.Automation.UiaCoreTypesApi.RawUiaLookupId(AutomationIdType, System.Guid ByRef)
   bei System.Windows.Automation.AutomationIdentifier.Register(AutomationIdType, System.Guid, System.String)
   bei System.Windows.Automation.AutomationPattern.Register(System.Guid, System.String)
   bei System.Windows.Automation.InvokePatternIdentifiers..cctor()
   bei System.Windows.Automation.Peers.AutomationPeer.Initialize()
   bei System.Windows.Automation.Peers.AutomationPeer..cctor()
   bei System.Windows.Automation.Peers.AutomationPeer.RaiseFocusChangedEventHelper(System.Windows.IInputElement)
   bei System.Windows.Input.KeyboardDevice.ChangeFocus(System.Windows.DependencyObject, Int32)
   bei System.Windows.Input.InputManager.RaiseProcessInputEventHandlers(System.Windows.Input.ProcessInputEventHandler, System.Windows.Input.ProcessInputEventArgs)
   bei System.Windows.Input.InputManager.ProcessStagingArea()
   bei System.Windows.Input.InputManager.ProcessInput(System.Windows.Input.InputEventArgs)
   bei System.Windows.Interop.HwndKeyboardInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawKeyboardActions, Int32, Boolean, Boolean, Int32)
   bei System.Windows.Interop.HwndKeyboardInputProvider.PossiblyDeactivate(IntPtr)
   bei System.Windows.Interop.HwndKeyboardInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
   bei System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei System.Threading.SynchronizationContext.WaitHelper(IntPtr[], Boolean, Int32)
   bei System.Windows.Threading.DispatcherSynchronizationContext.Wait(IntPtr[], Boolean, Int32)
   bei System.StubHelpers.InterfaceMarshaler.ConvertToManaged(IntPtr, IntPtr, IntPtr, Int32)
   bei MS.Win32.UnsafeNativeMethods.TF_CreateThreadMgr(ITfThreadMgr ByRef)
   bei MS.Internal.TextServicesLoader.Load()
   bei System.Windows.Input.TextServicesContext.get_ThreadManager()
   bei System.Windows.Input.TextServicesContext.RegisterTextStore(System.Windows.Input.DefaultTextStore)
   bei System.Windows.Input.DefaultTextStore.get_Current()
   bei System.Windows.Input.TextServicesContext.SetFocusOnDefaultTextStore()
   bei System.Windows.Input.InputMethod.EnableOrDisableInputMethod(Boolean)
   bei System.Windows.Input.KeyboardDevice.ChangeFocus(System.Windows.DependencyObject, Int32)
   bei System.Windows.Input.KeyboardDevice.Focus(System.Windows.DependencyObject, Boolean, Boolean, Boolean)
   bei System.Windows.Input.KeyboardDevice.Focus(System.Windows.IInputElement)
   bei System.Windows.Interop.HwndKeyboardInputProvider.OnSetFocus(IntPtr)
   bei System.Windows.Interop.HwndKeyboardInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
   bei System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
   bei MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
   bei System.Windows.Window.ShowHelper(System.Object)
   bei Toshiba.Tempro.UI.ControlPanelApplication.SingleInstanceApplication.OnStartup(System.Windows.StartupEventArgs)
   bei System.Windows.Application.<.ctor>b__1(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.DispatcherOperation.InvokeImpl()
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Windows.Threading.DispatcherOperation.Invoke()
   bei System.Windows.Threading.Dispatcher.ProcessQueue()
   bei System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
   bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
   bei System.Windows.Application.RunDispatcher(System.Object)
   bei System.Windows.Application.RunInternal(System.Windows.Window)
   bei Toshiba.Tempro.UI.ControlPanelApplication.SingleInstanceManager.OnStartup(Microsoft.VisualBasic.ApplicationServices.StartupEventArgs)
   bei Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.DoApplicationModel()
   bei Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])
   bei Toshiba.Tempro.UI.ControlPanelApplication.EntryPoint.Main(System.String[])

Error: (03/06/2014 10:47:42 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_gpsvc, Version: 6.3.9600.16384, Zeitstempel: 0x5215dfe3
Name des fehlerhaften Moduls: gpsvc.dll, Version: 6.3.9600.16384, Zeitstempel: 0x5215dcb1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000360c2
ID des fehlerhaften Prozesses: 0x2b8
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_gpsvc0
Pfad der fehlerhaften Anwendung: svchost.exe_gpsvc1
Pfad des fehlerhaften Moduls: svchost.exe_gpsvc2
Berichtskennung: svchost.exe_gpsvc3
Vollständiger Name des fehlerhaften Pakets: svchost.exe_gpsvc4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe_gpsvc5

Error: (03/06/2014 09:13:52 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.3.9600.16408, Zeitstempel: 0x523d251b
Name des fehlerhaften Moduls: Windows.UI.Search.dll, Version: 6.3.9600.16408, Zeitstempel: 0x523d243c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000012d3fb
ID des fehlerhaften Prozesses: 0x116c
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3
Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5

Error: (03/06/2014 08:48:48 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1374922

Error: (03/06/2014 08:48:48 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1374922

Error: (03/06/2014 08:48:48 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (03/07/2014 11:28:31 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: 1053mcpltsvcNicht verfügbar{20966775-18A4-4299-B8E3-772C336B52A7}

Error: (03/07/2014 11:28:31 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Platform Services" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/07/2014 11:28:31 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst McAfee Platform Services erreicht.

Error: (03/07/2014 11:28:30 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: 1053mcpltsvcNicht verfügbar{20966775-18A4-4299-B8E3-772C336B52A7}

Error: (03/07/2014 11:28:30 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Platform Services" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/07/2014 11:28:30 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst McAfee Platform Services erreicht.

Error: (03/06/2014 05:05:33 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Boot Delay Start Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/06/2014 05:05:33 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst McAfee Boot Delay Start Service erreicht.

Error: (03/06/2014 05:05:33 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Erkennung interaktiver Dienste" wurde mit folgendem Fehler beendet: 
%%1

Error: (03/06/2014 05:05:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Anti-Spam Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (03/06/2014 04:53:35 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13600641

Error: (03/06/2014 04:53:35 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 13600641

Error: (03/06/2014 04:53:35 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/06/2014 11:39:02 AM) (Source: Application Error)(User: )
Description: Tempro.exe4.5.0.051e82440KERNELBASE.dll6.3.9600.1649652b3f283e04343520000000000005a88157801cf3973a9f9f3f9C:\Program Files (x86)\Toshiba TEMPRO\Tempro.exeC:\Windows\system32\KERNELBASE.dllf7bf6fb0-a566-11e3-8267-28e347408ff0

Error: (03/06/2014 11:39:01 AM) (Source: .NET Runtime)(User: )
Description: Anwendung: Tempro.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.InvalidOperationException
Stapel:
   bei System.Windows.Window.ShowDialog()
   bei Toshiba.Tempro.UI.ControlPanelApplication.MainWindow.ShowTermsPanel()
   bei Toshiba.Tempro.UI.ControlPanelApplication.MainWindow.Window_Loaded(System.Object, System.Windows.RoutedEventArgs)
   bei System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
   bei System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
   bei MS.Internal.FrameworkObject.OnLoaded(System.Windows.RoutedEventArgs)
   bei System.Windows.BroadcastEventHelper.BroadcastEvent(System.Windows.DependencyObject, System.Windows.RoutedEvent)
   bei System.Windows.BroadcastEventHelper.BroadcastLoadedEvent(System.Object)
   bei System.Windows.Media.MediaContext.FireLoadedPendingCallbacks()
   bei System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks()
   bei System.Windows.Media.MediaContext.RenderMessageHandlerCore(System.Object)
   bei System.Windows.Media.MediaContext.RenderMessageHandler(System.Object)
   bei System.Windows.Interop.HwndTarget.OnResize()
   bei System.Windows.Interop.HwndTarget.HandleMessage(MS.Internal.Interop.WindowMessage, IntPtr, IntPtr)
   bei System.Windows.Interop.HwndSource.HwndTargetFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Internal.Automation.UiaCoreTypesApi.RawUiaLookupId(AutomationIdType, System.Guid ByRef)
   bei MS.Internal.Automation.UiaCoreTypesApi.RawUiaLookupId(AutomationIdType, System.Guid ByRef)
   bei System.Windows.Automation.AutomationIdentifier.Register(AutomationIdType, System.Guid, System.String)
   bei System.Windows.Automation.AutomationPattern.Register(System.Guid, System.String)
   bei System.Windows.Automation.InvokePatternIdentifiers..cctor()
   bei System.Windows.Automation.Peers.AutomationPeer.Initialize()
   bei System.Windows.Automation.Peers.AutomationPeer..cctor()
   bei System.Windows.Automation.Peers.AutomationPeer.RaiseFocusChangedEventHelper(System.Windows.IInputElement)
   bei System.Windows.Input.KeyboardDevice.ChangeFocus(System.Windows.DependencyObject, Int32)
   bei System.Windows.Input.InputManager.RaiseProcessInputEventHandlers(System.Windows.Input.ProcessInputEventHandler, System.Windows.Input.ProcessInputEventArgs)
   bei System.Windows.Input.InputManager.ProcessStagingArea()
   bei System.Windows.Input.InputManager.ProcessInput(System.Windows.Input.InputEventArgs)
   bei System.Windows.Interop.HwndKeyboardInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawKeyboardActions, Int32, Boolean, Boolean, Int32)
   bei System.Windows.Interop.HwndKeyboardInputProvider.PossiblyDeactivate(IntPtr)
   bei System.Windows.Interop.HwndKeyboardInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
   bei System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei System.Threading.SynchronizationContext.WaitHelper(IntPtr[], Boolean, Int32)
   bei System.Windows.Threading.DispatcherSynchronizationContext.Wait(IntPtr[], Boolean, Int32)
   bei System.StubHelpers.InterfaceMarshaler.ConvertToManaged(IntPtr, IntPtr, IntPtr, Int32)
   bei MS.Win32.UnsafeNativeMethods.TF_CreateThreadMgr(ITfThreadMgr ByRef)
   bei MS.Internal.TextServicesLoader.Load()
   bei System.Windows.Input.TextServicesContext.get_ThreadManager()
   bei System.Windows.Input.TextServicesContext.RegisterTextStore(System.Windows.Input.DefaultTextStore)
   bei System.Windows.Input.DefaultTextStore.get_Current()
   bei System.Windows.Input.TextServicesContext.SetFocusOnDefaultTextStore()
   bei System.Windows.Input.InputMethod.EnableOrDisableInputMethod(Boolean)
   bei System.Windows.Input.KeyboardDevice.ChangeFocus(System.Windows.DependencyObject, Int32)
   bei System.Windows.Input.KeyboardDevice.Focus(System.Windows.DependencyObject, Boolean, Boolean, Boolean)
   bei System.Windows.Input.KeyboardDevice.Focus(System.Windows.IInputElement)
   bei System.Windows.Interop.HwndKeyboardInputProvider.OnSetFocus(IntPtr)
   bei System.Windows.Interop.HwndKeyboardInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
   bei System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
   bei MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
   bei System.Windows.Window.ShowHelper(System.Object)
   bei Toshiba.Tempro.UI.ControlPanelApplication.SingleInstanceApplication.OnStartup(System.Windows.StartupEventArgs)
   bei System.Windows.Application.<.ctor>b__1(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.DispatcherOperation.InvokeImpl()
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Windows.Threading.DispatcherOperation.Invoke()
   bei System.Windows.Threading.Dispatcher.ProcessQueue()
   bei System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
   bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
   bei System.Windows.Application.RunDispatcher(System.Object)
   bei System.Windows.Application.RunInternal(System.Windows.Window)
   bei Toshiba.Tempro.UI.ControlPanelApplication.SingleInstanceManager.OnStartup(Microsoft.VisualBasic.ApplicationServices.StartupEventArgs)
   bei Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.DoApplicationModel()
   bei Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])
   bei Toshiba.Tempro.UI.ControlPanelApplication.EntryPoint.Main(System.String[])

Error: (03/06/2014 10:47:42 AM) (Source: Application Error)(User: )
Description: svchost.exe_gpsvc6.3.9600.163845215dfe3gpsvc.dll6.3.9600.163845215dcb1c000000500000000000360c22b801cf396c80a0f8e9C:\Windows\system32\svchost.exec:\windows\system32\gpsvc.dllcbefb8dd-a55f-11e3-8260-28e347408ff0

Error: (03/06/2014 09:13:52 AM) (Source: Application Error)(User: )
Description: Explorer.EXE6.3.9600.16408523d251bWindows.UI.Search.dll6.3.9600.16408523d243cc0000005000000000012d3fb116c01cf38e0e9fb09c3C:\Windows\Explorer.EXEC:\Windows\system32\Windows.UI.Search.dllb01acf4e-a552-11e3-825f-28e347408ff0

Error: (03/06/2014 08:48:48 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1374922

Error: (03/06/2014 08:48:48 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1374922

Error: (03/06/2014 08:48:48 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second


==================== Memory info =========================== 

Percentage of memory in use: 50%
Total physical RAM: 3523.07 MB
Available physical RAM: 1760.7 MB
Total Pagefile: 4867.07 MB
Available Pagefile: 2682.61 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: (TI31251100A) (Fixed) (Total:454.66 GB) (Free:424.8 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================

... oder cosinus natürlich

deeprybka · 07.03.2014, 12:11

Ja mach Du es Cosinus, habe noch zwei andere Fälle und für Dich ist es Routine und somit wird Denis schneller geholfen...

cosinus · 07.03.2014, 13:42

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

pktcarsten · 07.03.2014, 15:09

Ich habe mbar.exe runtergeladen und wie es in der Anleitung steht mit rechtem Mausklick geöffnet. Da stand bei mir jedoch nicht : "Alle extrahieren".
Ich habe die Datei dann geöffnet und ein Ordner wurde erstellt.
In diesem Ordner bin ich auf die Anwendung mbar gegangen und habe sie geöffnet. Jetzt öffnet sich ein Fenster in dem ich den "extraction path" auswählen soll. Vorgegeben war "C:\Users\denis\Desktop". Dann OK und daraufhin die weiteren Schritte mit NEXT durchgeführt. Es wurde der Scan gemacht aber nichts gefunden. Daher wurde mir auch kein CleanUP angeboten und ich sollte mit EXIT beenden.
Ich füge den log an. Ich weiß nicht wo ich einen Fehler gemacht habe?

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.03.07.05

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16518
denis :: DENISTOSHIBA [administrator]

07.03.2014 13:57:13
mbar-log-2014-03-07 (13-57-13).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 230516
Time elapsed: 34 minute(s), 10 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus · 07.03.2014, 15:13

Zitat:

Ich habe mbar.exe runtergeladen und wie es in der Anleitung steht mit rechtem Mausklick geöffnet. Da stand bei mir jedoch nicht : "Alle extrahieren".

Ist schon ok. Malwarebytes hat das Format verändert, wir müssten mal bei Zeiten unsere Anleitung updaten.

Adware/Junkware/Toolbars entfernen

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

pktcarsten · 07.03.2014, 16:03

1. Schritt:

Code:

ATTFilter

# AdwCleaner v3.020 - Bericht erstellt am 07/03/2014 um 15:46:22
# Aktualisiert 27/02/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : denis - DENISTOSHIBA
# Gestartet von : C:\Users\denis\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : Update FindRight
[#] Dienst Gelöscht : Util FindRight

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Systweak
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
Ordner Gelöscht : C:\Program Files (x86)\Advanced System Protector
Ordner Gelöscht : C:\Program Files (x86)\FindRight
Ordner Gelöscht : C:\Program Files (x86)\Mysearchdial
Ordner Gelöscht : C:\Program Files (x86)\RegClean Pro
Ordner Gelöscht : C:\Users\denis\AppData\Roaming\Mysearchdial
Ordner Gelöscht : C:\Users\denis\AppData\Roaming\Systweak
Datei Gelöscht : C:\Users\Public\Desktop\Advanced System Protector.lnk
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\Users\Public\Desktop\RegClean Pro.lnk
Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage
Datei Gelöscht : C:\Windows\System32\Tasks\Advanced System Protector_startup
Datei Gelöscht : C:\Windows\System32\Tasks\RegClean Pro
Datei Gelöscht : C:\Windows\Tasks\RegClean Pro_DEFAULT.job
Datei Gelöscht : C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
Datei Gelöscht : C:\Windows\Tasks\RegClean Pro_UPDATES.job
Datei Gelöscht : C:\Windows\System32\Tasks\RegClean Pro_UPDATES

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialappCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialappCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialdskBnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialdskBnd.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3004627E-F8E9-4E8B-909D-316753CBA923}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4ED063C9-4A0B-4B44-A9DC-23AFF424A0D3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C358B3D0-B911-41E3-A276-E7D43A6BA56D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{3004627E-F8E9-4E8B-909D-316753CBA923}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\mysearchdial
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKLM\Software\InstallCore
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mysearchdial
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Google Chrome v33.0.1750.146

[ Datei : C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : homepage

*************************

AdwCleaner[R0].txt - [7647 octets] - [07/03/2014 15:44:43]
AdwCleaner[S0].txt - [6121 octets] - [07/03/2014 15:46:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6181 octets] ##########

2. Schritt:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 8.1 x64
Ran by denis on 07.03.2014 at 16:22:52,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E5DA2328-9B6B-4BFD-983A-7E19A83C0E16}



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.03.2014 at 16:43:17,14
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

3. Schritt:
FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-03-2014
Ran by denis (administrator) on DENISTOSHIBA on 07-03-2014 16:46:42
Running from C:\Users\denis\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
() C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe
() C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\system32\wwahost.exe
(McAfee, Inc.) C:\Program Files\mcafee.com\agent\McUpdate.exe
(Thisisu) C:\Users\denis\Desktop\JRT.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\denis\Downloads\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [X]
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [688472 2013-07-22] (Alps Electric Co., Ltd.)
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-08-17] (TOSHIBA Corporation)
HKLM\...\Run: [TecoResident] - C:\Program Files\TOSHIBA\Teco\TecoResident.exe [178016 2013-08-21] (TOSHIBA Corporation)
HKLM\...\Run: [TSSSrv] - C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296520 2013-09-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-13] (TOSHIBA Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [383768 2002-04-12] (Alcor Micro Corp.)
HKLM-x32\...\Run: [1.TPUReg] - C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe [2216800 2013-03-27] (TOSHIBA)
HKLM-x32\...\Run: [TSVU] - c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM\...\Policies\Explorer: [NoControlPanel] 0

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com/?pc=TEJB
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://toshiba.eu/symbaloo_c
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://toshiba.eu/symbaloo_c
SearchScopes: HKLM - DefaultScope {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
SearchScopes: HKLM-x32 - {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR Extension: (Google Docs) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-28]
CHR Extension: (Google Drive) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-28]
CHR Extension: (YouTube) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-28]
CHR Extension: (Google-Suche) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-28]
CHR Extension: (Google Wallet) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-28]
CHR Extension: (Google Mail) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-28]

==================== Services (Whitelisted) =================

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [99328 2013-08-30] ()
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-10-01] (Windows (R) Win 7 DDK provider)
R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19792 2013-09-10] ()
R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe [163168 2013-03-27] ()
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-12-11] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-18] (Toshiba Europe GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17504 2013-02-06] (Advanced Micro Devices, INC.)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-21] (Advanced Micro Devices)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-12] (Windows (R) Win 7 DDK provider)
R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [131584 2013-08-22] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-09] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-10] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)
R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-01-27] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-25] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-07 16:46 - 2014-03-07 16:46 - 02156544 _____ (Farbar) C:\Users\denis\Downloads\FRST64 (1).exe
2014-03-07 16:43 - 2014-03-07 16:43 - 00000761 _____ () C:\Users\denis\Desktop\JRT.txt
2014-03-07 16:22 - 2014-03-07 16:22 - 00000000 ____D () C:\Windows\ERUNT
2014-03-07 16:19 - 2014-03-07 16:19 - 01037734 _____ (Thisisu) C:\Users\denis\Desktop\JRT.exe
2014-03-07 15:44 - 2014-03-07 15:46 - 00000000 ____D () C:\AdwCleaner
2014-03-07 15:44 - 2014-03-07 15:44 - 01244192 _____ () C:\Users\denis\Downloads\adwcleaner.exe
2014-03-07 14:50 - 2014-03-07 14:50 - 12435779 _____ () C:\Users\denis\Desktop\mbar-1.07.0.1009.zip
2014-03-07 14:49 - 2014-03-07 14:49 - 01110476 _____ () C:\Users\denis\Downloads\7z920.exe
2014-03-07 14:49 - 2014-03-07 14:49 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-03-07 13:57 - 2014-03-07 14:40 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-07 13:57 - 2014-03-07 13:57 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-07 13:57 - 2014-03-07 13:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-07 13:50 - 2014-03-07 14:40 - 00000000 ____D () C:\Users\denis\Desktop\mbar
2014-03-07 13:50 - 2014-03-07 13:56 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-07 13:45 - 2014-03-07 13:45 - 12589848 _____ (Malwarebytes Corp.) C:\Users\denis\Desktop\mbar-1.07.0.1009.exe
2014-03-07 11:54 - 2014-03-07 11:56 - 00048691 _____ () C:\Users\denis\Downloads\Addition.txt
2014-03-07 11:51 - 2014-03-07 16:46 - 00014079 _____ () C:\Users\denis\Downloads\FRST.txt
2014-03-07 11:50 - 2014-03-07 16:46 - 00000000 ____D () C:\FRST
2014-03-07 11:46 - 2014-03-07 11:46 - 01145344 _____ (Farbar) C:\Users\denis\Downloads\FRST.exe
2014-03-07 11:43 - 2014-03-07 11:43 - 02156544 _____ (Farbar) C:\Users\denis\Downloads\FRST64.exe
2014-03-07 10:47 - 2014-03-07 10:47 - 00050477 _____ () C:\Users\denis\Downloads\Defogger.exe
2014-03-06 10:45 - 2014-03-06 11:32 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-03-06 08:07 - 2012-07-25 12:03 - 00016896 _____ () C:\Windows\system32\sasnative64.exe
2014-03-04 22:17 - 2014-03-04 22:18 - 02259395 _____ () C:\Users\denis\Downloads\RWM-backup-20140219.zip
2014-03-04 22:06 - 2014-03-04 22:06 - 00001591 _____ () C:\Users\Public\Desktop\SPG-Verein.lnk
2014-03-04 22:05 - 2014-03-04 22:05 - 00000000 ____D () C:\spg
2014-03-04 17:12 - 2013-11-26 01:21 - 18577920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-03-04 17:12 - 2013-11-26 00:28 - 13925888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-03-04 17:12 - 2013-11-23 03:49 - 21196664 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-03-04 17:11 - 2013-12-08 16:34 - 01227264 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-03-04 17:11 - 2013-12-08 16:04 - 00980480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-03-04 17:11 - 2013-11-27 07:34 - 03210528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-03-04 17:11 - 2013-11-27 07:27 - 00809872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-03-04 17:11 - 2013-11-27 06:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-03-04 17:11 - 2013-11-27 05:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-03-04 17:11 - 2013-11-27 04:02 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys
2014-03-04 17:11 - 2013-11-27 02:54 - 00461824 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-03-04 17:11 - 2013-11-27 02:24 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-03-04 17:11 - 2013-11-27 02:08 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-03-04 17:11 - 2013-11-27 01:46 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-03-04 17:11 - 2013-11-27 01:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2014-03-04 17:11 - 2013-11-27 01:17 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2014-03-04 17:11 - 2013-11-27 01:10 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2014-03-04 17:11 - 2013-11-27 00:58 - 01503232 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-03-04 17:11 - 2013-11-27 00:56 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2014-03-04 17:11 - 2013-11-26 20:01 - 00385614 _____ () C:\Windows\system32\ApnDatabase.xml
2014-03-04 17:11 - 2013-11-26 05:22 - 01928144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2014-03-04 17:11 - 2013-11-26 05:20 - 02131120 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-03-04 17:11 - 2013-11-26 05:20 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-03-04 17:11 - 2013-11-26 05:20 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-03-04 17:11 - 2013-11-26 03:50 - 01371312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2014-03-04 17:11 - 2013-11-26 03:44 - 02142936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-03-04 17:11 - 2013-11-26 03:44 - 01204968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-03-04 17:11 - 2013-11-26 02:13 - 04191232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-04 17:11 - 2013-11-24 17:45 - 00142680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-03-04 17:11 - 2013-11-24 17:32 - 01119064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-03-04 17:11 - 2013-11-24 15:30 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-03-04 17:11 - 2013-11-24 15:28 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-03-04 17:11 - 2013-11-23 04:47 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-03-04 17:11 - 2013-11-23 00:19 - 18642504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-03-04 17:11 - 2013-11-22 23:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\bi.dll
2014-03-04 17:11 - 2013-11-22 23:13 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys
2014-03-04 17:11 - 2013-11-22 23:08 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-03-04 17:11 - 2013-11-22 20:50 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2014-03-04 17:11 - 2013-11-22 19:57 - 00637952 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2014-03-04 17:11 - 2013-11-22 19:48 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2014-03-04 17:11 - 2013-11-22 19:25 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2014-03-04 17:11 - 2013-11-22 19:25 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2014-03-04 17:11 - 2013-11-22 19:19 - 02617344 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-03-04 17:11 - 2013-11-22 19:15 - 02295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-03-04 17:11 - 2013-11-20 22:58 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\deviceregistration.dll
2014-03-04 17:11 - 2013-11-20 22:26 - 01415680 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-03-04 17:11 - 2013-11-15 21:11 - 00764856 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-03-04 17:11 - 2013-11-15 10:19 - 00669344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-03-04 17:11 - 2013-11-15 06:59 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2014-03-04 17:11 - 2013-11-15 06:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2014-03-04 17:11 - 2013-11-15 06:08 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2014-03-04 17:11 - 2013-11-15 05:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-03-04 17:11 - 2013-11-05 12:12 - 02551128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-03-04 17:11 - 2013-10-30 16:29 - 00745336 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-03-04 17:11 - 2013-10-30 15:41 - 00552624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-03-04 17:05 - 2013-10-23 03:13 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll
2014-03-04 17:05 - 2013-10-22 00:18 - 01287064 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-03-04 17:05 - 2013-10-21 23:55 - 02328872 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-03-04 17:05 - 2013-10-21 22:03 - 02065448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-03-04 17:05 - 2013-10-21 20:02 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-03-04 17:05 - 2013-10-21 19:44 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-03-04 17:05 - 2013-10-21 18:38 - 01362944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-03-04 17:05 - 2013-10-21 17:53 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-03-04 17:05 - 2013-10-19 00:51 - 00481392 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-03-04 17:05 - 2013-10-18 23:12 - 00380656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-03-04 17:05 - 2013-10-18 20:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-03-04 17:05 - 2013-10-18 20:03 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-03-04 17:05 - 2013-10-18 19:26 - 01231360 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-03-04 17:05 - 2013-10-18 19:14 - 00888832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-03-04 17:05 - 2013-10-16 01:34 - 00518656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2014-03-04 17:05 - 2013-10-16 01:33 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2014-03-04 17:05 - 2013-10-12 18:43 - 00708616 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2014-03-04 17:05 - 2013-10-08 02:28 - 00523096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2014-03-04 17:05 - 2013-10-07 21:50 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-03-04 17:05 - 2013-10-07 21:15 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-03-04 17:05 - 2013-10-07 21:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2014-03-04 17:05 - 2013-10-06 18:13 - 03532288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-03-04 17:05 - 2013-10-05 06:21 - 00699840 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-03-04 17:05 - 2013-10-05 04:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-03-04 17:05 - 2013-10-05 01:18 - 01011712 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-04 17:05 - 2013-10-05 00:56 - 01147904 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2014-03-04 17:05 - 2013-10-05 00:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2014-03-04 17:05 - 2013-10-04 23:43 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2014-03-04 17:05 - 2013-10-04 23:39 - 06639616 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-04 17:05 - 2013-10-04 23:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2014-03-04 17:05 - 2013-10-04 23:32 - 05769728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-04 17:05 - 2013-09-17 01:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2014-03-04 17:05 - 2013-09-17 01:06 - 00465960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-03-04 17:05 - 2013-09-16 23:01 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-03-04 17:05 - 2013-09-16 22:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2014-03-04 17:05 - 2013-09-14 06:07 - 02134120 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-03-04 17:05 - 2013-09-14 06:00 - 00391512 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2014-03-04 17:05 - 2013-09-14 04:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-03-04 17:05 - 2013-09-12 00:08 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2014-03-04 17:05 - 2013-09-11 23:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2014-03-04 17:04 - 2013-10-23 03:29 - 00044936 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2014-03-04 17:04 - 2013-10-23 03:21 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-03-04 17:04 - 2013-10-21 21:15 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2014-03-04 17:04 - 2013-10-21 20:04 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2014-03-04 17:04 - 2013-10-21 19:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-03-04 17:04 - 2013-10-21 18:22 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-03-04 17:04 - 2013-10-21 18:13 - 01704448 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-03-04 17:04 - 2013-10-12 19:06 - 00258904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2014-03-04 17:04 - 2013-10-10 08:26 - 00317616 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-03-04 17:04 - 2013-10-10 08:26 - 00104320 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-03-04 17:04 - 2013-10-10 06:53 - 00235960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-03-04 17:04 - 2013-10-10 06:53 - 00088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-03-04 17:04 - 2013-10-10 03:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-03-04 17:04 - 2013-10-07 22:46 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2014-03-04 17:04 - 2013-10-07 21:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll
2014-03-04 17:04 - 2013-10-07 21:48 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-03-04 17:04 - 2013-10-07 20:50 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-03-04 17:04 - 2013-10-07 20:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2014-03-04 17:04 - 2013-10-06 23:21 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-03-04 17:04 - 2013-10-05 07:25 - 00057176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2014-03-04 17:04 - 2013-10-05 03:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-03-04 17:04 - 2013-10-05 03:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-03-04 17:04 - 2013-10-05 03:00 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-03-04 17:04 - 2013-10-05 01:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-04 17:04 - 2013-10-05 01:07 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2014-03-04 17:04 - 2013-10-05 00:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll
2014-03-04 17:04 - 2013-10-05 00:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-03-04 17:04 - 2013-10-05 00:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\miutils.dll
2014-03-04 17:04 - 2013-10-05 00:15 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2014-03-04 17:04 - 2013-09-16 22:31 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-03-04 17:04 - 2013-09-16 20:37 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2014-03-04 17:04 - 2013-09-14 04:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2014-03-04 17:04 - 2013-09-14 02:05 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2014-03-04 17:04 - 2013-09-14 01:11 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2014-03-04 17:04 - 2013-09-13 00:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2014-03-04 17:04 - 2013-09-12 23:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe
2014-03-04 17:04 - 2013-09-12 00:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2014-03-04 17:04 - 2013-09-12 00:08 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-03-04 17:04 - 2013-09-12 00:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2014-03-04 17:04 - 2013-09-11 23:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2014-03-04 17:04 - 2013-09-11 23:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2014-03-04 17:04 - 2013-09-11 23:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2014-03-04 17:04 - 2013-09-11 23:16 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2014-03-04 17:04 - 2013-09-11 23:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2014-03-04 17:04 - 2013-09-09 20:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll
2014-03-04 17:03 - 2013-10-10 03:53 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2014-03-04 17:03 - 2013-10-10 03:21 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2014-03-04 17:01 - 2013-10-10 02:34 - 01085952 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-03-04 17:01 - 2013-10-10 02:27 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-03-04 16:58 - 2013-11-10 18:48 - 00039768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-03-04 16:58 - 2013-11-09 03:55 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2014-03-04 16:58 - 2013-11-08 22:37 - 01756160 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2014-03-04 16:58 - 2013-11-08 21:56 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2014-03-04 16:58 - 2013-11-08 02:26 - 00358896 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2014-03-04 16:58 - 2013-11-07 20:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2014-03-04 16:58 - 2013-11-07 20:16 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2014-03-04 16:58 - 2013-11-07 20:15 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2014-03-04 16:58 - 2013-11-07 19:41 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2014-03-04 16:58 - 2013-11-07 19:14 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2014-03-04 16:58 - 2013-11-05 06:19 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2014-03-04 16:58 - 2013-11-04 09:13 - 01530200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-03-04 16:58 - 2013-11-04 03:50 - 02143744 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-03-04 16:58 - 2013-11-04 02:32 - 02570240 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-03-04 16:58 - 2013-11-03 17:30 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2014-03-04 16:58 - 2013-11-01 03:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-03-04 16:58 - 2013-10-31 22:08 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2014-03-04 16:58 - 2013-10-30 16:58 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-03-04 16:58 - 2013-10-30 16:42 - 07399256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-03-04 16:58 - 2013-10-30 16:33 - 01642016 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-03-04 16:58 - 2013-10-30 16:33 - 01506680 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-03-04 16:58 - 2013-10-30 16:33 - 01476184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-03-04 16:58 - 2013-10-30 16:33 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-03-04 16:58 - 2013-10-25 17:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys
2014-03-04 16:58 - 2013-10-17 03:21 - 02896896 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-03-04 16:58 - 2013-10-17 02:36 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2014-03-04 16:58 - 2013-10-05 06:21 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-03-04 16:58 - 2013-10-05 04:05 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-03-04 15:58 - 2013-10-05 06:21 - 00516496 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-03-04 15:58 - 2013-10-05 04:05 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-03-04 15:57 - 2013-11-04 09:13 - 00382808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-03-04 15:57 - 2013-11-04 05:07 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-03-04 15:57 - 2013-11-03 18:28 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-03-04 15:57 - 2013-10-31 21:57 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2014-03-04 15:57 - 2013-10-24 01:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2014-03-04 15:57 - 2013-10-24 01:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2014-03-04 15:52 - 2013-10-19 00:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-03-04 15:52 - 2013-10-18 23:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-03-04 15:50 - 2013-12-08 16:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-03-04 15:50 - 2013-12-08 15:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-03-04 15:48 - 2014-01-06 21:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-03-04 15:48 - 2014-01-06 20:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-03-04 15:48 - 2013-12-08 16:27 - 02152448 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-03-04 15:48 - 2013-12-08 15:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-03-04 15:48 - 2013-11-27 07:36 - 03395920 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2014-03-04 15:48 - 2013-11-27 03:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2014-03-04 15:48 - 2013-11-27 02:34 - 00138240 _____ () C:\Windows\system32\OEMLicense.dll
2014-03-04 15:48 - 2013-11-27 01:54 - 00103936 _____ () C:\Windows\SysWOW64\OEMLicense.dll
2014-03-04 15:48 - 2013-11-27 00:48 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-04 15:48 - 2013-11-27 00:45 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2014-03-04 15:48 - 2013-11-27 00:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-04 15:48 - 2013-11-27 00:38 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2014-03-04 15:48 - 2013-11-27 00:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-03-04 15:48 - 2013-11-27 00:12 - 00848384 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-03-04 15:48 - 2013-11-22 20:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-03-04 15:48 - 2013-11-22 20:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-03-04 15:48 - 2013-11-20 22:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-03-04 15:48 - 2013-11-20 21:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-03-04 15:48 - 2013-10-12 18:48 - 00136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2014-03-04 15:48 - 2013-10-12 13:48 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-03-04 15:48 - 2013-10-12 13:34 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-03-04 15:47 - 2014-02-06 04:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-04 15:47 - 2014-02-06 03:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-04 15:47 - 2014-02-06 03:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-04 15:47 - 2014-02-06 03:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-04 15:47 - 2014-02-06 03:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-04 15:47 - 2014-02-06 03:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-04 15:47 - 2014-02-06 02:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-04 15:47 - 2014-02-06 02:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-04 15:47 - 2014-02-06 02:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-04 15:47 - 2014-02-06 02:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-04 15:47 - 2014-02-06 02:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-04 15:47 - 2014-02-06 02:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-04 15:47 - 2014-02-06 02:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-04 15:47 - 2014-02-06 02:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-04 15:47 - 2014-02-06 02:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-04 15:47 - 2014-02-06 02:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-04 15:47 - 2014-02-06 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-04 15:47 - 2014-02-06 02:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-04 15:47 - 2014-02-06 01:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-04 15:47 - 2014-02-06 01:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-04 15:47 - 2014-02-06 01:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-04 15:47 - 2014-02-06 01:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-04 15:47 - 2014-02-06 01:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-04 15:47 - 2014-02-06 01:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-04 15:47 - 2014-02-06 01:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-04 15:47 - 2014-02-06 01:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-04 15:47 - 2014-02-06 01:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-04 15:47 - 2014-02-06 01:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-04 15:47 - 2014-02-06 01:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-04 15:47 - 2014-02-06 01:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-04 15:47 - 2014-02-06 01:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-04 15:47 - 2014-02-06 01:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-04 15:47 - 2014-02-06 00:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-04 15:47 - 2014-02-06 00:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-04 15:47 - 2014-02-06 00:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-04 15:47 - 2014-02-06 00:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-04 15:47 - 2014-02-06 00:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-04 15:47 - 2014-01-04 12:50 - 01462216 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-03-04 15:47 - 2014-01-04 11:22 - 01202888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-03-04 15:47 - 2014-01-04 06:30 - 13209088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-03-04 15:47 - 2014-01-04 06:23 - 11702272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-03-04 15:47 - 2014-01-04 05:42 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-03-04 15:47 - 2014-01-04 05:40 - 07416832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-03-04 15:47 - 2014-01-04 05:36 - 00830976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-03-04 15:47 - 2014-01-04 05:28 - 04961792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-03-04 15:47 - 2013-12-20 18:10 - 00009701 _____ () C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms
2014-03-04 15:47 - 2013-12-20 18:10 - 00009701 _____ () C:\Windows\system32\connectedsearch-results.searchconnector-ms
2014-03-04 15:44 - 2014-01-06 23:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2014-03-04 15:44 - 2014-01-06 21:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe
2014-03-04 15:44 - 2013-12-20 02:10 - 01113040 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-03-04 15:44 - 2013-12-19 22:13 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-03-04 15:44 - 2013-12-08 16:15 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-03-04 15:44 - 2013-11-08 22:34 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-03-04 15:44 - 2013-11-08 22:34 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2014-03-04 15:44 - 2013-11-08 21:52 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2014-03-04 15:44 - 2013-10-16 07:58 - 01943536 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-03-04 15:44 - 2013-10-16 05:54 - 01581968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-03-04 15:39 - 2013-12-08 18:57 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-04 15:39 - 2013-12-08 17:51 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-04 15:39 - 2013-10-23 03:01 - 00872840 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-03-04 15:39 - 2013-10-15 00:54 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-03-04 15:39 - 2013-10-15 00:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-03-04 15:39 - 2013-10-05 06:21 - 01341288 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-03-04 15:39 - 2013-10-05 00:39 - 01067008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-03-04 15:38 - 2013-10-23 00:59 - 00698232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-03-04 15:29 - 2014-03-04 15:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-04 15:29 - 2014-02-04 19:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-04 15:26 - 2014-01-09 00:25 - 02804224 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-03-04 15:26 - 2014-01-08 23:59 - 01020928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-03-04 15:26 - 2014-01-08 23:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-03-04 15:26 - 2014-01-08 23:49 - 00919040 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-03-04 15:26 - 2014-01-08 23:44 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-03-04 15:26 - 2014-01-08 23:43 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-03-04 15:26 - 2014-01-08 23:29 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-03-04 15:26 - 2014-01-08 23:28 - 04217344 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-03-04 15:26 - 2014-01-08 23:28 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-03-04 15:26 - 2014-01-08 23:18 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-03-04 14:30 - 2014-03-06 11:56 - 00012800 ___SH () C:\Users\denis\Downloads\Thumbs.db
2014-03-03 18:18 - 2014-03-03 18:18 - 00014336 ___SH () C:\Users\denis\Desktop\Thumbs.db
2014-03-03 17:49 - 2014-03-03 17:49 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple Computer
2014-03-03 17:48 - 2014-03-03 17:52 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Apple Computer
2014-03-03 17:48 - 2014-03-03 17:48 - 00001806 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-03 17:48 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-03-03 17:46 - 2014-03-03 17:48 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-03 17:46 - 2014-03-03 17:48 - 00000000 ____D () C:\Program Files\iTunes
2014-03-03 17:46 - 2014-03-03 17:48 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files\iPod
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-03-03 17:34 - 2014-03-03 17:35 - 00000000 ____D () C:\ProgramData\Apple
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files\Bonjour
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-03-03 17:27 - 2014-03-03 17:30 - 148885840 _____ (Apple Inc.) C:\Users\denis\Downloads\iTunes64Setup.exe
2014-03-03 15:08 - 2014-03-03 15:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-03-03 13:05 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2014-02-28 15:08 - 2014-02-28 15:08 - 00000000 ____D () C:\Users\denis\AppData\Roaming\sMedio
2014-02-28 14:49 - 2014-03-07 16:00 - 00002206 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-28 14:48 - 2014-03-07 16:00 - 00001130 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-28 14:48 - 2014-03-07 15:53 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-28 14:48 - 2014-02-28 14:49 - 00000000 ____D () C:\Users\denis\AppData\Local\Google
2014-02-28 14:48 - 2014-02-28 14:49 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-28 14:48 - 2014-02-28 14:48 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-28 14:48 - 2014-02-28 14:48 - 00003870 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-28 14:47 - 2014-02-28 14:48 - 00000000 ____D () C:\Users\denis\AppData\Local\Deployment
2014-02-28 14:47 - 2014-02-28 14:47 - 00000000 ____D () C:\Users\denis\AppData\Local\Apps\2.0
2014-02-28 05:44 - 2014-02-28 05:44 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Macromedia
2014-02-28 05:39 - 2014-03-07 16:01 - 00000000 __RDO () C:\Users\denis\SkyDrive
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Roaming\ATI
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Local\ATI
2014-02-28 05:36 - 2014-03-07 16:35 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1049019668-2146566754-1573291962-1001
2014-02-28 05:35 - 2014-02-28 05:35 - 00000000 ____D () C:\ProgramData\ToshibaEurope
2014-02-28 05:33 - 2014-03-03 13:58 - 00000000 ____D () C:\Users\denis\AppData\Local\TOSHIBA
2014-02-28 05:29 - 2014-03-07 16:00 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-28 05:29 - 2014-03-07 16:00 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-28 05:29 - 2014-03-06 11:32 - 00000000 ____D () C:\Users\denis\AppData\Local\Packages
2014-02-28 05:29 - 2014-02-28 05:29 - 00001465 _____ () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Adobe
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Local\VirtualStore
2014-02-28 05:27 - 2014-03-06 13:06 - 00000000 ____D () C:\Users\denis
2014-02-28 05:27 - 2014-02-28 05:27 - 00000020 ___SH () C:\Users\denis\ntuser.ini
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Vorlagen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Startmenü
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Netzwerkumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Lokale Einstellungen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Eigene Dateien
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Druckumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Musik
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Bilder
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Verlauf
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Anwendungsdaten
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Anwendungsdaten
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

2014-03-07 16:47 - 2014-03-07 11:51 - 00014079 _____ () C:\Users\denis\Downloads\FRST.txt
2014-03-07 16:46 - 2014-03-07 16:46 - 02156544 _____ (Farbar) C:\Users\denis\Downloads\FRST64 (1).exe
2014-03-07 16:46 - 2014-03-07 11:50 - 00000000 ____D () C:\FRST
2014-03-07 16:43 - 2014-03-07 16:43 - 00000761 _____ () C:\Users\denis\Desktop\JRT.txt
2014-03-07 16:35 - 2014-02-28 05:36 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1049019668-2146566754-1573291962-1001
2014-03-07 16:22 - 2014-03-07 16:22 - 00000000 ____D () C:\Windows\ERUNT
2014-03-07 16:19 - 2014-03-07 16:19 - 01037734 _____ (Thisisu) C:\Users\denis\Desktop\JRT.exe
2014-03-07 16:05 - 2014-01-23 14:33 - 00001871 _____ () C:\Users\Public\Desktop\McAfee LiveSafe – Internet Security.lnk
2014-03-07 16:01 - 2014-02-28 05:39 - 00000000 __RDO () C:\Users\denis\SkyDrive
2014-03-07 16:00 - 2014-02-28 14:49 - 00002206 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-07 16:00 - 2014-02-28 14:48 - 00001130 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-07 16:00 - 2014-02-28 05:29 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-07 16:00 - 2014-02-28 05:29 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-07 16:00 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\sru
2014-03-07 15:59 - 2013-11-27 09:01 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-07 15:59 - 2013-08-28 01:59 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-03-07 15:59 - 2013-08-28 01:59 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-03-07 15:55 - 2014-01-23 14:31 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-03-07 15:55 - 2013-08-22 06:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-07 15:55 - 2013-08-22 06:44 - 00336024 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-07 15:55 - 2013-08-22 05:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-03-07 15:54 - 2013-11-27 17:48 - 00004920 _____ () C:\Windows\PFRO.log
2014-03-07 15:54 - 2013-08-22 05:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-03-07 15:53 - 2014-02-28 14:48 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-07 15:53 - 2013-08-22 07:36 - 00000000 ___RD () C:\Windows\ToastData
2014-03-07 15:53 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-03-07 15:53 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\system32\Dism
2014-03-07 15:51 - 2014-01-23 14:03 - 01630873 _____ () C:\Windows\WindowsUpdate.log
2014-03-07 15:46 - 2014-03-07 15:44 - 00000000 ____D () C:\AdwCleaner
2014-03-07 15:44 - 2014-03-07 15:44 - 01244192 _____ () C:\Users\denis\Downloads\adwcleaner.exe
2014-03-07 14:50 - 2014-03-07 14:50 - 12435779 _____ () C:\Users\denis\Desktop\mbar-1.07.0.1009.zip
2014-03-07 14:49 - 2014-03-07 14:49 - 01110476 _____ () C:\Users\denis\Downloads\7z920.exe
2014-03-07 14:49 - 2014-03-07 14:49 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-03-07 14:40 - 2014-03-07 13:57 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-07 14:40 - 2014-03-07 13:50 - 00000000 ____D () C:\Users\denis\Desktop\mbar
2014-03-07 13:57 - 2014-03-07 13:57 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-07 13:57 - 2014-03-07 13:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-07 13:56 - 2014-03-07 13:50 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-07 13:45 - 2014-03-07 13:45 - 12589848 _____ (Malwarebytes Corp.) C:\Users\denis\Desktop\mbar-1.07.0.1009.exe
2014-03-07 11:56 - 2014-03-07 11:54 - 00048691 _____ () C:\Users\denis\Downloads\Addition.txt
2014-03-07 11:46 - 2014-03-07 11:46 - 01145344 _____ (Farbar) C:\Users\denis\Downloads\FRST.exe
2014-03-07 11:43 - 2014-03-07 11:43 - 02156544 _____ (Farbar) C:\Users\denis\Downloads\FRST64.exe
2014-03-07 10:47 - 2014-03-07 10:47 - 00050477 _____ () C:\Users\denis\Downloads\Defogger.exe
2014-03-06 17:08 - 2014-01-23 14:04 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-03-06 17:06 - 2014-01-23 14:31 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-03-06 17:05 - 2013-08-22 07:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-03-06 13:06 - 2014-02-28 05:27 - 00000000 ____D () C:\Users\denis
2014-03-06 11:56 - 2014-03-04 14:30 - 00012800 ___SH () C:\Users\denis\Downloads\Thumbs.db
2014-03-06 11:37 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-03-06 11:32 - 2014-03-06 10:45 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-03-06 11:32 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Local\Packages
2014-03-06 10:51 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-03-06 10:51 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\FileManager
2014-03-06 10:51 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\Camera
2014-03-06 10:45 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\WinStore
2014-03-06 10:45 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\migwiz
2014-03-06 10:45 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-05 18:19 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-03-04 22:33 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-03-04 22:18 - 2014-03-04 22:17 - 02259395 _____ () C:\Users\denis\Downloads\RWM-backup-20140219.zip
2014-03-04 22:06 - 2014-03-04 22:06 - 00001591 _____ () C:\Users\Public\Desktop\SPG-Verein.lnk
2014-03-04 22:05 - 2014-03-04 22:05 - 00000000 ____D () C:\spg
2014-03-04 18:35 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\rescache
2014-03-04 15:55 - 2013-08-28 01:58 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-03-04 15:55 - 2013-08-22 11:11 - 00000000 ____D () C:\Program Files\Windows Journal
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\winrm
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\WCN
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\slmgr
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\SysWOW64\Com
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\MUI
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\Com
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\IME
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\Help
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\servicing
2014-03-04 15:49 - 2013-08-22 07:36 - 00000000 ___SD () C:\Windows\system32\dsc
2014-03-04 15:31 - 2014-03-04 15:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-03 18:44 - 2013-08-22 06:46 - 00019173 _____ () C:\Windows\setupact.log
2014-03-03 18:18 - 2014-03-03 18:18 - 00014336 ___SH () C:\Users\denis\Desktop\Thumbs.db
2014-03-03 17:52 - 2014-03-03 17:48 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Apple Computer
2014-03-03 17:49 - 2014-03-03 17:49 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple Computer
2014-03-03 17:48 - 2014-03-03 17:48 - 00001806 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-03 17:48 - 2014-03-03 17:46 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-03 17:48 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files\iTunes
2014-03-03 17:48 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files\iPod
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-03-03 17:35 - 2014-03-03 17:34 - 00000000 ____D () C:\ProgramData\Apple
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files\Bonjour
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-03-03 17:30 - 2014-03-03 17:27 - 148885840 _____ (Apple Inc.) C:\Users\denis\Downloads\iTunes64Setup.exe
2014-03-03 15:08 - 2014-03-03 15:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-03-03 13:58 - 2014-02-28 05:33 - 00000000 ____D () C:\Users\denis\AppData\Local\TOSHIBA
2014-03-03 13:04 - 2014-01-23 14:31 - 00000000 ____D () C:\ProgramData\McAfee
2014-03-03 12:56 - 2014-01-23 14:04 - 00000000 ____D () C:\ProgramData\AMD
2014-02-28 15:08 - 2014-02-28 15:08 - 00000000 ____D () C:\Users\denis\AppData\Roaming\sMedio
2014-02-28 14:49 - 2014-02-28 14:48 - 00000000 ____D () C:\Users\denis\AppData\Local\Google
2014-02-28 14:49 - 2014-02-28 14:48 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-28 14:48 - 2014-02-28 14:48 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-28 14:48 - 2014-02-28 14:48 - 00003870 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-28 14:48 - 2014-02-28 14:47 - 00000000 ____D () C:\Users\denis\AppData\Local\Deployment
2014-02-28 14:47 - 2014-02-28 14:47 - 00000000 ____D () C:\Users\denis\AppData\Local\Apps\2.0
2014-02-28 05:44 - 2014-02-28 05:44 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Macromedia
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Roaming\ATI
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Local\ATI
2014-02-28 05:35 - 2014-02-28 05:35 - 00000000 ____D () C:\ProgramData\ToshibaEurope
2014-02-28 05:34 - 2014-01-23 14:22 - 00000000 ____D () C:\Windows\System32\Tasks\TOSHIBA
2014-02-28 05:34 - 2013-11-27 09:02 - 00000000 ____D () C:\ProgramData\Toshiba
2014-02-28 05:29 - 2014-02-28 05:29 - 00001465 _____ () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Adobe
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Local\VirtualStore
2014-02-28 05:29 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-02-28 05:27 - 2014-02-28 05:27 - 00000020 ___SH () C:\Users\denis\ntuser.ini
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Vorlagen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Startmenü
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Netzwerkumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Lokale Einstellungen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Eigene Dateien
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Druckumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Musik
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Bilder
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Verlauf
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Anwendungsdaten
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Anwendungsdaten
2014-02-28 05:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\restore
2014-02-17 13:00 - 2013-08-22 07:38 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-17 13:00 - 2013-08-22 07:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-06 04:16 - 2014-03-04 15:47 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 03:30 - 2014-03-04 15:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 03:30 - 2014-03-04 15:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 03:12 - 2014-03-04 15:47 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 03:07 - 2014-03-04 15:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 03:06 - 2014-03-04 15:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 02:57 - 2014-03-04 15:47 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 02:56 - 2014-03-04 15:47 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 02:49 - 2014-03-04 15:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 02:48 - 2014-03-04 15:47 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 02:48 - 2014-03-04 15:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 02:38 - 2014-03-04 15:47 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 02:32 - 2014-03-04 15:47 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 02:20 - 2014-03-04 15:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 02:17 - 2014-03-04 15:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 02:11 - 2014-03-04 15:47 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 02:01 - 2014-03-04 15:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 02:00 - 2014-03-04 15:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 01:57 - 2014-03-04 15:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 01:57 - 2014-03-04 15:47 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 01:52 - 2014-03-04 15:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 01:52 - 2014-03-04 15:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 01:50 - 2014-03-04 15:47 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 01:47 - 2014-03-04 15:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 01:46 - 2014-03-04 15:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 01:25 - 2014-03-04 15:47 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 01:25 - 2014-03-04 15:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 01:24 - 2014-03-04 15:47 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 01:22 - 2014-03-04 15:47 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 01:13 - 2014-03-04 15:47 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 01:09 - 2014-03-04 15:47 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 01:03 - 2014-03-04 15:47 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 00:55 - 2014-03-04 15:47 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 00:41 - 2014-03-04 15:47 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 00:40 - 2014-03-04 15:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 00:36 - 2014-03-04 15:47 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 00:34 - 2014-03-04 15:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

Some content of TEMP:
====================
C:\Users\denis\AppData\Local\Temp\ICReinstall_Open OfficeSetup.exe
C:\Users\denis\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-27 17:49

==================== End Of Log ============================

--- --- ---

pktcarsten · 07.03.2014, 17:54

Nachtrag zu 3. Schritt:
txt.:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-03-2014
Ran by denis (administrator) on DENISTOSHIBA on 07-03-2014 16:46:42
Running from C:\Users\denis\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
() C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe
() C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\system32\wwahost.exe
(McAfee, Inc.) C:\Program Files\mcafee.com\agent\McUpdate.exe
(Thisisu) C:\Users\denis\Desktop\JRT.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\denis\Downloads\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [X]
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [688472 2013-07-22] (Alps Electric Co., Ltd.)
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-08-17] (TOSHIBA Corporation)
HKLM\...\Run: [TecoResident] - C:\Program Files\TOSHIBA\Teco\TecoResident.exe [178016 2013-08-21] (TOSHIBA Corporation)
HKLM\...\Run: [TSSSrv] - C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296520 2013-09-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-13] (TOSHIBA Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [383768 2002-04-12] (Alcor Micro Corp.)
HKLM-x32\...\Run: [1.TPUReg] - C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe [2216800 2013-03-27] (TOSHIBA)
HKLM-x32\...\Run: [TSVU] - c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM\...\Policies\Explorer: [NoControlPanel] 0

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com/?pc=TEJB
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://toshiba.eu/symbaloo_c
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://toshiba.eu/symbaloo_c
SearchScopes: HKLM - DefaultScope {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_10_CH&cd=2XzuyEtN2Y1L1QzutBtDtByDyCyEtC0EtCzy0EtAtDzyzyyBtN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2StDyCyDyC0C0CyCtBtG0BtDyDtDtG0C0EzytAtGyEyByB0BtGyDtAyEzy0BtD0CyB0DtA0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0FtDyDzyzyyCtGyC0BtA0FtGtAyEzzyEtGtD0A0B0AtGtDtDtC0ByB0FtB0DtByBtCtC2Q&cr=276546656&ir=
SearchScopes: HKLM-x32 - {E5DA2328-9B6B-4BFD-983A-7E19A83C0E16} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR Extension: (Google Docs) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-28]
CHR Extension: (Google Drive) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-28]
CHR Extension: (YouTube) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-28]
CHR Extension: (Google-Suche) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-28]
CHR Extension: (Google Wallet) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-28]
CHR Extension: (Google Mail) - C:\Users\denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-28]

==================== Services (Whitelisted) =================

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [99328 2013-08-30] ()
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-10-01] (Windows (R) Win 7 DDK provider)
R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19792 2013-09-10] ()
R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe [163168 2013-03-27] ()
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-12-11] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-18] (Toshiba Europe GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17504 2013-02-06] (Advanced Micro Devices, INC.)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-21] (Advanced Micro Devices)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-12] (Windows (R) Win 7 DDK provider)
R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [131584 2013-08-22] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-09] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-10] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)
R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-01-27] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-25] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-07 16:46 - 2014-03-07 16:46 - 02156544 _____ (Farbar) C:\Users\denis\Downloads\FRST64 (1).exe
2014-03-07 16:43 - 2014-03-07 16:43 - 00000761 _____ () C:\Users\denis\Desktop\JRT.txt
2014-03-07 16:22 - 2014-03-07 16:22 - 00000000 ____D () C:\Windows\ERUNT
2014-03-07 16:19 - 2014-03-07 16:19 - 01037734 _____ (Thisisu) C:\Users\denis\Desktop\JRT.exe
2014-03-07 15:44 - 2014-03-07 15:46 - 00000000 ____D () C:\AdwCleaner
2014-03-07 15:44 - 2014-03-07 15:44 - 01244192 _____ () C:\Users\denis\Downloads\adwcleaner.exe
2014-03-07 14:50 - 2014-03-07 14:50 - 12435779 _____ () C:\Users\denis\Desktop\mbar-1.07.0.1009.zip
2014-03-07 14:49 - 2014-03-07 14:49 - 01110476 _____ () C:\Users\denis\Downloads\7z920.exe
2014-03-07 14:49 - 2014-03-07 14:49 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-03-07 13:57 - 2014-03-07 14:40 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-07 13:57 - 2014-03-07 13:57 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-07 13:57 - 2014-03-07 13:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-07 13:50 - 2014-03-07 14:40 - 00000000 ____D () C:\Users\denis\Desktop\mbar
2014-03-07 13:50 - 2014-03-07 13:56 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-07 13:45 - 2014-03-07 13:45 - 12589848 _____ (Malwarebytes Corp.) C:\Users\denis\Desktop\mbar-1.07.0.1009.exe
2014-03-07 11:54 - 2014-03-07 11:56 - 00048691 _____ () C:\Users\denis\Downloads\Addition.txt
2014-03-07 11:51 - 2014-03-07 16:46 - 00014079 _____ () C:\Users\denis\Downloads\FRST.txt
2014-03-07 11:50 - 2014-03-07 16:46 - 00000000 ____D () C:\FRST
2014-03-07 11:46 - 2014-03-07 11:46 - 01145344 _____ (Farbar) C:\Users\denis\Downloads\FRST.exe
2014-03-07 11:43 - 2014-03-07 11:43 - 02156544 _____ (Farbar) C:\Users\denis\Downloads\FRST64.exe
2014-03-07 10:47 - 2014-03-07 10:47 - 00050477 _____ () C:\Users\denis\Downloads\Defogger.exe
2014-03-06 10:45 - 2014-03-06 11:32 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-03-06 08:07 - 2012-07-25 12:03 - 00016896 _____ () C:\Windows\system32\sasnative64.exe
2014-03-04 22:17 - 2014-03-04 22:18 - 02259395 _____ () C:\Users\denis\Downloads\RWM-backup-20140219.zip
2014-03-04 22:06 - 2014-03-04 22:06 - 00001591 _____ () C:\Users\Public\Desktop\SPG-Verein.lnk
2014-03-04 22:05 - 2014-03-04 22:05 - 00000000 ____D () C:\spg
2014-03-04 17:12 - 2013-11-26 01:21 - 18577920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-03-04 17:12 - 2013-11-26 00:28 - 13925888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-03-04 17:12 - 2013-11-23 03:49 - 21196664 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-03-04 17:11 - 2013-12-08 16:34 - 01227264 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-03-04 17:11 - 2013-12-08 16:04 - 00980480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-03-04 17:11 - 2013-11-27 07:34 - 03210528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-03-04 17:11 - 2013-11-27 07:27 - 00809872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-03-04 17:11 - 2013-11-27 06:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-03-04 17:11 - 2013-11-27 05:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-03-04 17:11 - 2013-11-27 04:02 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys
2014-03-04 17:11 - 2013-11-27 02:54 - 00461824 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-03-04 17:11 - 2013-11-27 02:24 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-03-04 17:11 - 2013-11-27 02:08 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-03-04 17:11 - 2013-11-27 01:46 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-03-04 17:11 - 2013-11-27 01:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2014-03-04 17:11 - 2013-11-27 01:17 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2014-03-04 17:11 - 2013-11-27 01:10 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2014-03-04 17:11 - 2013-11-27 00:58 - 01503232 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-03-04 17:11 - 2013-11-27 00:56 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2014-03-04 17:11 - 2013-11-26 20:01 - 00385614 _____ () C:\Windows\system32\ApnDatabase.xml
2014-03-04 17:11 - 2013-11-26 05:22 - 01928144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2014-03-04 17:11 - 2013-11-26 05:20 - 02131120 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-03-04 17:11 - 2013-11-26 05:20 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-03-04 17:11 - 2013-11-26 05:20 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-03-04 17:11 - 2013-11-26 03:50 - 01371312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2014-03-04 17:11 - 2013-11-26 03:44 - 02142936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-03-04 17:11 - 2013-11-26 03:44 - 01204968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-03-04 17:11 - 2013-11-26 02:13 - 04191232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-04 17:11 - 2013-11-24 17:45 - 00142680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-03-04 17:11 - 2013-11-24 17:32 - 01119064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-03-04 17:11 - 2013-11-24 15:30 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-03-04 17:11 - 2013-11-24 15:28 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-03-04 17:11 - 2013-11-23 04:47 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-03-04 17:11 - 2013-11-23 00:19 - 18642504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-03-04 17:11 - 2013-11-22 23:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\bi.dll
2014-03-04 17:11 - 2013-11-22 23:13 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys
2014-03-04 17:11 - 2013-11-22 23:08 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-03-04 17:11 - 2013-11-22 20:50 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2014-03-04 17:11 - 2013-11-22 19:57 - 00637952 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2014-03-04 17:11 - 2013-11-22 19:48 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2014-03-04 17:11 - 2013-11-22 19:25 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2014-03-04 17:11 - 2013-11-22 19:25 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2014-03-04 17:11 - 2013-11-22 19:19 - 02617344 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-03-04 17:11 - 2013-11-22 19:15 - 02295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-03-04 17:11 - 2013-11-20 22:58 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\deviceregistration.dll
2014-03-04 17:11 - 2013-11-20 22:26 - 01415680 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-03-04 17:11 - 2013-11-15 21:11 - 00764856 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-03-04 17:11 - 2013-11-15 10:19 - 00669344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-03-04 17:11 - 2013-11-15 06:59 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2014-03-04 17:11 - 2013-11-15 06:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2014-03-04 17:11 - 2013-11-15 06:08 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2014-03-04 17:11 - 2013-11-15 05:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-03-04 17:11 - 2013-11-05 12:12 - 02551128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-03-04 17:11 - 2013-10-30 16:29 - 00745336 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-03-04 17:11 - 2013-10-30 15:41 - 00552624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-03-04 17:05 - 2013-10-23 03:13 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll
2014-03-04 17:05 - 2013-10-22 00:18 - 01287064 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-03-04 17:05 - 2013-10-21 23:55 - 02328872 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-03-04 17:05 - 2013-10-21 22:03 - 02065448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-03-04 17:05 - 2013-10-21 20:02 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-03-04 17:05 - 2013-10-21 19:44 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-03-04 17:05 - 2013-10-21 18:38 - 01362944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-03-04 17:05 - 2013-10-21 17:53 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-03-04 17:05 - 2013-10-19 00:51 - 00481392 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-03-04 17:05 - 2013-10-18 23:12 - 00380656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-03-04 17:05 - 2013-10-18 20:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-03-04 17:05 - 2013-10-18 20:03 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-03-04 17:05 - 2013-10-18 19:26 - 01231360 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-03-04 17:05 - 2013-10-18 19:14 - 00888832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-03-04 17:05 - 2013-10-16 01:34 - 00518656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2014-03-04 17:05 - 2013-10-16 01:33 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2014-03-04 17:05 - 2013-10-12 18:43 - 00708616 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2014-03-04 17:05 - 2013-10-08 02:28 - 00523096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2014-03-04 17:05 - 2013-10-07 21:50 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-03-04 17:05 - 2013-10-07 21:15 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-03-04 17:05 - 2013-10-07 21:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2014-03-04 17:05 - 2013-10-06 18:13 - 03532288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-03-04 17:05 - 2013-10-05 06:21 - 00699840 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-03-04 17:05 - 2013-10-05 04:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-03-04 17:05 - 2013-10-05 01:18 - 01011712 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-04 17:05 - 2013-10-05 00:56 - 01147904 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2014-03-04 17:05 - 2013-10-05 00:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2014-03-04 17:05 - 2013-10-04 23:43 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2014-03-04 17:05 - 2013-10-04 23:39 - 06639616 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-04 17:05 - 2013-10-04 23:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2014-03-04 17:05 - 2013-10-04 23:32 - 05769728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-04 17:05 - 2013-09-17 01:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2014-03-04 17:05 - 2013-09-17 01:06 - 00465960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-03-04 17:05 - 2013-09-16 23:01 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-03-04 17:05 - 2013-09-16 22:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2014-03-04 17:05 - 2013-09-14 06:07 - 02134120 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-03-04 17:05 - 2013-09-14 06:00 - 00391512 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2014-03-04 17:05 - 2013-09-14 04:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-03-04 17:05 - 2013-09-12 00:08 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2014-03-04 17:05 - 2013-09-11 23:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2014-03-04 17:04 - 2013-10-23 03:29 - 00044936 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2014-03-04 17:04 - 2013-10-23 03:21 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-03-04 17:04 - 2013-10-21 21:15 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2014-03-04 17:04 - 2013-10-21 20:04 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2014-03-04 17:04 - 2013-10-21 19:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-03-04 17:04 - 2013-10-21 18:22 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-03-04 17:04 - 2013-10-21 18:13 - 01704448 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-03-04 17:04 - 2013-10-12 19:06 - 00258904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2014-03-04 17:04 - 2013-10-10 08:26 - 00317616 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-03-04 17:04 - 2013-10-10 08:26 - 00104320 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-03-04 17:04 - 2013-10-10 06:53 - 00235960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-03-04 17:04 - 2013-10-10 06:53 - 00088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-03-04 17:04 - 2013-10-10 03:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-03-04 17:04 - 2013-10-07 22:46 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2014-03-04 17:04 - 2013-10-07 21:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll
2014-03-04 17:04 - 2013-10-07 21:48 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-03-04 17:04 - 2013-10-07 20:50 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-03-04 17:04 - 2013-10-07 20:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2014-03-04 17:04 - 2013-10-06 23:21 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-03-04 17:04 - 2013-10-05 07:25 - 00057176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2014-03-04 17:04 - 2013-10-05 03:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-03-04 17:04 - 2013-10-05 03:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-03-04 17:04 - 2013-10-05 03:00 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-03-04 17:04 - 2013-10-05 01:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-04 17:04 - 2013-10-05 01:07 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2014-03-04 17:04 - 2013-10-05 00:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll
2014-03-04 17:04 - 2013-10-05 00:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-03-04 17:04 - 2013-10-05 00:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\miutils.dll
2014-03-04 17:04 - 2013-10-05 00:15 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2014-03-04 17:04 - 2013-09-16 22:31 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-03-04 17:04 - 2013-09-16 20:37 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2014-03-04 17:04 - 2013-09-14 04:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2014-03-04 17:04 - 2013-09-14 02:05 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2014-03-04 17:04 - 2013-09-14 01:11 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2014-03-04 17:04 - 2013-09-13 00:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2014-03-04 17:04 - 2013-09-12 23:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe
2014-03-04 17:04 - 2013-09-12 00:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2014-03-04 17:04 - 2013-09-12 00:08 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-03-04 17:04 - 2013-09-12 00:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2014-03-04 17:04 - 2013-09-11 23:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2014-03-04 17:04 - 2013-09-11 23:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2014-03-04 17:04 - 2013-09-11 23:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2014-03-04 17:04 - 2013-09-11 23:16 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2014-03-04 17:04 - 2013-09-11 23:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2014-03-04 17:04 - 2013-09-09 20:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll
2014-03-04 17:03 - 2013-10-10 03:53 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2014-03-04 17:03 - 2013-10-10 03:21 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2014-03-04 17:01 - 2013-10-10 02:34 - 01085952 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-03-04 17:01 - 2013-10-10 02:27 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-03-04 16:58 - 2013-11-10 18:48 - 00039768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-03-04 16:58 - 2013-11-09 03:55 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2014-03-04 16:58 - 2013-11-08 22:37 - 01756160 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2014-03-04 16:58 - 2013-11-08 21:56 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2014-03-04 16:58 - 2013-11-08 02:26 - 00358896 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2014-03-04 16:58 - 2013-11-07 20:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2014-03-04 16:58 - 2013-11-07 20:16 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2014-03-04 16:58 - 2013-11-07 20:15 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2014-03-04 16:58 - 2013-11-07 19:41 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2014-03-04 16:58 - 2013-11-07 19:14 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2014-03-04 16:58 - 2013-11-05 06:19 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2014-03-04 16:58 - 2013-11-04 09:13 - 01530200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-03-04 16:58 - 2013-11-04 03:50 - 02143744 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-03-04 16:58 - 2013-11-04 02:32 - 02570240 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-03-04 16:58 - 2013-11-03 17:30 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2014-03-04 16:58 - 2013-11-01 03:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-03-04 16:58 - 2013-10-31 22:08 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2014-03-04 16:58 - 2013-10-30 16:58 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-03-04 16:58 - 2013-10-30 16:42 - 07399256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-03-04 16:58 - 2013-10-30 16:33 - 01642016 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-03-04 16:58 - 2013-10-30 16:33 - 01506680 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-03-04 16:58 - 2013-10-30 16:33 - 01476184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-03-04 16:58 - 2013-10-30 16:33 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-03-04 16:58 - 2013-10-25 17:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys
2014-03-04 16:58 - 2013-10-17 03:21 - 02896896 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-03-04 16:58 - 2013-10-17 02:36 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2014-03-04 16:58 - 2013-10-05 06:21 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-03-04 16:58 - 2013-10-05 04:05 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-03-04 15:58 - 2013-10-05 06:21 - 00516496 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-03-04 15:58 - 2013-10-05 04:05 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-03-04 15:57 - 2013-11-04 09:13 - 00382808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-03-04 15:57 - 2013-11-04 05:07 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-03-04 15:57 - 2013-11-03 18:28 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-03-04 15:57 - 2013-10-31 21:57 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2014-03-04 15:57 - 2013-10-24 01:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2014-03-04 15:57 - 2013-10-24 01:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2014-03-04 15:52 - 2013-10-19 00:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-03-04 15:52 - 2013-10-18 23:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-03-04 15:50 - 2013-12-08 16:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-03-04 15:50 - 2013-12-08 15:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-03-04 15:48 - 2014-01-06 21:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-03-04 15:48 - 2014-01-06 20:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-03-04 15:48 - 2013-12-08 16:27 - 02152448 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-03-04 15:48 - 2013-12-08 15:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-03-04 15:48 - 2013-11-27 07:36 - 03395920 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2014-03-04 15:48 - 2013-11-27 03:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2014-03-04 15:48 - 2013-11-27 02:34 - 00138240 _____ () C:\Windows\system32\OEMLicense.dll
2014-03-04 15:48 - 2013-11-27 01:54 - 00103936 _____ () C:\Windows\SysWOW64\OEMLicense.dll
2014-03-04 15:48 - 2013-11-27 00:48 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-04 15:48 - 2013-11-27 00:45 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2014-03-04 15:48 - 2013-11-27 00:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-04 15:48 - 2013-11-27 00:38 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2014-03-04 15:48 - 2013-11-27 00:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-03-04 15:48 - 2013-11-27 00:12 - 00848384 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-03-04 15:48 - 2013-11-22 20:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-03-04 15:48 - 2013-11-22 20:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-03-04 15:48 - 2013-11-20 22:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-03-04 15:48 - 2013-11-20 21:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-03-04 15:48 - 2013-10-12 18:48 - 00136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2014-03-04 15:48 - 2013-10-12 13:48 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-03-04 15:48 - 2013-10-12 13:34 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-03-04 15:47 - 2014-02-06 04:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-04 15:47 - 2014-02-06 03:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-04 15:47 - 2014-02-06 03:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-04 15:47 - 2014-02-06 03:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-04 15:47 - 2014-02-06 03:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-04 15:47 - 2014-02-06 03:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-04 15:47 - 2014-02-06 02:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-04 15:47 - 2014-02-06 02:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-04 15:47 - 2014-02-06 02:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-04 15:47 - 2014-02-06 02:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-04 15:47 - 2014-02-06 02:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-04 15:47 - 2014-02-06 02:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-04 15:47 - 2014-02-06 02:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-04 15:47 - 2014-02-06 02:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-04 15:47 - 2014-02-06 02:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-04 15:47 - 2014-02-06 02:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-04 15:47 - 2014-02-06 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-04 15:47 - 2014-02-06 02:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-04 15:47 - 2014-02-06 01:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-04 15:47 - 2014-02-06 01:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-04 15:47 - 2014-02-06 01:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-04 15:47 - 2014-02-06 01:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-04 15:47 - 2014-02-06 01:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-04 15:47 - 2014-02-06 01:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-04 15:47 - 2014-02-06 01:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-04 15:47 - 2014-02-06 01:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-04 15:47 - 2014-02-06 01:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-04 15:47 - 2014-02-06 01:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-04 15:47 - 2014-02-06 01:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-04 15:47 - 2014-02-06 01:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-04 15:47 - 2014-02-06 01:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-04 15:47 - 2014-02-06 01:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-04 15:47 - 2014-02-06 00:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-04 15:47 - 2014-02-06 00:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-04 15:47 - 2014-02-06 00:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-04 15:47 - 2014-02-06 00:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-04 15:47 - 2014-02-06 00:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-04 15:47 - 2014-01-04 12:50 - 01462216 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-03-04 15:47 - 2014-01-04 11:22 - 01202888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-03-04 15:47 - 2014-01-04 06:30 - 13209088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-03-04 15:47 - 2014-01-04 06:23 - 11702272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-03-04 15:47 - 2014-01-04 05:42 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-03-04 15:47 - 2014-01-04 05:40 - 07416832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-03-04 15:47 - 2014-01-04 05:36 - 00830976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-03-04 15:47 - 2014-01-04 05:28 - 04961792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-03-04 15:47 - 2013-12-20 18:10 - 00009701 _____ () C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms
2014-03-04 15:47 - 2013-12-20 18:10 - 00009701 _____ () C:\Windows\system32\connectedsearch-results.searchconnector-ms
2014-03-04 15:44 - 2014-01-06 23:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2014-03-04 15:44 - 2014-01-06 21:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe
2014-03-04 15:44 - 2013-12-20 02:10 - 01113040 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-03-04 15:44 - 2013-12-19 22:13 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-03-04 15:44 - 2013-12-08 16:15 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-03-04 15:44 - 2013-11-08 22:34 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-03-04 15:44 - 2013-11-08 22:34 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2014-03-04 15:44 - 2013-11-08 21:52 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2014-03-04 15:44 - 2013-10-16 07:58 - 01943536 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-03-04 15:44 - 2013-10-16 05:54 - 01581968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-03-04 15:39 - 2013-12-08 18:57 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-04 15:39 - 2013-12-08 17:51 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-04 15:39 - 2013-10-23 03:01 - 00872840 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-03-04 15:39 - 2013-10-15 00:54 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-03-04 15:39 - 2013-10-15 00:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-03-04 15:39 - 2013-10-05 06:21 - 01341288 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-03-04 15:39 - 2013-10-05 00:39 - 01067008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-03-04 15:38 - 2013-10-23 00:59 - 00698232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-03-04 15:29 - 2014-03-04 15:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-04 15:29 - 2014-02-04 19:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-04 15:26 - 2014-01-09 00:25 - 02804224 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-03-04 15:26 - 2014-01-08 23:59 - 01020928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-03-04 15:26 - 2014-01-08 23:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-03-04 15:26 - 2014-01-08 23:49 - 00919040 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-03-04 15:26 - 2014-01-08 23:44 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-03-04 15:26 - 2014-01-08 23:43 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-03-04 15:26 - 2014-01-08 23:29 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-03-04 15:26 - 2014-01-08 23:28 - 04217344 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-03-04 15:26 - 2014-01-08 23:28 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-03-04 15:26 - 2014-01-08 23:18 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-03-04 14:30 - 2014-03-06 11:56 - 00012800 ___SH () C:\Users\denis\Downloads\Thumbs.db
2014-03-03 18:18 - 2014-03-03 18:18 - 00014336 ___SH () C:\Users\denis\Desktop\Thumbs.db
2014-03-03 17:49 - 2014-03-03 17:49 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple Computer
2014-03-03 17:48 - 2014-03-03 17:52 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Apple Computer
2014-03-03 17:48 - 2014-03-03 17:48 - 00001806 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-03 17:48 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-03-03 17:46 - 2014-03-03 17:48 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-03 17:46 - 2014-03-03 17:48 - 00000000 ____D () C:\Program Files\iTunes
2014-03-03 17:46 - 2014-03-03 17:48 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files\iPod
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-03-03 17:34 - 2014-03-03 17:35 - 00000000 ____D () C:\ProgramData\Apple
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files\Bonjour
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-03-03 17:27 - 2014-03-03 17:30 - 148885840 _____ (Apple Inc.) C:\Users\denis\Downloads\iTunes64Setup.exe
2014-03-03 15:08 - 2014-03-03 15:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-03-03 13:05 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2014-02-28 15:08 - 2014-02-28 15:08 - 00000000 ____D () C:\Users\denis\AppData\Roaming\sMedio
2014-02-28 14:49 - 2014-03-07 16:00 - 00002206 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-28 14:48 - 2014-03-07 16:00 - 00001130 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-28 14:48 - 2014-03-07 15:53 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-28 14:48 - 2014-02-28 14:49 - 00000000 ____D () C:\Users\denis\AppData\Local\Google
2014-02-28 14:48 - 2014-02-28 14:49 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-28 14:48 - 2014-02-28 14:48 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-28 14:48 - 2014-02-28 14:48 - 00003870 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-28 14:47 - 2014-02-28 14:48 - 00000000 ____D () C:\Users\denis\AppData\Local\Deployment
2014-02-28 14:47 - 2014-02-28 14:47 - 00000000 ____D () C:\Users\denis\AppData\Local\Apps\2.0
2014-02-28 05:44 - 2014-02-28 05:44 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Macromedia
2014-02-28 05:39 - 2014-03-07 16:01 - 00000000 __RDO () C:\Users\denis\SkyDrive
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Roaming\ATI
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Local\ATI
2014-02-28 05:36 - 2014-03-07 16:35 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1049019668-2146566754-1573291962-1001
2014-02-28 05:35 - 2014-02-28 05:35 - 00000000 ____D () C:\ProgramData\ToshibaEurope
2014-02-28 05:33 - 2014-03-03 13:58 - 00000000 ____D () C:\Users\denis\AppData\Local\TOSHIBA
2014-02-28 05:29 - 2014-03-07 16:00 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-28 05:29 - 2014-03-07 16:00 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-28 05:29 - 2014-03-06 11:32 - 00000000 ____D () C:\Users\denis\AppData\Local\Packages
2014-02-28 05:29 - 2014-02-28 05:29 - 00001465 _____ () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Adobe
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Local\VirtualStore
2014-02-28 05:27 - 2014-03-06 13:06 - 00000000 ____D () C:\Users\denis
2014-02-28 05:27 - 2014-02-28 05:27 - 00000020 ___SH () C:\Users\denis\ntuser.ini
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Vorlagen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Startmenü
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Netzwerkumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Lokale Einstellungen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Eigene Dateien
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Druckumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Musik
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Bilder
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Verlauf
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Anwendungsdaten
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Anwendungsdaten
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-02-28 05:27 - 2013-08-22 07:36 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

2014-03-07 16:47 - 2014-03-07 11:51 - 00014079 _____ () C:\Users\denis\Downloads\FRST.txt
2014-03-07 16:46 - 2014-03-07 16:46 - 02156544 _____ (Farbar) C:\Users\denis\Downloads\FRST64 (1).exe
2014-03-07 16:46 - 2014-03-07 11:50 - 00000000 ____D () C:\FRST
2014-03-07 16:43 - 2014-03-07 16:43 - 00000761 _____ () C:\Users\denis\Desktop\JRT.txt
2014-03-07 16:35 - 2014-02-28 05:36 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1049019668-2146566754-1573291962-1001
2014-03-07 16:22 - 2014-03-07 16:22 - 00000000 ____D () C:\Windows\ERUNT
2014-03-07 16:19 - 2014-03-07 16:19 - 01037734 _____ (Thisisu) C:\Users\denis\Desktop\JRT.exe
2014-03-07 16:05 - 2014-01-23 14:33 - 00001871 _____ () C:\Users\Public\Desktop\McAfee LiveSafe – Internet Security.lnk
2014-03-07 16:01 - 2014-02-28 05:39 - 00000000 __RDO () C:\Users\denis\SkyDrive
2014-03-07 16:00 - 2014-02-28 14:49 - 00002206 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-07 16:00 - 2014-02-28 14:48 - 00001130 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-07 16:00 - 2014-02-28 05:29 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-07 16:00 - 2014-02-28 05:29 - 00000000 ___RD () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-07 16:00 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\sru
2014-03-07 15:59 - 2013-11-27 09:01 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-07 15:59 - 2013-08-28 01:59 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-03-07 15:59 - 2013-08-28 01:59 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-03-07 15:55 - 2014-01-23 14:31 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-03-07 15:55 - 2013-08-22 06:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-07 15:55 - 2013-08-22 06:44 - 00336024 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-07 15:55 - 2013-08-22 05:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-03-07 15:54 - 2013-11-27 17:48 - 00004920 _____ () C:\Windows\PFRO.log
2014-03-07 15:54 - 2013-08-22 05:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-03-07 15:53 - 2014-02-28 14:48 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-07 15:53 - 2013-08-22 07:36 - 00000000 ___RD () C:\Windows\ToastData
2014-03-07 15:53 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-03-07 15:53 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\system32\Dism
2014-03-07 15:51 - 2014-01-23 14:03 - 01630873 _____ () C:\Windows\WindowsUpdate.log
2014-03-07 15:46 - 2014-03-07 15:44 - 00000000 ____D () C:\AdwCleaner
2014-03-07 15:44 - 2014-03-07 15:44 - 01244192 _____ () C:\Users\denis\Downloads\adwcleaner.exe
2014-03-07 14:50 - 2014-03-07 14:50 - 12435779 _____ () C:\Users\denis\Desktop\mbar-1.07.0.1009.zip
2014-03-07 14:49 - 2014-03-07 14:49 - 01110476 _____ () C:\Users\denis\Downloads\7z920.exe
2014-03-07 14:49 - 2014-03-07 14:49 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-03-07 14:40 - 2014-03-07 13:57 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-07 14:40 - 2014-03-07 13:50 - 00000000 ____D () C:\Users\denis\Desktop\mbar
2014-03-07 13:57 - 2014-03-07 13:57 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-07 13:57 - 2014-03-07 13:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-07 13:56 - 2014-03-07 13:50 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-07 13:45 - 2014-03-07 13:45 - 12589848 _____ (Malwarebytes Corp.) C:\Users\denis\Desktop\mbar-1.07.0.1009.exe
2014-03-07 11:56 - 2014-03-07 11:54 - 00048691 _____ () C:\Users\denis\Downloads\Addition.txt
2014-03-07 11:46 - 2014-03-07 11:46 - 01145344 _____ (Farbar) C:\Users\denis\Downloads\FRST.exe
2014-03-07 11:43 - 2014-03-07 11:43 - 02156544 _____ (Farbar) C:\Users\denis\Downloads\FRST64.exe
2014-03-07 10:47 - 2014-03-07 10:47 - 00050477 _____ () C:\Users\denis\Downloads\Defogger.exe
2014-03-06 17:08 - 2014-01-23 14:04 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-03-06 17:06 - 2014-01-23 14:31 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-03-06 17:05 - 2013-08-22 07:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-03-06 13:06 - 2014-02-28 05:27 - 00000000 ____D () C:\Users\denis
2014-03-06 11:56 - 2014-03-04 14:30 - 00012800 ___SH () C:\Users\denis\Downloads\Thumbs.db
2014-03-06 11:37 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-03-06 11:32 - 2014-03-06 10:45 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-03-06 11:32 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Local\Packages
2014-03-06 10:51 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-03-06 10:51 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\FileManager
2014-03-06 10:51 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\Camera
2014-03-06 10:45 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\WinStore
2014-03-06 10:45 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\migwiz
2014-03-06 10:45 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-05 18:19 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-03-04 22:33 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-03-04 22:18 - 2014-03-04 22:17 - 02259395 _____ () C:\Users\denis\Downloads\RWM-backup-20140219.zip
2014-03-04 22:06 - 2014-03-04 22:06 - 00001591 _____ () C:\Users\Public\Desktop\SPG-Verein.lnk
2014-03-04 22:05 - 2014-03-04 22:05 - 00000000 ____D () C:\spg
2014-03-04 18:35 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\rescache
2014-03-04 15:55 - 2013-08-28 01:58 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-03-04 15:55 - 2013-08-22 11:11 - 00000000 ____D () C:\Program Files\Windows Journal
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\winrm
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\WCN
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\slmgr
2014-03-04 15:55 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\SysWOW64\Com
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\MUI
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\Com
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\IME
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\Help
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-03-04 15:55 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-03-04 15:55 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\servicing
2014-03-04 15:49 - 2013-08-22 07:36 - 00000000 ___SD () C:\Windows\system32\dsc
2014-03-04 15:31 - 2014-03-04 15:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-03 18:44 - 2013-08-22 06:46 - 00019173 _____ () C:\Windows\setupact.log
2014-03-03 18:18 - 2014-03-03 18:18 - 00014336 ___SH () C:\Users\denis\Desktop\Thumbs.db
2014-03-03 17:52 - 2014-03-03 17:48 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Apple Computer
2014-03-03 17:49 - 2014-03-03 17:49 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple Computer
2014-03-03 17:48 - 2014-03-03 17:48 - 00001806 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-03 17:48 - 2014-03-03 17:46 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-03 17:48 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files\iTunes
2014-03-03 17:48 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Program Files\iPod
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Users\denis\AppData\Local\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-03-03 17:35 - 2014-03-03 17:35 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-03-03 17:35 - 2014-03-03 17:34 - 00000000 ____D () C:\ProgramData\Apple
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files\Bonjour
2014-03-03 17:34 - 2014-03-03 17:34 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-03-03 17:30 - 2014-03-03 17:27 - 148885840 _____ (Apple Inc.) C:\Users\denis\Downloads\iTunes64Setup.exe
2014-03-03 15:08 - 2014-03-03 15:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-03-03 13:58 - 2014-02-28 05:33 - 00000000 ____D () C:\Users\denis\AppData\Local\TOSHIBA
2014-03-03 13:04 - 2014-01-23 14:31 - 00000000 ____D () C:\ProgramData\McAfee
2014-03-03 12:56 - 2014-01-23 14:04 - 00000000 ____D () C:\ProgramData\AMD
2014-02-28 15:08 - 2014-02-28 15:08 - 00000000 ____D () C:\Users\denis\AppData\Roaming\sMedio
2014-02-28 14:49 - 2014-02-28 14:48 - 00000000 ____D () C:\Users\denis\AppData\Local\Google
2014-02-28 14:49 - 2014-02-28 14:48 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-28 14:48 - 2014-02-28 14:48 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-28 14:48 - 2014-02-28 14:48 - 00003870 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-28 14:48 - 2014-02-28 14:47 - 00000000 ____D () C:\Users\denis\AppData\Local\Deployment
2014-02-28 14:47 - 2014-02-28 14:47 - 00000000 ____D () C:\Users\denis\AppData\Local\Apps\2.0
2014-02-28 05:44 - 2014-02-28 05:44 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Macromedia
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Roaming\ATI
2014-02-28 05:38 - 2014-02-28 05:38 - 00000000 ____D () C:\Users\denis\AppData\Local\ATI
2014-02-28 05:35 - 2014-02-28 05:35 - 00000000 ____D () C:\ProgramData\ToshibaEurope
2014-02-28 05:34 - 2014-01-23 14:22 - 00000000 ____D () C:\Windows\System32\Tasks\TOSHIBA
2014-02-28 05:34 - 2013-11-27 09:02 - 00000000 ____D () C:\ProgramData\Toshiba
2014-02-28 05:29 - 2014-02-28 05:29 - 00001465 _____ () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Roaming\Adobe
2014-02-28 05:29 - 2014-02-28 05:29 - 00000000 ____D () C:\Users\denis\AppData\Local\VirtualStore
2014-02-28 05:29 - 2013-08-22 11:09 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-02-28 05:27 - 2014-02-28 05:27 - 00000020 ___SH () C:\Users\denis\ntuser.ini
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Vorlagen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Startmenü
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Netzwerkumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Lokale Einstellungen
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Eigene Dateien
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Druckumgebung
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Musik
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Documents\Eigene Bilder
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Verlauf
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\AppData\Local\Anwendungsdaten
2014-02-28 05:27 - 2014-02-28 05:27 - 00000000 _SHDL () C:\Users\denis\Anwendungsdaten
2014-02-28 05:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\restore
2014-02-17 13:00 - 2013-08-22 07:38 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-17 13:00 - 2013-08-22 07:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-06 04:16 - 2014-03-04 15:47 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 03:30 - 2014-03-04 15:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 03:30 - 2014-03-04 15:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 03:12 - 2014-03-04 15:47 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 03:07 - 2014-03-04 15:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 03:06 - 2014-03-04 15:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 02:57 - 2014-03-04 15:47 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 02:56 - 2014-03-04 15:47 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 02:49 - 2014-03-04 15:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 02:48 - 2014-03-04 15:47 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 02:48 - 2014-03-04 15:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 02:38 - 2014-03-04 15:47 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 02:32 - 2014-03-04 15:47 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 02:20 - 2014-03-04 15:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 02:17 - 2014-03-04 15:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 02:11 - 2014-03-04 15:47 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 02:01 - 2014-03-04 15:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 02:00 - 2014-03-04 15:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 01:57 - 2014-03-04 15:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 01:57 - 2014-03-04 15:47 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 01:52 - 2014-03-04 15:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 01:52 - 2014-03-04 15:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 01:50 - 2014-03-04 15:47 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 01:47 - 2014-03-04 15:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 01:46 - 2014-03-04 15:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 01:25 - 2014-03-04 15:47 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 01:25 - 2014-03-04 15:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 01:24 - 2014-03-04 15:47 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 01:22 - 2014-03-04 15:47 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 01:13 - 2014-03-04 15:47 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 01:09 - 2014-03-04 15:47 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 01:03 - 2014-03-04 15:47 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 00:55 - 2014-03-04 15:47 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 00:41 - 2014-03-04 15:47 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 00:40 - 2014-03-04 15:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 00:36 - 2014-03-04 15:47 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 00:34 - 2014-03-04 15:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

Some content of TEMP:
====================
C:\Users\denis\AppData\Local\Temp\ICReinstall_Open OfficeSetup.exe
C:\Users\denis\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-27 17:49

==================== End Of Log ============================

--- --- ---

cosinus · 07.03.2014, 19:20

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

pktcarsten · 08.03.2014, 17:16

Vielen Dank für diese super Hilfe!

Hier der Report von MBAM:

Malwarebytes Anti-Malware (Test) 1.75.0.1300
Malwarebytes : Free Anti-Malware

Datenbank Version: v2014.03.08.06

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16518
denis :: DENISTOSHIBA [Administrator]

Schutz: Aktiviert

08.03.2014 16:54:49
mbam-log-2014-03-08 (16-54-49).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 212034
Laufzeit: 11 Minute(n), 29 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 4
HKCR\Typelib\{FBC322D5-407E-4854-8C0B-555B951FD8E3} (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{0400EBCA-042C-4000-AA89-9713FBEDB671} (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\FindRight (PUP.Optional.FindRight.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\Software\FindRight (PUP.Optional.FindRight.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\denis\AppData\Local\Temp\is147557984\mysearchdial.dll (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

cosinus · 08.03.2014, 18:34

Nur Reste. Was ist mit ESET?

07.03.2014, 11:43	#4
deeprybka /// TB-Ausbilder /// Anleitungs-Guru	Advanced System Protector (u. RegCleanPro) entfernen (Windows 8.1) Du oder Ich Arne? __________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

07.03.2014, 11:55	#5
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Advanced System Protector (u. RegCleanPro) entfernen (Windows 8.1) Ich natürlich, du bist zu langsam __________________ Logfiles bitte immer in CODE-Tags posten

08.03.2014, 18:34	#15
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Advanced System Protector (u. RegCleanPro) entfernen (Windows 8.1) Nur Reste. Was ist mit ESET? __________________ Logfiles bitte immer in CODE-Tags posten

Advanced System Protector (u. RegCleanPro) entfernen (Windows 8.1)

Plagegeister aller Art und deren Bekämpfung: Advanced System Protector (u. RegCleanPro) entfernen (Windows 8.1)